Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5fb62e59-95c6-4f5c-9771-a233c392002c/e98e1996-045b-3724-bd1f-c36755b1a9f1.roa
File:                     e98e1996-045b-3724-bd1f-c36755b1a9f1.roa (raw, json)
Hash identifier:          JsQ5SYYL5cqy7LwEtp0XUoai4vNqbM6yYq+VMf374MY=
Subject key identifier:   5D:CB:D2:11:1B:6E:C5:91:FD:83:92:EF:2E:F0:02:4D:09:97:0E:1D
Certificate issuer:       /CN=5fb62e59-95c6-4f5c-9771-a233c392002c
Certificate serial:       010D0C9F43285849A8E9E2743021856EC1851B80
Authority key identifier: 48:A7:1A:FD:41:84:EA:39:82:45:A3:F3:07:4C:50:F0:82:88:2C:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5fb62e59-95c6-4f5c-9771-a233c392002c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5fb62e59-95c6-4f5c-9771-a233c392002c/e98e1996-045b-3724-bd1f-c36755b1a9f1.roa
Signing time:             Sun 27 Apr 2025 01:00:46 +0000
ROA not before:           Sun 27 Apr 2025 01:00:46 +0000
ROA not after:            Sat 26 Jul 2025 01:00:46 +0000
asID:                     13576
IP address blocks:        76.76.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5fb62e59-95c6-4f5c-9771-a233c392002c/5fb62e59-95c6-4f5c-9771-a233c392002c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5fb62e59-95c6-4f5c-9771-a233c392002c/5fb62e59-95c6-4f5c-9771-a233c392002c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5fb62e59-95c6-4f5c-9771-a233c392002c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a8:e9:e2:74:30:21:85:6e:c1:85:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fb62e59-95c6-4f5c-9771-a233c392002c
        Validity
            Not Before: Apr 27 01:00:46 2025 GMT
            Not After : Jul 26 01:00:46 2025 GMT
        Subject: CN=ab800291-e1a4-4435-8520-27428b431d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:6e:b8:78:04:b2:17:20:55:9d:d6:8d:36:c4:
                    24:5b:2f:fc:07:0c:12:97:41:85:68:fb:06:65:f5:
                    f5:b0:fb:42:19:a7:08:2e:56:0f:8e:0f:15:b1:2b:
                    45:06:7a:10:c7:f9:1d:50:3e:19:8b:c8:1e:44:38:
                    e6:d0:62:15:18:80:c9:57:c4:55:0d:76:5a:f9:36:
                    fa:ab:e9:23:1e:e9:1a:9a:a8:31:64:85:50:7a:17:
                    54:35:f9:47:3a:2e:90:38:4f:e3:b4:db:c7:97:08:
                    2b:f6:f6:28:f2:59:f9:26:dd:39:17:e8:dd:93:c9:
                    56:4f:6d:27:4e:47:a4:0d:9e:59:a9:0f:09:45:0a:
                    5b:35:a3:83:8f:bd:9e:bc:bb:e7:62:1d:a6:d5:64:
                    5d:16:a0:0c:d5:1d:27:90:6d:bc:6b:57:17:6b:ac:
                    63:7f:4a:d0:c2:45:9e:46:36:05:e6:66:df:1b:73:
                    12:05:47:57:8a:7b:8e:98:b8:12:99:c3:ea:43:e8:
                    f5:79:53:0d:1b:97:33:25:e1:94:ef:9b:32:23:7b:
                    3b:62:e9:31:93:30:49:9d:d0:6f:94:d6:e4:60:2f:
                    b2:63:73:97:eb:15:c4:d1:17:61:d1:06:9d:8e:7f:
                    6b:94:d5:61:26:d9:63:f2:d7:8c:70:6a:53:f7:26:
                    26:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CB:D2:11:1B:6E:C5:91:FD:83:92:EF:2E:F0:02:4D:09:97:0E:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5fb62e59-95c6-4f5c-9771-a233c392002c/e98e1996-045b-3724-bd1f-c36755b1a9f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5fb62e59-95c6-4f5c-9771-a233c392002c/5fb62e59-95c6-4f5c-9771-a233c392002c.crl

            X509v3 Authority Key Identifier:
                keyid:48:A7:1A:FD:41:84:EA:39:82:45:A3:F3:07:4C:50:F0:82:88:2C:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5fb62e59-95c6-4f5c-9771-a233c392002c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.76.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:94:7d:3f:ad:1f:53:35:85:f7:28:65:c2:4e:a3:29:90:de:
         d6:cc:80:73:db:f9:a0:dd:82:91:d0:70:5b:86:ca:9a:58:63:
         1d:9b:b3:a1:3e:e5:e4:f2:4c:11:c3:08:2c:33:f3:50:ca:76:
         70:6b:cf:e8:7e:4c:6f:0d:e4:b0:07:c6:c9:0f:22:bf:9c:7e:
         f9:40:a4:f5:b0:7d:8a:23:aa:9f:a2:59:aa:fe:32:e3:40:5f:
         4f:3d:c3:ec:86:6a:26:ec:9f:25:1b:6d:bb:80:05:ab:c4:03:
         3a:a9:53:c0:08:96:3f:04:c4:7c:e4:7c:5f:82:0d:d3:11:ec:
         76:10:97:61:9e:c6:a0:9f:96:bf:94:0e:3a:6c:87:3a:7a:20:
         84:29:b5:91:cb:f8:93:2f:f1:ab:c4:4c:db:c3:0e:f2:5b:6e:
         99:a0:88:e6:6f:cd:f0:f2:97:b8:e0:73:d2:02:f1:6e:3c:5b:
         3a:b4:08:af:cc:55:1c:27:d6:22:37:07:6c:8a:85:d9:eb:95:
         b0:b2:b7:e5:af:30:cf:60:f5:df:bf:87:d9:62:9a:4b:a2:f1:
         0b:ac:00:62:8c:08:5c:10:da:4b:28:05:3c:fc:78:a2:12:f0:
         fa:ea:62:30:21:06:87:81:b3:3e:75:52:4b:d4:e8:26:55:f5:
         aa:c5:2f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:08:37 2025 by rpki-client