Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e076d8ad-7289-3ae1-b083-e2433a56e5ff.roa
File:                     e076d8ad-7289-3ae1-b083-e2433a56e5ff.roa (raw, json)
Hash identifier:          qWqCwDh3I42JDHnhgt9JIZuvE5e+SDeiwjJ5rxyo+kc=
Subject key identifier:   79:23:76:25:EC:3D:29:B7:18:E9:44:97:FA:29:22:B7:F7:F4:8B:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA85BBD376DAA4C16531F9840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e076d8ad-7289-3ae1-b083-e2433a56e5ff.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     0
IP address blocks:        207.76.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:bd:37:6d:aa:4c:16:53:1f:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=81c4a642-ec0c-4be5-bd9f-a6bf14e319b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:01:00:43:11:f8:02:3e:fb:07:1a:22:28:c7:
                    69:dd:07:02:00:e8:74:b5:62:39:6f:14:71:cc:d7:
                    2e:e9:ab:5c:99:14:61:1f:61:2f:e2:7c:c4:89:ff:
                    e6:03:83:e9:3f:7b:4a:f5:c0:96:6f:71:69:5a:a7:
                    70:aa:26:30:01:5e:17:8d:a6:e1:50:a3:7e:ff:a3:
                    e2:e0:d7:35:3c:34:ce:2e:eb:3c:77:0f:e6:ff:9a:
                    7a:b0:dd:a5:f0:b4:d8:02:de:1f:0d:84:79:1c:12:
                    57:0e:22:ab:07:ae:d8:05:85:49:42:47:d7:d5:0b:
                    57:b6:df:b1:bb:43:e6:09:8f:9e:86:57:7b:38:5f:
                    ab:3c:e8:79:ff:7c:0b:cd:15:23:4d:71:5f:ce:02:
                    70:bf:71:f2:ec:28:21:58:36:d0:7c:0a:0a:2b:f5:
                    da:cb:d7:f6:bd:33:de:74:ee:57:c8:33:30:f4:d6:
                    23:dd:76:e2:eb:28:cf:6c:e8:2a:3e:51:df:aa:66:
                    2b:ae:ea:17:b0:31:db:f8:4b:66:06:6d:d7:cc:28:
                    e0:8b:7d:2e:95:58:d0:39:14:94:b9:23:2a:a2:4d:
                    af:af:b7:5e:55:61:48:15:35:a6:e2:b0:00:37:ec:
                    e0:67:7d:ff:0c:5b:d7:19:9e:74:c3:33:f0:b7:a6:
                    bd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:23:76:25:EC:3D:29:B7:18:E9:44:97:FA:29:22:B7:F7:F4:8B:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e076d8ad-7289-3ae1-b083-e2433a56e5ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.76.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:91:09:ce:4c:41:4f:b2:2f:c2:c2:19:cd:5c:1a:25:0e:45:
         f5:dd:e8:1d:1b:e3:b2:9f:00:b7:0c:b9:c7:ed:6c:08:a1:c5:
         2c:73:ed:1f:ad:95:e8:58:82:99:ce:7a:f9:0c:2b:bf:f9:96:
         c0:af:c0:d0:b7:4d:4d:12:1d:2a:c8:3e:97:d8:f4:9b:97:c7:
         56:03:1c:61:bb:dc:4e:a3:0c:d0:d4:08:f0:43:b1:d7:16:f1:
         89:fc:c3:0e:76:c3:41:de:29:dd:7f:72:0c:b8:ea:7d:cf:87:
         0a:f5:20:05:99:28:e7:26:4e:a7:77:f8:4a:c3:5f:68:03:cd:
         a7:82:c2:a4:ff:6a:ce:fd:60:b2:25:a6:9d:47:e1:37:c5:b1:
         ee:f5:33:13:ee:6d:f6:a3:2b:c3:82:c9:b8:03:21:b8:ba:04:
         b7:c9:8d:a3:d0:91:c1:24:ca:06:4d:fe:27:73:1f:c7:c1:0f:
         b5:08:99:5f:6e:15:3b:46:ce:41:50:bb:42:45:dc:c1:82:10:
         13:3f:10:5d:0d:21:68:e5:62:61:fd:54:d2:b6:66:d8:30:c8:
         21:c2:a3:f6:9c:58:ea:e6:25:cb:19:f3:c9:f6:d2:12:47:f7:
         5e:e5:a0:1d:ed:88:32:a2:4d:8a:97:bc:52:74:58:5c:43:01:
         65:82:ff:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:04:15 2025 by rpki-client