Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa
File:                     fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa (raw, json)
Hash identifier:          mczqePR799ng2wC6Ozj7lUKyqx+Rr+PT8mn7Uap4dBs=
Subject key identifier:   55:59:8D:9B:01:F6:57:CB:35:2C:51:EA:84:EB:4A:A7:71:0D:62:1C
Certificate issuer:       /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
Certificate serial:       010D0C9F4328584ABD4B97E17F52906653AD2680
Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     16941
IP address blocks:        208.70.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:97:e1:7f:52:90:66:53:ad:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=009d1d86-0c5b-4776-9897-f5d830f09879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b6:4f:86:37:22:f9:70:68:61:ae:92:97:e2:
                    54:91:1e:71:5d:19:9a:e4:dc:9d:95:b7:b0:99:1c:
                    73:ef:40:c3:77:e2:e2:e4:4f:16:07:b5:46:d2:00:
                    66:25:b5:4e:c4:2c:bc:6b:72:47:f2:c7:c0:a7:87:
                    3e:43:f9:c2:28:8e:d0:a7:c0:4a:1a:e4:68:72:68:
                    6e:be:13:54:3d:28:f8:af:20:6a:53:8b:f7:ba:d6:
                    32:6a:7e:f3:e0:f8:a5:86:c6:53:b5:31:bc:ae:05:
                    8a:f7:02:6a:f4:a1:03:bd:57:0f:66:84:a2:cc:23:
                    7f:da:29:b0:23:1d:0e:64:9c:b6:a4:54:13:10:f5:
                    4d:4f:36:a6:c9:ca:50:ff:d4:c1:b3:78:19:8a:b0:
                    12:0c:a0:c5:a5:c1:f2:1b:fc:98:0a:bc:80:da:a0:
                    c5:bf:c0:32:b3:29:cb:fc:e9:b6:db:17:1f:32:27:
                    f5:77:a1:09:68:1f:e5:7d:84:3f:cd:c3:d5:82:ee:
                    2a:1a:5d:7c:1f:c6:09:25:0e:25:2c:62:12:b8:65:
                    4d:4c:36:af:10:a6:3e:10:91:cb:ea:90:6a:38:fe:
                    6b:7f:a5:6a:fc:3a:0f:1a:ce:a6:94:28:75:42:cd:
                    50:ee:4a:ee:50:0f:a2:9c:ba:03:04:6d:a8:e2:80:
                    87:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:59:8D:9B:01:F6:57:CB:35:2C:51:EA:84:EB:4A:A7:71:0D:62:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl

            X509v3 Authority Key Identifier:
                keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c2:c0:6e:00:ae:ae:53:fd:e4:b9:cb:51:5c:0a:17:f9:f5:
         dd:dc:c6:d3:b8:1f:32:85:98:13:0b:24:38:c8:c1:d3:f5:6b:
         09:e5:34:80:e9:7d:90:a5:c6:5d:88:c6:fe:0c:59:5d:8f:fc:
         53:55:4b:f3:48:b5:b5:16:42:85:64:8e:41:c4:7e:6b:8e:31:
         ba:b5:20:51:af:6b:08:ce:2d:89:96:f2:5c:ae:a3:b0:10:c1:
         0d:4a:1c:4f:ec:92:31:d4:b6:53:9e:27:92:01:01:aa:8b:88:
         44:fb:a9:b0:ac:56:59:c6:13:99:15:39:f8:9b:48:78:54:13:
         50:c3:fb:ca:48:14:1a:d5:70:75:f6:1c:a3:44:50:0e:96:c8:
         66:3e:c5:35:2d:09:f3:70:a1:8c:e3:0e:72:32:1d:44:41:1b:
         4c:95:b4:da:b0:38:92:73:59:3d:59:92:a5:09:e5:7f:90:0e:
         1d:71:ea:e7:d7:39:70:b2:1d:7f:e5:a9:ef:c6:47:af:45:44:
         3b:fc:fe:c2:10:48:ac:f7:cd:c2:14:ca:6c:5c:c4:45:a9:d2:
         b0:b7:07:40:7a:14:92:d4:e6:05:0b:67:42:d7:cd:0d:7a:1c:
         d9:e1:c3:ea:13:b9:94:10:8e:28:41:ff:95:80:d3:e5:d1:66:
         46:28:09:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:09:19 2025 by rpki-client