Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/761d6c6e-bf74-3c42-b1c9-9d8034812b2a.roa
File:                     761d6c6e-bf74-3c42-b1c9-9d8034812b2a.roa (raw, json)
Hash identifier:          qcN1jePYkj7Azjy5WTM1doEBgjh9z6Lj+52MpgE+fuk=
Subject key identifier:   1F:CF:EB:8C:86:CC:A4:81:30:34:E9:D5:82:A8:23:87:3C:95:19:B5
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499AF47C7C06B768266EC42600
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/761d6c6e-bf74-3c42-b1c9-9d8034812b2a.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        75.158.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:7c:7c:06:b7:68:26:6e:c4:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=abb831ec-ca27-4e9c-9069-50dc02ca1916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e1:50:8c:0e:c9:5b:9c:a4:9b:7b:91:d7:28:
                    d4:a3:4f:ee:fa:9a:8d:9c:e0:37:5e:18:79:1c:3f:
                    e7:b7:e4:83:08:78:88:67:62:76:03:3d:fc:91:06:
                    d3:33:f0:f3:86:a8:61:c6:1d:92:3c:ea:fa:4b:50:
                    87:48:4b:89:58:3a:22:e6:2f:67:fa:88:8b:6b:f2:
                    fb:00:0d:89:3c:7e:86:fd:99:02:a2:f1:21:b2:59:
                    d4:44:e6:38:ed:d9:e4:22:08:b9:8a:e1:b5:99:80:
                    b1:07:55:8f:37:cd:29:f6:61:48:5a:d8:be:fc:a3:
                    e2:1c:30:e3:04:db:f6:08:ae:20:c1:40:c2:76:c9:
                    a5:70:32:00:4d:e8:41:5e:6c:27:a4:d6:da:84:e6:
                    05:72:c5:b2:f0:83:ab:e5:61:1f:b6:b6:b0:32:dc:
                    b5:a7:23:b5:92:1a:08:2f:69:48:85:ee:8e:13:4e:
                    3e:65:b8:a8:6b:0d:68:30:92:02:a5:68:6f:8d:41:
                    56:85:bf:65:62:7c:ea:e9:8a:6b:75:42:39:29:cc:
                    20:20:e0:21:cf:c2:bc:26:c1:c0:62:bb:57:84:07:
                    fb:fb:1f:f6:9d:89:17:bd:73:3c:e0:55:7d:33:57:
                    e5:a2:e6:46:2e:9f:e8:5f:d6:a2:54:04:55:6e:3d:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CF:EB:8C:86:CC:A4:81:30:34:E9:D5:82:A8:23:87:3C:95:19:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/761d6c6e-bf74-3c42-b1c9-9d8034812b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.158.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e7:fe:b4:ef:d1:9f:f4:1d:16:0a:65:f7:45:bd:c1:ad:90:
         90:b7:e4:9f:0d:02:c5:01:b2:83:4c:ab:27:99:50:13:30:c7:
         29:b1:40:23:56:72:06:3a:69:cd:00:ad:c5:79:53:ca:6c:53:
         14:e4:9f:5a:0a:ae:34:7d:d8:b2:9c:ec:7f:0c:da:8a:9f:cf:
         1a:ac:71:cd:e4:d0:b9:d8:12:8e:a7:f2:96:8b:66:ff:a9:31:
         19:1b:f8:01:98:b1:47:2d:07:40:e6:fb:b3:61:19:b8:e9:b3:
         4e:da:67:38:82:d1:2a:ad:e3:2d:36:c4:0f:ba:e0:94:2b:0d:
         91:a5:d3:74:79:17:67:11:d3:10:d5:eb:fe:db:1f:0d:65:89:
         74:9f:f5:f3:32:69:fe:4e:02:1b:06:bc:28:61:0e:e3:e9:87:
         6a:5c:7b:11:12:4b:3e:66:2c:75:0d:ef:27:04:af:9d:91:83:
         47:11:a2:7f:fb:16:62:01:a8:ff:cb:24:e1:45:00:4f:6a:82:
         2e:76:6e:a5:c9:8c:fa:91:ac:de:18:3e:e2:b1:08:fb:01:69:
         7a:92:4f:ed:0d:e4:0b:18:d1:67:5f:02:90:c9:b3:ab:1d:8c:
         3a:28:ed:54:fd:f1:42:60:ae:e5:39:8d:8c:ec:79:33:33:10:
         bf:cd:4d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:07:30 2025 by rpki-client