Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/48cc5098-b9ab-3fe5-8f52-f944b864b648.roa
File:                     48cc5098-b9ab-3fe5-8f52-f944b864b648.roa (raw, json)
Hash identifier:          HAzrUhvnkIGNuFBTQZ5gaad/GsEoWnOgC9ygSA7YDDc=
Subject key identifier:   E9:81:F9:63:EA:65:F5:D5:BB:55:ED:8A:AC:2E:9B:A4:C0:66:59:0E
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584A2ABAEF92D8060BD63E013520
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/48cc5098-b9ab-3fe5-8f52-f944b864b648.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     11404
IP address blocks:        76.14.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:ef:92:d8:06:0b:d6:3e:01:35:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=5babc062-6046-4874-b9e4-b7e3866d3561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6a:ba:5d:57:0c:bd:25:30:ac:03:2a:c0:22:
                    ad:d5:b9:7a:68:08:53:a4:91:79:8d:54:82:47:39:
                    b4:6e:3e:86:58:a4:a5:80:43:4b:3f:02:90:e1:1a:
                    f1:c3:68:b8:9e:70:1e:4a:33:f0:47:0b:36:aa:22:
                    50:8d:b6:c7:17:59:49:d2:38:5f:0c:76:ec:b6:c0:
                    f6:fb:05:c4:25:c2:36:f5:7c:64:0e:1b:a8:07:cf:
                    28:69:24:7c:0f:02:a2:59:8d:6b:13:99:d6:15:2d:
                    79:d4:0f:8e:92:b9:4c:65:c8:a2:85:df:d3:9e:99:
                    34:3b:a3:8d:55:04:b5:76:bb:24:13:aa:18:8f:a4:
                    26:43:e1:92:69:0b:9f:df:fd:06:27:65:7e:b2:7a:
                    cf:1a:24:8b:17:66:2f:63:9c:ee:ee:f6:c6:9f:ff:
                    71:08:69:cd:d3:8d:d5:20:51:39:29:15:9d:71:d5:
                    08:c6:f2:b5:8f:31:60:f1:17:76:a6:a7:47:c9:ec:
                    8b:9c:74:3b:86:49:a5:de:73:81:57:c9:4f:04:54:
                    6f:17:2d:59:ca:3e:4a:a0:ad:18:b7:a2:04:df:cf:
                    42:30:f0:a9:aa:54:a6:6f:ed:14:bc:bb:9c:48:c9:
                    ac:37:1a:18:60:b8:94:55:bc:24:cf:ce:c5:23:b2:
                    e4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:81:F9:63:EA:65:F5:D5:BB:55:ED:8A:AC:2E:9B:A4:C0:66:59:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/48cc5098-b9ab-3fe5-8f52-f944b864b648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.14.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:97:00:b8:a5:65:77:1b:22:0c:1c:80:71:8a:6b:54:07:dc:
         da:d0:04:32:1d:34:61:62:bb:67:09:2e:af:af:0b:11:36:47:
         50:f8:ac:45:56:73:58:d6:4f:fb:e5:69:79:63:be:fb:74:9c:
         08:e2:d1:0a:67:18:23:06:6d:58:8c:d6:7f:24:f5:1a:b9:a0:
         8f:ba:a6:01:5f:5e:d7:f4:c8:7e:00:fd:90:d4:25:a9:d0:e6:
         e2:2e:0e:38:7e:e6:1d:c1:e3:db:84:eb:ee:8b:03:73:d8:43:
         80:5f:9d:c0:0c:07:c8:e6:39:12:67:44:6e:07:ba:4b:26:1a:
         15:7c:57:13:a9:f1:2f:d1:66:e8:89:fb:d7:94:92:60:a9:45:
         35:a3:eb:b4:a3:10:7f:77:4b:a0:65:58:8f:16:b4:00:21:e1:
         e8:e7:21:2f:d6:4b:60:67:72:67:0b:b6:b3:bd:fb:97:97:bb:
         0b:76:cb:fb:20:25:c6:6e:35:eb:61:67:e1:ea:aa:d8:b6:55:
         17:e8:fc:08:6b:b8:c9:01:1d:97:14:98:39:43:9f:93:f5:e0:
         e6:a4:c3:d9:d1:8e:20:b6:7e:88:34:12:1b:d2:e4:fc:75:5d:
         90:c1:92:94:aa:38:d2:fc:73:88:a5:25:9b:a0:b5:ab:95:ef:
         c1:6e:a7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:27:43 2025 by rpki-client