Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa
File:                     fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa (raw, json)
Hash identifier:          B+EY+xJBMwgD2u5NfQtRkMmmOtPhnmzTf0QXGtqwRMk=
Subject key identifier:   E0:4D:FA:7D:4C:41:90:71:17:DF:2B:90:9C:D4:0E:0A:A1:50:2E:11
Certificate issuer:       /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
Certificate serial:       010D0C9F43285849DC8FC34A3EC980FA9828D900
Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     16941
IP address blocks:        208.70.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c3:4a:3e:c9:80:fa:98:28:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=93c03dc5-8795-4278-b452-35f45530f781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dc:f2:f5:cf:f5:aa:c9:9f:f8:ae:85:93:f5:
                    b8:41:be:5b:1b:8e:5e:cf:e1:7c:cf:50:9e:91:1a:
                    cf:a2:14:b4:eb:72:43:d8:12:28:e0:60:67:00:d8:
                    43:2c:ad:c9:82:64:d5:5d:eb:47:38:88:53:d0:79:
                    31:20:dd:76:33:3c:97:26:77:8a:e4:25:87:66:0e:
                    19:55:6a:ec:4f:9d:95:1a:6a:44:e6:c9:cc:5e:59:
                    2b:e7:7e:79:79:46:43:d9:83:6d:86:39:75:eb:40:
                    98:2d:36:c6:5f:e2:c4:5d:1d:e8:ac:f5:71:e7:41:
                    b1:a0:13:d0:1c:d4:1a:a6:6a:24:b4:eb:e0:39:28:
                    51:b2:9c:cb:73:c6:40:6b:7f:d8:36:3f:27:b5:fc:
                    cc:cb:97:a6:3e:86:94:48:8c:f4:bb:a3:9e:d8:a6:
                    53:19:5a:11:8a:8c:ca:27:9c:35:ef:fe:dc:2c:74:
                    cc:4d:7d:55:e3:7e:de:e4:6c:92:9d:4e:06:72:f4:
                    8e:ef:b2:76:90:93:8c:98:75:9f:98:a0:0a:e4:51:
                    2c:34:9c:2a:ea:46:86:2c:6b:c6:b3:1d:8a:c6:43:
                    72:e2:db:8d:8a:f5:a7:42:9e:52:c3:a6:40:8d:87:
                    52:2d:f7:38:65:1a:06:e9:e7:58:f5:bc:9d:71:82:
                    a1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4D:FA:7D:4C:41:90:71:17:DF:2B:90:9C:D4:0E:0A:A1:50:2E:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl

            X509v3 Authority Key Identifier:
                keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e9:6b:2a:3f:76:d6:cf:6a:8a:74:b5:d0:bc:21:c8:9f:30:
         38:a3:e9:d0:5c:15:32:15:80:75:0f:a8:9a:c6:37:42:9a:06:
         36:c9:cf:d7:d7:62:7a:76:62:2b:63:5f:02:9e:dd:a1:72:1d:
         6b:90:85:fd:73:dc:c5:71:34:70:94:8a:4b:25:bb:70:3b:d7:
         cb:2c:1f:bd:02:75:0a:81:ca:ce:ec:01:e5:bf:a3:1d:b2:5c:
         62:40:c7:e0:58:9f:e5:86:42:5e:8b:70:7c:e7:b5:d1:26:3c:
         6f:fa:93:80:13:f2:c7:04:3a:7b:a5:53:90:c8:7a:a6:6a:1f:
         97:ac:8d:62:38:a3:16:4b:18:2f:01:52:8e:96:fc:1d:aa:1c:
         27:d1:5f:13:f2:c7:00:5c:26:76:15:ce:35:9c:67:34:c1:80:
         ca:25:a4:0a:47:2f:93:c5:32:7a:9f:d6:38:ed:80:02:af:44:
         88:bc:ba:a6:70:0a:2a:e9:c2:79:83:4e:90:2c:93:95:17:26:
         17:5a:ec:1a:17:0a:13:90:5d:e2:c8:7d:8f:f3:51:b2:a7:a5:
         b9:91:8d:67:3d:96:61:f9:60:25:12:20:ec:a2:3c:d7:ed:d7:
         cc:aa:e1:ef:5e:83:61:37:2a:b3:7a:2c:ce:99:c9:45:30:7d:
         9a:e9:e5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:31:05 2025 by rpki-client