Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fc61be5d-01ed-339c-93c8-9781410753b3.roa
File:                     fc61be5d-01ed-339c-93c8-9781410753b3.roa (raw, json)
Hash identifier:          Q2jz5/x29iwbGoNEP0MClnmnpYor7xO5wbUHSGNL2tE=
Subject key identifier:   3F:53:E7:A5:7C:DD:58:A5:AE:EC:91:42:E1:37:E7:E5:A4:0F:DC:6E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA93106AFCE1911B7F2880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fc61be5d-01ed-339c-93c8-9781410753b3.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     577
IP address blocks:        76.71.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:93:10:6a:fc:e1:91:1b:7f:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=0b6cd0d5-6c5a-44c1-b7bb-155659b78243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4a:94:c6:0c:d0:5c:0b:02:4e:95:5c:4f:2c:
                    aa:80:09:5c:53:d3:1b:c9:b0:58:f8:4d:3b:91:b5:
                    69:cf:4c:4f:a8:f4:f7:16:6d:fb:df:b8:ef:17:c5:
                    85:93:a8:f2:1f:dc:9e:32:28:c3:5d:c2:9a:73:4a:
                    63:95:6d:ed:af:85:df:87:77:be:f7:32:61:c8:ce:
                    25:7c:07:d8:d4:c7:53:53:c4:26:22:24:be:ea:b2:
                    aa:30:cf:85:0a:85:4f:aa:b5:d8:11:d7:a6:0e:67:
                    7f:e8:91:b5:87:99:05:f6:c0:c9:5c:b8:68:6e:56:
                    a6:37:9d:b3:9d:c5:8b:18:d5:ee:06:6c:9f:cf:bb:
                    05:8d:96:41:c3:60:f2:3f:86:f2:1a:5d:ec:5f:cf:
                    c4:17:ff:4a:97:28:59:8f:8d:d7:2d:90:74:1c:8a:
                    70:c1:c6:9d:40:e9:80:4f:4c:2d:3e:b8:bf:34:4b:
                    a8:30:2a:21:9b:a9:e4:bd:f4:2b:ed:ea:45:e8:2a:
                    d5:74:01:b9:76:22:67:0b:0b:61:40:49:c8:b2:49:
                    32:4d:f7:2a:f8:db:19:a7:b1:88:60:fa:b2:98:3a:
                    66:1f:50:52:b9:20:f3:c2:41:b6:1f:59:ce:a6:23:
                    c9:6b:4e:0a:5c:20:98:4f:34:b0:9b:cf:eb:ed:2f:
                    de:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:53:E7:A5:7C:DD:58:A5:AE:EC:91:42:E1:37:E7:E5:A4:0F:DC:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fc61be5d-01ed-339c-93c8-9781410753b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.71.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:a9:51:25:86:3e:be:06:f1:0a:6b:9b:cd:e6:81:d6:80:40:
         88:fb:c9:8b:1c:3f:36:03:08:9c:eb:fc:ac:3c:04:a7:8b:7d:
         f4:6e:aa:ff:30:94:41:7d:b5:57:5c:79:87:3d:19:39:6d:ff:
         92:11:db:ba:55:0c:57:93:99:e6:a9:f7:af:6f:88:bc:4d:a2:
         1a:10:9a:0e:82:d0:7c:99:1b:cf:38:7f:ef:f0:37:f9:41:64:
         d6:9f:fe:f4:7d:a5:61:57:4e:26:d5:99:e9:e1:a2:55:84:8b:
         f7:55:6b:79:96:f6:30:46:03:b5:67:5b:cb:44:7a:3a:d5:e1:
         54:10:2a:68:c9:f9:b8:be:fa:6b:3e:3a:7d:46:33:86:b3:a7:
         77:f1:94:f6:db:60:e0:b1:31:e3:a7:69:1a:a5:7e:07:6c:b0:
         59:92:46:c5:29:f6:0e:5b:c9:2d:b7:42:10:fb:63:4a:2d:f5:
         19:c9:0d:dc:49:5d:9e:f1:7d:55:22:87:dc:2e:96:c4:63:f5:
         1f:71:57:17:0e:40:9b:44:fd:6b:c2:f3:ba:7e:f4:f6:1a:17:
         b1:fa:e3:11:86:1f:86:78:9e:8f:99:49:6d:c7:07:a6:f1:b8:
         c0:d1:8f:86:52:b9:d3:23:3b:30:d6:3d:04:d2:ca:d2:b5:15:
         85:56:83:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:00 2025 by rpki-client