Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/e1a769b2-60df-3094-a846-a1b102fcbb48.roa
File:                     e1a769b2-60df-3094-a846-a1b102fcbb48.roa (raw, json)
Hash identifier:          lhYdw12uAA+skXC/+8iqCMS2FqRYHOJ24Y9kLE2yKMk=
Subject key identifier:   BD:D1:A8:94:36:65:72:84:FC:A8:EF:50:1C:2D:67:CF:EE:A7:6F:E9
Certificate issuer:       /CN=ac0c72ee-a963-4924-8dd0-a48579578b1b
Certificate serial:       010D0C9F43285849E2253F98DA97EEF0B9987A40
Authority key identifier: 8F:35:48:6A:6F:2C:E2:E5:11:9B:D3:4E:C3:FB:F2:00:1F:EC:A8:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/e1a769b2-60df-3094-a846-a1b102fcbb48.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     400042
IP address blocks:        76.164.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/ac0c72ee-a963-4924-8dd0-a48579578b1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/ac0c72ee-a963-4924-8dd0-a48579578b1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:3f:98:da:97:ee:f0:b9:98:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0c72ee-a963-4924-8dd0-a48579578b1b
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=e7ac4dc7-8883-4681-ba0c-2096578df12f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:b2:c3:2f:89:28:6d:36:04:99:d4:53:c8:
                    ba:85:5b:0b:32:8c:e5:14:6f:96:e7:54:64:ed:74:
                    80:f0:af:97:ce:cb:87:7a:ff:4a:cb:b4:ef:1f:2a:
                    bb:a1:f3:c0:00:69:4e:f7:76:0a:8e:17:1e:2d:b6:
                    8b:0e:9a:f8:76:44:c4:3f:63:59:43:0d:c2:c4:a5:
                    8e:12:a0:e6:e7:d7:d4:f8:86:9a:3b:d3:dd:d7:dd:
                    25:e6:c6:ab:63:9f:fe:6b:bd:2b:c2:72:13:32:8e:
                    9f:51:11:1f:9e:f3:20:8b:2e:ae:08:4f:86:b2:75:
                    40:89:d6:ee:32:6d:92:30:4d:9e:95:f6:33:cd:09:
                    7a:52:d6:ed:d9:fd:51:d1:df:21:83:35:f7:6c:8e:
                    32:09:61:1e:9d:0c:27:2c:2e:a3:c3:da:fc:d6:72:
                    f3:a2:e7:39:59:86:ca:bd:11:42:71:c3:eb:8a:87:
                    12:af:3e:5f:e4:74:b1:52:22:03:8f:06:e6:54:b1:
                    1e:be:24:9a:ad:ad:8e:de:06:6c:ae:cf:a8:a8:03:
                    dc:7c:81:4e:1e:72:d2:c2:a9:21:81:3e:cd:92:18:
                    21:85:8f:b2:11:fa:a2:83:8e:14:07:19:0f:fd:f2:
                    44:f6:db:61:64:5f:56:a9:b7:f7:ae:ae:28:d1:61:
                    db:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D1:A8:94:36:65:72:84:FC:A8:EF:50:1C:2D:67:CF:EE:A7:6F:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/e1a769b2-60df-3094-a846-a1b102fcbb48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/ac0c72ee-a963-4924-8dd0-a48579578b1b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:35:48:6A:6F:2C:E2:E5:11:9B:D3:4E:C3:FB:F2:00:1F:EC:A8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:8d:93:34:fb:dd:d8:52:d8:22:13:aa:88:04:4c:42:9b:c0:
         05:7e:1a:5e:c2:f0:88:8d:0f:7b:4a:82:18:c2:dd:f0:01:51:
         3d:de:17:f2:c6:db:35:b2:71:dd:0b:e8:98:5b:ef:c8:1b:23:
         ea:0f:7a:d8:8f:c8:73:13:dc:69:50:55:8f:d9:c3:38:56:de:
         26:b8:22:98:b3:64:4e:56:a7:8d:94:a1:7b:d6:08:cc:5d:4a:
         5d:60:fa:df:11:02:b6:70:21:b9:98:35:7d:12:69:64:c7:dc:
         b3:23:84:b9:7f:70:76:f0:7e:29:b6:bc:2e:2b:09:50:d7:8c:
         4b:55:c8:ad:04:8e:79:fb:23:3f:fc:74:ef:1c:90:9c:58:b2:
         8b:87:25:c1:0f:67:3d:d4:6c:8c:d0:f0:6e:05:f0:54:76:ef:
         1d:e6:ee:19:c2:8e:58:35:3f:e0:f2:80:ad:10:dd:ed:d7:ce:
         8d:c4:2c:05:e7:fb:c1:96:d1:c1:66:69:cc:2d:32:fb:36:b2:
         57:cf:d6:12:a1:51:a6:41:03:46:23:6c:b5:5c:31:44:6d:69:
         6e:6c:69:dc:8d:41:7d:03:8a:96:53:5e:30:6b:b8:34:32:46:
         5d:d4:c9:23:43:29:3a:3e:3f:ea:18:11:96:d1:8a:c0:f7:5a:
         73:1d:8b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:42:32 2025 by rpki-client