Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/13148eef-4aa6-3c89-b7e5-4a05427f013f.roa
File:                     13148eef-4aa6-3c89-b7e5-4a05427f013f.roa (raw, json)
Hash identifier:          VsS3HxE1h0i6U42Z3kMNemyOrBx829z96PoTMa5iyiY=
Subject key identifier:   70:61:63:E7:BB:E4:5F:28:6F:33:62:A9:86:83:7B:76:FE:ED:2E:55
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584A2ABAFCA063F8B378E935BD00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/13148eef-4aa6-3c89-b7e5-4a05427f013f.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     11404
IP address blocks:        208.76.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:fc:a0:63:f8:b3:78:e9:35:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=fa7c5574-006f-4868-b54d-fd0850ca7eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f2:ba:33:59:eb:31:09:6e:c3:22:17:c1:a0:
                    a2:3b:10:0a:4c:b6:53:d1:a5:78:d6:9a:dd:5c:24:
                    b8:6d:c9:11:12:ff:ad:7d:c5:af:50:c1:89:26:67:
                    c3:c2:58:bc:f6:1c:78:b6:8f:7c:e6:f4:8f:94:5b:
                    cc:f9:ab:dd:08:81:45:2f:88:50:09:89:68:8b:e8:
                    28:94:ea:19:cf:9e:35:e6:00:30:d5:3e:e3:e8:ef:
                    32:03:46:10:1b:3f:d6:be:b4:36:27:98:b0:18:d1:
                    a6:f2:1c:16:46:f9:a3:e0:9b:71:b0:bf:ba:4f:e2:
                    d0:75:a2:5f:9d:52:48:40:66:0f:ea:07:ee:11:88:
                    d5:eb:b7:74:8a:77:3b:92:d2:65:3c:eb:4d:07:71:
                    be:f9:2f:9e:99:c7:18:83:40:01:3b:38:86:39:75:
                    3d:3d:63:65:fe:a7:e0:2a:ec:96:b7:53:e2:7a:5b:
                    5e:67:fd:c8:32:c9:3f:06:4f:72:3f:d3:cc:51:db:
                    e4:a3:63:db:7e:84:66:be:b3:a2:2d:e0:aa:96:f6:
                    7c:e4:f7:d4:88:66:6e:fa:7d:d8:40:93:85:22:d2:
                    e5:67:f9:c3:e4:2d:9e:50:65:af:2d:cc:0c:36:b6:
                    f3:60:f1:a6:42:89:21:65:c1:e2:3d:ed:81:ee:7a:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:61:63:E7:BB:E4:5F:28:6F:33:62:A9:86:83:7B:76:FE:ED:2E:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/13148eef-4aa6-3c89-b7e5-4a05427f013f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:74:a9:20:97:82:d6:9e:92:77:39:8f:cc:47:ed:ea:23:ef:
         f5:65:9c:1f:ed:34:a6:9e:6f:71:18:eb:e3:d7:0d:db:cd:d3:
         40:f7:00:af:d2:00:9e:15:16:e4:0c:d6:2e:7f:26:6a:cb:4e:
         d7:ff:5a:9b:58:d4:37:26:c1:f7:63:45:42:b0:e8:fb:06:d6:
         d9:90:39:a6:ac:7f:03:c3:c2:a9:e3:4c:b7:bf:38:33:3e:1c:
         68:39:e8:ba:11:87:a6:e1:27:c6:6d:01:1d:61:42:b1:5d:ee:
         94:1d:2c:67:1b:e7:fe:5e:41:dc:60:56:df:1f:ca:61:a0:de:
         41:89:fc:4b:5a:2d:30:f9:37:4c:8e:54:c9:ff:ad:11:1a:09:
         97:5b:ce:f8:a5:b1:07:c3:95:ac:b3:b3:b7:87:f9:f1:c1:60:
         82:68:6e:3e:db:0a:e0:a0:db:78:98:c4:73:09:bb:ce:73:d8:
         e2:bb:17:fa:86:d6:e2:0e:ed:0c:80:a2:6b:4b:6d:8c:24:c9:
         f1:70:98:e6:a6:b6:07:ac:26:af:37:6f:eb:d0:ed:01:c7:1c:
         0c:df:de:0c:9c:7e:01:36:e7:5c:9e:b0:ad:a9:fd:49:4a:e4:
         0d:f2:f4:38:50:2f:a3:0c:7e:5e:2e:1f:63:9d:49:07:08:9c:
         24:ce:a9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:57:35 2025 by rpki-client