Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df120d9a-c250-3e11-a401-251a5f83547e.roa
File:                     df120d9a-c250-3e11-a401-251a5f83547e.roa (raw, json)
Hash identifier:          VPxlS848CsXzsExd1mz+LsUANpaIsrY5lGWW3JNTNfw=
Subject key identifier:   E8:66:46:A5:FD:08:98:C8:5D:9C:11:45:EC:D9:6F:AD:79:DE:3E:02
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161879D77FF828163BB2080
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df120d9a-c250-3e11-a401-251a5f83547e.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     10796
IP address blocks:        76.57.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:87:9d:77:ff:82:81:63:bb:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=08c01df7-9c46-4d29-abbc-beec9869729b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d4:de:6d:29:f6:92:cc:ab:73:c9:3b:4a:ee:
                    b7:fb:43:c6:7b:ea:57:2b:88:1f:07:f3:64:43:28:
                    48:84:39:a8:03:a3:72:02:9c:4c:2e:8b:bc:6f:00:
                    be:fb:f3:91:5d:9b:8e:9e:42:8a:1e:2b:c8:b2:cd:
                    b8:7e:72:de:ba:52:53:8a:a2:2d:37:b1:25:b7:24:
                    81:12:f5:f9:da:4c:d3:56:46:c8:5f:56:94:f8:31:
                    3d:ad:b2:96:dc:6c:96:33:e8:8d:f1:13:38:86:33:
                    57:d0:08:29:27:ae:40:17:88:f0:d4:c8:cc:93:fc:
                    ba:92:99:22:49:98:44:65:96:fd:eb:d9:bd:3f:db:
                    f4:47:1e:72:36:37:65:24:d2:2c:0a:79:b2:96:8b:
                    67:80:40:a8:70:a4:70:99:9f:41:d2:96:61:66:f7:
                    36:32:21:d0:6c:b7:43:09:00:77:38:b8:3b:9d:b1:
                    b5:5a:0b:f8:0e:e9:7d:ea:6e:b7:e8:95:8d:ca:64:
                    16:d7:cd:01:d7:30:fe:54:5a:90:07:d8:3e:d0:c8:
                    e1:4b:b3:cb:52:0d:12:33:67:b5:92:b0:05:28:8d:
                    90:3f:5b:a5:6e:5c:7d:67:0b:bb:9a:e3:ae:0b:e3:
                    21:97:f2:3a:f4:80:30:be:22:2c:9a:97:82:af:41:
                    9c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:66:46:A5:FD:08:98:C8:5D:9C:11:45:EC:D9:6F:AD:79:DE:3E:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df120d9a-c250-3e11-a401-251a5f83547e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.57.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a0:93:cb:ee:bc:41:f9:f9:9f:84:f9:c1:f1:3b:c1:5e:36:
         fd:33:ff:51:0f:81:2a:6f:2f:a8:13:11:54:c3:6b:8d:de:32:
         5d:a6:a7:9f:1c:f8:91:07:f2:52:e1:44:ce:9d:29:6e:5c:58:
         48:d5:e9:1d:4e:d4:9d:17:5e:38:59:f4:a1:29:58:01:44:e6:
         35:62:ab:0f:f6:9b:c5:ba:c8:d7:60:d0:b4:19:ae:f2:30:33:
         48:36:be:b9:dd:a2:2e:05:1a:82:8d:3a:4c:19:ae:aa:15:e9:
         b7:8b:08:14:0b:ba:9a:1d:91:ec:e8:bf:a6:01:d1:c1:0b:16:
         81:ef:fd:14:04:cf:ab:55:68:9f:c2:bf:e9:69:8e:84:28:1a:
         0a:f5:cf:ae:a4:69:ed:10:0e:c4:16:ec:c8:6b:c6:3b:77:d4:
         8d:cd:ce:54:ea:2c:0a:53:f4:1b:25:ec:68:58:38:b5:99:f5:
         67:b1:99:2f:b7:87:0a:80:82:e7:26:24:e1:5c:f2:47:2d:d7:
         f4:f5:22:1c:41:d4:4b:ce:26:ce:05:01:dd:d8:51:c9:a1:61:
         07:b6:11:4b:f9:78:cb:d0:31:1d:52:32:36:b7:bd:7d:0d:40:
         36:81:81:84:eb:82:db:be:37:84:6c:2f:ee:dc:cf:0c:aa:47:
         74:5d:89:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:59:02 2025 by rpki-client