Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/700576cd-5486-38d9-95b9-1fe93c81881f.roa
File:                     700576cd-5486-38d9-95b9-1fe93c81881f.roa (raw, json)
Hash identifier:          tFAV0/cpNdp2KxUR19CLPPNIZV+TscxMa3x8pFukif8=
Subject key identifier:   D2:E7:6F:59:D4:F8:8D:8A:0B:F4:18:D8:BE:38:EE:C8:20:91:99:26
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584A23C01C1B3F637711BAA7B600
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/700576cd-5486-38d9-95b9-1fe93c81881f.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     4922
IP address blocks:        76.77.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:1c:1b:3f:63:77:11:ba:a7:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=c5b57c04-9fa0-44cc-b8d7-d1fe025fbc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:20:2e:f3:e6:b0:fa:d9:9b:15:9b:42:34:3c:
                    b2:22:fb:51:78:fe:c5:26:18:c4:0f:24:e5:e8:3a:
                    46:17:94:6d:af:8f:91:3e:29:87:f1:ef:fc:67:63:
                    10:2e:03:a6:ff:f5:8e:d6:95:f2:59:7a:b1:e5:18:
                    39:34:3a:6f:e7:0e:46:f2:f0:0c:bb:45:3d:a6:38:
                    b6:79:11:7e:2b:36:d6:7f:38:17:f9:97:a7:5d:04:
                    67:d1:28:73:4c:57:97:b9:1d:61:93:fa:9d:1c:67:
                    26:e1:4a:aa:e4:86:d0:dd:76:fb:52:80:98:fc:dc:
                    93:f9:f9:10:7d:c6:aa:8c:18:86:04:f3:b2:f7:c7:
                    07:55:bc:8b:fe:1d:0a:c2:b4:a0:22:a1:30:6f:d6:
                    03:56:11:59:cb:f7:0b:91:06:5c:e5:7d:87:12:6a:
                    a5:39:00:77:65:65:11:0f:45:6d:04:ea:19:09:93:
                    f6:dc:ae:75:04:89:c6:2d:c8:f9:18:27:ef:48:a4:
                    f3:e5:15:06:15:78:78:0e:9d:aa:15:ba:1d:18:e8:
                    b4:bc:15:8d:81:03:ac:e1:4a:26:1d:c8:7b:86:4d:
                    7b:25:c1:d0:2f:05:20:b9:64:bb:2a:f3:87:cf:c9:
                    a3:98:2c:b8:20:d3:6b:43:3f:7a:44:77:1a:a0:4a:
                    71:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E7:6F:59:D4:F8:8D:8A:0B:F4:18:D8:BE:38:EE:C8:20:91:99:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/700576cd-5486-38d9-95b9-1fe93c81881f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:29:8e:5c:cb:ca:08:4a:94:c8:5c:6d:42:08:b6:41:d4:48:
         6c:21:04:83:73:aa:5d:27:bc:19:61:71:1f:83:e3:8a:80:bb:
         19:a9:89:cb:9f:1d:2f:e4:f0:e4:e5:81:e9:02:d7:20:bd:85:
         2b:12:fc:d2:9e:54:e0:51:d6:73:67:3f:b5:0c:a0:58:82:72:
         35:11:06:45:3b:6e:f8:43:cd:23:8d:12:9c:76:43:89:63:ef:
         03:bb:d1:65:53:09:0f:4c:a2:51:85:98:aa:b9:80:a5:b9:84:
         aa:06:ca:eb:88:6c:19:aa:9a:8c:e5:cd:e9:48:ce:1f:a6:f5:
         45:d9:e5:2c:a3:ad:e8:a8:3e:c6:1e:85:63:4f:f4:ff:6b:66:
         ff:3c:67:86:51:f4:67:84:38:8c:7b:03:70:b3:2b:78:64:5c:
         7b:4e:1d:6c:ba:a9:72:a7:d8:b2:9c:bf:c1:e6:22:11:10:09:
         68:42:12:32:95:21:93:2e:c1:42:23:5c:4a:59:24:75:3e:76:
         32:69:4b:c0:2f:8e:ad:2c:8c:12:70:07:99:92:b4:b2:25:a3:
         bb:5a:02:43:9b:b6:35:c4:f3:5d:de:c2:93:0d:8f:8f:55:c1:
         ac:51:ea:ec:25:c1:b7:46:0d:84:3d:9d:dd:70:09:3e:b7:11:
         d4:c4:08:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:57:27 2025 by rpki-client