Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/f78e47d3-ef6c-3185-b8c6-7337a70ecef1.roa
File:                     f78e47d3-ef6c-3185-b8c6-7337a70ecef1.roa (raw, json)
Hash identifier:          Q0rHKGqJ/PcTnKKeSsdORrdrOjTQAam14tL/joma/uc=
Subject key identifier:   67:A4:2F:EC:05:FB:55:45:B6:E7:5F:46:09:7B:F9:5F:6E:85:D7:34
Certificate issuer:       /CN=76554884-d362-4eab-82d1-ed9e4c9b289a
Certificate serial:       010D0C9F4328584A82AB52D98E2D40FFFCDFFAD0
Authority key identifier: 04:95:91:7C:FE:2D:FF:E0:7B:45:BF:CD:0E:72:A9:8C:A2:C4:25:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/f78e47d3-ef6c-3185-b8c6-7337a70ecef1.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     36363
IP address blocks:        216.170.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/76554884-d362-4eab-82d1-ed9e4c9b289a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/76554884-d362-4eab-82d1-ed9e4c9b289a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:52:d9:8e:2d:40:ff:fc:df:fa:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76554884-d362-4eab-82d1-ed9e4c9b289a
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=2554830f-9b8d-40f0-b82e-a94ef9aaf12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:fa:a2:46:1c:81:1e:46:b9:fb:75:8f:48:
                    7b:45:a8:62:d9:7b:67:f1:53:d9:25:33:ed:7a:d7:
                    f6:fc:47:f2:6b:36:b1:0f:22:7e:2b:e6:62:41:28:
                    46:ec:4f:79:71:9f:27:a2:e1:ad:62:7b:b2:24:b6:
                    31:62:38:4b:a4:99:ca:84:c7:0e:12:6f:d7:c9:29:
                    75:87:be:0e:b6:c1:34:2c:3e:37:c2:16:b3:43:d4:
                    c6:8f:12:26:f7:b7:f6:a7:e9:9a:33:bc:a4:39:e5:
                    aa:c0:b1:6a:60:32:eb:c9:cb:71:bf:5b:01:db:58:
                    97:ad:c4:6c:01:e5:9f:a8:a7:db:39:74:25:75:cf:
                    4a:41:5c:51:5d:41:a0:a0:f5:69:ac:34:49:c4:64:
                    47:2e:e3:68:f0:e9:b0:64:49:52:76:5b:44:d5:50:
                    86:b3:2c:4a:a7:87:6f:dc:ad:40:94:1e:e2:36:d2:
                    96:60:2e:02:5a:46:98:40:11:fa:59:cd:7c:9a:ce:
                    e7:2c:5a:c8:b9:24:3c:5c:14:8c:22:18:a7:47:05:
                    35:0d:02:e5:2a:eb:73:24:54:d2:65:cb:70:fa:25:
                    d9:26:cd:e6:37:31:07:43:d9:68:52:ba:43:07:ef:
                    ed:26:9e:75:07:d2:84:29:d3:21:d9:fc:c2:f9:d7:
                    55:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A4:2F:EC:05:FB:55:45:B6:E7:5F:46:09:7B:F9:5F:6E:85:D7:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/f78e47d3-ef6c-3185-b8c6-7337a70ecef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/76554884-d362-4eab-82d1-ed9e4c9b289a.crl

            X509v3 Authority Key Identifier:
                keyid:04:95:91:7C:FE:2D:FF:E0:7B:45:BF:CD:0E:72:A9:8C:A2:C4:25:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.170.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:08:02:6f:62:de:c1:0c:be:74:33:ec:e4:97:e3:5c:51:b4:
         6b:b4:24:76:f0:11:49:49:20:e7:2a:08:47:1f:28:d7:b0:cf:
         13:2f:41:54:c7:31:2e:49:4e:44:83:0c:11:ec:32:ae:bf:74:
         37:62:78:de:73:cc:ca:66:52:39:6b:d9:62:41:c4:47:5a:7b:
         59:7b:f9:c5:c9:f8:e9:e6:88:06:20:d2:7e:13:5d:bc:eb:18:
         39:f2:10:12:a2:dc:a5:53:a1:37:cb:77:4a:d9:20:f3:3c:3d:
         13:ff:25:35:86:71:ea:82:b2:cd:19:d1:12:70:98:6a:dd:34:
         0d:04:7c:c3:b0:8c:94:a6:16:a5:99:e4:4b:24:ce:b7:3e:4c:
         2b:30:a0:e6:68:ac:54:64:30:c2:bc:0e:c1:8d:98:74:0f:6c:
         13:f1:78:9c:27:f9:c2:bb:45:0e:6c:de:7b:dd:a7:9c:6a:9e:
         1e:f7:fc:f5:17:16:f5:d7:97:3e:57:44:f9:25:cc:d0:52:fe:
         44:02:d3:c0:a5:51:0e:fe:00:86:49:ad:c0:7a:2f:0b:d6:ca:
         da:d4:12:a1:02:14:e5:cc:91:f1:b6:71:ec:e0:bb:93:0c:cc:
         b0:01:62:c7:56:fd:2a:73:80:36:a6:28:58:1b:50:9f:31:f7:
         60:cb:38:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:34:01 2025 by rpki-client