Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63db3ed2-26ed-3f99-9a9b-2878649952c7.roa
File:                     63db3ed2-26ed-3f99-9a9b-2878649952c7.roa (raw, json)
Hash identifier:          FVrQVvV1X99juScvs/8NJo/L5Gaq77YkLIw2oKrPfAc=
Subject key identifier:   66:04:4B:1F:46:D3:96:D4:C8:70:E0:8E:69:BA:74:D1:D9:4F:A3:77
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A84123183560D2D14C3260980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63db3ed2-26ed-3f99-9a9b-2878649952c7.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        208.76.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:31:83:56:0d:2d:14:c3:26:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=4e9d31e6-f146-4b55-8a51-79f4954739c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f0:45:a0:3b:cb:73:4e:fc:4f:a9:41:50:f7:
                    72:ae:29:39:86:98:64:56:a4:68:ad:cf:0c:5e:fe:
                    36:24:6d:cc:ef:fa:fd:cc:16:8e:da:62:f2:1a:72:
                    d5:84:e8:bf:d2:0f:71:14:87:3e:4b:2f:7b:95:09:
                    8f:46:f7:1c:05:c2:84:87:69:11:ff:5f:cc:5f:12:
                    ba:ac:a0:f5:ed:c3:bd:ec:b0:9e:13:2f:2d:6a:3f:
                    54:97:49:01:93:12:c5:fa:fa:bd:09:4d:57:3c:e5:
                    48:bf:03:4c:ba:dd:24:bd:d0:19:e0:08:b2:99:56:
                    86:4f:59:63:95:24:63:96:89:8c:f5:fc:c8:f4:8e:
                    25:03:b5:10:98:dd:da:b5:2e:c8:80:51:f5:46:66:
                    dd:4b:73:d3:4f:8c:03:21:4b:59:6a:ba:2b:6d:30:
                    0e:50:14:93:bf:0e:74:6c:81:b4:47:4d:a0:7c:60:
                    1e:c0:d5:24:be:9c:f5:b8:5d:1d:9c:47:e2:8e:b0:
                    7e:71:d9:f1:29:79:e6:0e:df:66:84:b6:80:6d:ee:
                    8d:6c:50:72:55:80:16:b1:e4:d8:e6:1b:0b:93:7f:
                    52:79:15:d1:f3:ec:99:a0:ff:15:2a:b5:7c:37:22:
                    59:b6:68:09:b4:02:61:68:2d:64:91:15:c3:74:ac:
                    a6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:04:4B:1F:46:D3:96:D4:C8:70:E0:8E:69:BA:74:D1:D9:4F:A3:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63db3ed2-26ed-3f99-9a9b-2878649952c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:67:c5:92:ab:21:28:64:dc:73:55:60:2a:f7:08:95:5f:5f:
         0e:db:6b:a5:9f:71:9a:c9:aa:71:dc:e8:01:25:ba:8a:85:59:
         40:dd:a5:11:69:c6:74:82:af:fd:53:39:3f:e4:f0:fb:66:fe:
         dc:16:36:fd:a7:96:e9:a9:fa:44:f2:a2:71:62:28:79:7e:26:
         f4:83:d2:7f:fe:79:7c:0a:71:39:bc:38:92:1b:4e:f1:84:f8:
         45:df:b1:74:73:0d:9b:32:99:dc:3e:d5:b1:73:8d:0b:de:d5:
         98:c5:6d:be:7c:c7:a2:9f:4d:14:28:68:51:ab:ac:14:a3:67:
         50:5b:f8:a8:61:a3:92:51:98:6d:ad:46:70:42:12:fd:f9:a4:
         50:f9:14:ef:30:e5:5e:f9:c0:ab:06:a3:49:af:cf:a1:df:b1:
         9d:4c:bb:76:bc:b4:84:eb:c1:16:bb:c8:da:74:f3:11:10:68:
         94:f6:ca:8f:67:6e:2a:c3:54:0e:e0:ca:04:e7:bf:38:56:c8:
         f3:f5:e4:df:89:c9:d0:73:e5:9a:ac:ef:0e:10:85:d7:2c:95:
         f1:55:50:87:37:e2:c2:04:b3:0b:68:31:86:44:97:d5:d6:85:
         cc:69:33:ca:6e:1e:4e:70:d4:15:27:a8:59:b7:c7:38:60:e4:
         1f:af:fa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:42 2025 by rpki-client