Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/b0abd619-03bb-328a-ac59-85f6eb6f070d.roa
File:                     b0abd619-03bb-328a-ac59-85f6eb6f070d.roa (raw, json)
Hash identifier:          5todOwzbKpSKQfnkHBeIh/iW6ApZSNqdnAozfd8aFmE=
Subject key identifier:   51:F2:26:75:71:07:4E:40:80:9A:66:EC:0E:24:0D:61:2F:A4:B6:90
Certificate issuer:       /CN=a68ef886-c437-4b77-8d56-b917b6150d9a
Certificate serial:       010D0C9F4328584AB465855B08496B130B10FA00
Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/b0abd619-03bb-328a-ac59-85f6eb6f070d.roa
Signing time:             Thu 31 Jul 2025 20:30:49 +0000
ROA not before:           Thu 31 Jul 2025 20:30:49 +0000
ROA not after:            Wed 29 Oct 2025 20:30:49 +0000
asID:                     91
IP address blocks:        204.76.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:65:85:5b:08:49:6b:13:0b:10:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a
        Validity
            Not Before: Jul 31 20:30:49 2025 GMT
            Not After : Oct 29 20:30:49 2025 GMT
        Subject: CN=64aa724d-701f-4736-a4c4-262517d85bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b2:8d:e6:b0:09:b1:93:7a:ed:04:ec:84:c9:
                    a2:64:30:86:47:af:96:d5:59:59:fd:b2:d6:44:af:
                    27:da:c1:d5:e7:de:60:b8:fa:4b:c1:54:2f:bf:a9:
                    40:01:01:6f:3a:9e:3b:b6:3b:c7:03:a3:5d:63:47:
                    f9:f2:71:19:99:03:15:ac:6d:f9:ef:35:9d:30:8c:
                    eb:32:09:84:73:77:ac:3f:a0:fa:4b:ab:a4:d6:8c:
                    71:92:38:dd:61:10:2b:bf:27:06:91:1a:b0:05:ef:
                    c6:1d:3e:63:db:56:5d:fe:5c:e6:c6:cc:76:59:3c:
                    01:93:da:da:f9:18:26:c2:30:1d:98:3e:87:aa:fe:
                    e2:be:5a:3c:46:96:18:ef:0f:2f:d6:ac:b7:06:72:
                    42:c7:87:62:4b:20:5a:c1:d7:ef:80:f7:66:5d:d4:
                    98:11:da:b1:7d:fc:a9:43:5e:c6:c8:49:62:b7:f7:
                    63:fa:86:86:b3:ce:4d:00:18:c3:ee:75:95:3c:fb:
                    27:d1:c0:fb:07:9a:03:96:46:68:5c:7c:80:3d:0f:
                    ef:67:d8:7f:e8:e2:3d:5f:59:54:ba:de:64:f6:72:
                    71:b4:fa:08:f7:b0:4e:94:00:3a:eb:4d:55:17:ac:
                    68:86:12:c7:1e:05:4e:0e:e1:53:c0:ab:fc:e4:29:
                    75:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F2:26:75:71:07:4E:40:80:9A:66:EC:0E:24:0D:61:2F:A4:B6:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/b0abd619-03bb-328a-ac59-85f6eb6f070d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl

            X509v3 Authority Key Identifier:
                keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.76.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:41:11:02:b3:e0:67:75:25:a1:b1:27:bf:c1:15:ad:da:37:
         80:be:9f:6a:a1:06:8f:e5:ab:b2:00:c6:67:06:4f:49:78:23:
         c6:42:7a:41:b2:ec:26:bb:8a:2a:69:24:08:61:85:9d:c6:9f:
         77:5a:db:a4:01:01:2f:cb:c2:9c:b7:32:a0:2e:3e:09:d9:df:
         8a:46:e8:c7:23:2f:27:84:e6:ee:d3:c1:e7:d9:f8:f1:38:ae:
         6f:3e:76:57:bf:ec:51:37:44:c6:c9:cb:2c:10:47:87:cb:42:
         ac:8f:2b:4d:b0:67:cb:4d:44:88:03:1f:5b:62:a5:4e:63:bd:
         e1:3d:ec:91:53:f2:76:2b:3a:f4:f9:1d:4e:25:9c:c9:ab:5d:
         0c:67:80:b5:dd:ac:c4:6e:cd:64:43:8e:d1:91:78:27:8b:f8:
         a9:dd:9a:fd:78:ce:3c:56:4a:3f:6b:19:c0:2e:54:26:b3:86:
         06:88:06:bf:c3:3e:da:22:0d:5a:ee:fc:01:81:7a:a4:1b:7f:
         49:c3:9d:79:ec:c2:ae:3d:f2:38:3e:fc:20:f1:46:bf:82:45:
         dd:d1:93:b4:b9:d0:11:35:7c:f8:49:fa:39:5a:e8:99:a2:d0:
         50:a0:35:74:04:df:e1:95:41:27:db:99:20:7c:9e:42:ea:ca:
         49:55:67:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:12:03 2025 by rpki-client