Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/996cbce0-6590-32cc-abcb-d2583499a5d5.roa
File:                     996cbce0-6590-32cc-abcb-d2583499a5d5.roa (raw, json)
Hash identifier:          FQmjj4fFjAnMDvw0o/tjnvkzC4gK1Wk9bnUaychbWMI=
Subject key identifier:   B5:BC:DA:F9:43:0C:36:40:75:4C:3B:FD:D7:7C:B1:E7:7A:11:DA:C7
Certificate issuer:       /CN=d53c327d-4db5-439b-a376-ef8e86042891
Certificate serial:       010D0C9F4328584A146573129C5057472AC71F00
Authority key identifier: 2B:70:B1:C4:53:85:E2:E3:19:EB:71:97:EC:C2:D3:99:E3:80:05:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/996cbce0-6590-32cc-abcb-d2583499a5d5.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     36427
IP address blocks:        192.76.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/d53c327d-4db5-439b-a376-ef8e86042891.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/d53c327d-4db5-439b-a376-ef8e86042891.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:73:12:9c:50:57:47:2a:c7:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53c327d-4db5-439b-a376-ef8e86042891
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=87c6cc3a-6a08-4c95-8358-532c7d655780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ff:99:a7:96:0b:a8:6c:e4:98:db:93:a5:f6:
                    b4:aa:3f:cb:02:0f:29:2d:c7:d8:8b:77:5c:93:81:
                    de:4b:ee:b2:6e:90:34:f0:ee:91:e6:f1:3c:1f:39:
                    36:16:81:34:e9:6f:1e:6c:7d:f1:96:10:52:6c:05:
                    d1:e4:93:9f:23:8c:91:d0:b2:ed:ec:89:eb:17:a8:
                    25:9f:20:5f:21:d0:2e:53:19:89:f2:08:51:2f:c1:
                    2e:8b:03:c3:6e:4e:37:45:23:c6:96:c6:dc:19:24:
                    4b:48:31:4f:23:6a:1b:34:52:80:74:a0:61:67:e1:
                    0a:66:0d:e7:04:92:6c:a0:4a:c0:ab:11:d4:96:41:
                    89:3d:3e:ba:9d:31:b0:82:56:21:6e:2f:d5:c9:a0:
                    ff:12:57:54:cb:34:e7:ab:4e:57:6b:c4:7a:1d:be:
                    96:8f:67:33:50:9d:38:6b:f6:ef:ac:d3:72:ed:76:
                    92:db:c7:4b:ac:f6:bd:44:98:be:3e:2a:cc:1f:fd:
                    a7:48:9f:8c:65:61:91:c3:b8:39:f3:9c:01:3b:aa:
                    4a:7b:b0:b0:5d:08:63:80:de:12:6d:1a:b0:57:08:
                    7c:fb:2d:1a:20:54:33:b9:1c:ce:5f:cc:eb:09:cb:
                    12:a5:ea:8c:dc:a0:f2:d1:62:d6:9f:cd:2a:28:91:
                    e8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BC:DA:F9:43:0C:36:40:75:4C:3B:FD:D7:7C:B1:E7:7A:11:DA:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/996cbce0-6590-32cc-abcb-d2583499a5d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/d53c327d-4db5-439b-a376-ef8e86042891.crl

            X509v3 Authority Key Identifier:
                keyid:2B:70:B1:C4:53:85:E2:E3:19:EB:71:97:EC:C2:D3:99:E3:80:05:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.76.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:00:82:74:15:a3:cd:27:a9:05:21:99:c7:7e:2c:49:4d:61:
         7d:e6:28:3c:f9:26:04:e3:56:4f:89:79:4c:95:f8:07:39:90:
         e2:92:c6:44:38:14:25:96:ae:3a:23:f1:0d:fa:c8:3c:67:15:
         22:a8:44:87:d7:44:f2:50:85:a5:ca:2b:77:d3:4e:dc:cb:79:
         2e:1d:bd:e9:fb:86:1d:3b:c6:50:c0:8e:a4:36:47:6c:00:f3:
         41:28:cd:d4:dd:e5:51:15:7d:a0:c2:68:e9:dd:cd:c6:9b:4a:
         5f:6e:ab:f4:e7:ca:19:8f:02:0a:86:5d:96:02:4a:b9:bf:bc:
         c9:87:42:ab:46:99:67:4c:d3:89:94:e2:f1:b1:44:18:08:5c:
         c6:31:10:ed:28:c7:af:0c:c6:bb:f8:9d:f2:85:4f:a3:28:e9:
         6b:2f:c6:4c:16:bc:5c:4a:05:ee:ce:38:d4:ba:1f:dd:d0:09:
         42:34:16:06:cf:78:11:4b:33:3c:bf:7c:52:f1:3a:bf:ad:92:
         3d:ae:92:ae:b4:f6:4d:cf:00:f0:73:37:8c:c4:26:02:07:9b:
         ab:15:ed:3e:d5:05:3c:97:55:b4:ab:f9:15:ff:0d:8b:b6:97:
         0c:8e:ac:65:9f:2e:86:91:6b:da:c9:0e:07:9d:12:56:8d:82:
         81:cb:20:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:02:31 2025 by rpki-client