Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/eb4568a8-40ad-37cf-a378-b31fd5aeb9ab.roa
File:                     eb4568a8-40ad-37cf-a378-b31fd5aeb9ab.roa (raw, json)
Hash identifier:          vuDz9XJx81CmR+bCGabBD7I8f3NjymB/JYqIfQU9nbk=
Subject key identifier:   F3:01:63:1E:49:DB:BF:A0:B4:C1:35:8A:48:11:CE:C2:1C:12:E3:45
Certificate issuer:       /CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
Certificate serial:       010D0C9F43285849A089D22BCBE7B34C72A166A0
Authority key identifier: E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/eb4568a8-40ad-37cf-a378-b31fd5aeb9ab.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     64124
IP address blocks:        76.72.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:d2:2b:cb:e7:b3:4c:72:a1:66:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=6a143ef4-7f1a-46d5-b7de-c5d4bab833f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:df:c3:0b:cf:54:92:26:0a:ed:ed:2a:9f:69:
                    6c:16:b9:65:fe:04:14:9e:49:42:91:84:d2:e0:e7:
                    c3:4d:1e:30:b5:33:f7:bf:e2:a4:d4:35:1c:eb:d0:
                    78:d2:4a:74:e7:06:da:97:55:23:5b:f9:26:52:d7:
                    67:e0:a9:cf:be:d0:23:dd:f3:f6:a6:47:51:57:2d:
                    fc:1a:24:52:ee:60:91:23:fc:ed:54:53:46:5c:f3:
                    f6:63:be:8b:78:a1:1f:ec:92:5b:d3:c5:0b:f3:ab:
                    e0:06:e1:58:45:c1:45:58:7f:82:db:6e:de:97:5a:
                    6a:37:43:ab:80:01:e1:8f:5b:ac:8b:2f:5f:b1:ab:
                    18:3b:f3:10:d0:ec:fd:98:68:2d:cf:c1:21:35:d6:
                    fd:e6:40:08:5f:8a:cc:6b:5f:46:1e:24:a0:5a:7d:
                    34:e0:e0:5d:34:1c:13:8d:be:2c:be:10:49:c4:48:
                    dc:12:35:f5:1d:2b:54:46:96:f3:a4:91:48:c0:2e:
                    9c:dd:bf:20:4d:62:f4:43:86:98:9a:5a:cf:7f:b3:
                    11:c2:92:df:9a:88:0e:49:f9:35:f5:6a:08:f5:e1:
                    ee:d3:f2:9d:93:14:be:d5:e5:12:6b:b5:22:08:e7:
                    1e:7e:1b:bf:76:8f:82:ef:7b:fc:1b:31:20:83:20:
                    cc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:01:63:1E:49:DB:BF:A0:B4:C1:35:8A:48:11:CE:C2:1C:12:E3:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/eb4568a8-40ad-37cf-a378-b31fd5aeb9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl

            X509v3 Authority Key Identifier:
                keyid:E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.72.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:23:3f:c5:cc:d3:ff:97:70:c7:b9:64:ef:75:60:70:88:03:
         9e:55:53:bf:b5:59:ca:89:4d:4e:2c:90:1f:fe:89:1a:39:07:
         d1:d3:ff:40:f3:7c:ab:2b:8a:f2:1e:07:ab:88:02:79:bf:bc:
         f5:f3:3a:b3:69:37:7f:d0:4e:b6:14:3c:7c:9a:d7:28:2a:cb:
         d8:9b:66:d8:08:27:8f:63:60:62:b0:e0:3c:53:8e:4b:6d:65:
         c4:6d:77:75:fa:ad:f0:07:ce:80:d9:43:5b:37:11:d8:08:88:
         a3:2b:29:8d:65:8e:fd:50:26:c3:25:41:38:29:bd:61:ac:45:
         1a:dc:a0:22:cc:49:60:fe:a0:82:fd:b8:62:ae:5b:93:96:d5:
         82:bf:b8:96:4a:00:b2:dd:7b:3e:b0:01:94:0d:ac:db:19:96:
         e2:86:9b:32:c7:da:e6:03:f5:8a:74:93:f4:c4:e7:d7:8d:91:
         75:b3:77:50:90:cd:4d:0b:66:fb:ff:b0:b6:b7:6e:16:83:9a:
         e3:74:84:d7:29:d1:80:24:74:15:5c:1e:a4:2e:12:65:40:e5:
         da:b0:f3:14:28:8b:e7:f8:23:72:03:17:c3:eb:7c:db:0e:5f:
         59:37:4c:ea:32:1d:fd:8a:3b:d5:37:45:f0:1f:d6:46:39:86:
         86:3e:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:01:04 2025 by rpki-client