Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76e60ec9-bfa7-3489-9f0e-0e63b3849f78.roa
File:                     76e60ec9-bfa7-3489-9f0e-0e63b3849f78.roa (raw, json)
Hash identifier:          OssThihaL83gb0pW+qmzKm5e+rk4a4rFzTMlLR0KDcU=
Subject key identifier:   48:96:91:57:D5:A6:BD:EC:C6:76:61:A2:94:7E:77:8B:98:5D:6E:14
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6201DC0174317D7F22406280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76e60ec9-bfa7-3489-9f0e-0e63b3849f78.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        173.19.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:dc:01:74:31:7d:7f:22:40:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=6a151d5f-f343-4b04-8da5-da2633d12352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0e:7f:de:6d:f1:ef:f5:13:50:7a:37:93:3b:
                    59:2e:e9:9e:6f:5c:a9:48:ef:f8:37:f9:cf:4f:9d:
                    f1:21:73:ff:50:42:67:3d:7d:fb:61:98:6b:3e:89:
                    67:11:fb:c1:11:cc:d3:a8:5c:36:35:04:a5:2d:0e:
                    ae:f4:31:05:26:06:35:99:28:05:2b:46:a7:5f:c6:
                    d1:34:49:7f:22:64:75:d3:33:91:9d:ee:e5:09:27:
                    38:aa:aa:76:9c:ff:d8:1a:02:4b:fa:2e:a6:00:3c:
                    15:4d:a0:1b:ef:01:87:a2:cc:3d:0c:60:bd:6a:69:
                    b5:f6:2a:fb:2e:17:c0:8f:ee:16:50:8a:af:48:60:
                    09:53:cb:89:64:3c:7e:17:f2:ab:73:02:4d:f7:b1:
                    11:e6:13:cd:aa:27:5e:ff:b9:be:7e:a3:07:9f:ee:
                    3c:0b:5b:67:8c:ce:3a:aa:1a:7b:26:d0:14:59:10:
                    ec:f4:e8:28:35:36:8a:b1:aa:9b:a4:93:b2:13:71:
                    e4:de:4f:3e:de:f4:a0:fd:69:03:db:27:1f:45:4d:
                    30:a1:ad:2a:11:8c:bd:02:b8:e0:1d:6c:bf:c2:ad:
                    11:7e:c9:74:7c:fc:29:6e:a5:09:35:38:b2:c0:51:
                    99:49:84:e9:db:84:79:75:6d:b7:22:46:20:de:73:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:96:91:57:D5:A6:BD:EC:C6:76:61:A2:94:7E:77:8B:98:5D:6E:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76e60ec9-bfa7-3489-9f0e-0e63b3849f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:82:2d:d1:b6:50:c6:fc:b5:92:58:69:ef:b4:f8:63:49:34:
         2d:03:12:aa:3f:26:06:3f:88:df:26:f8:04:3e:14:70:15:e7:
         2e:2a:d9:d1:05:76:c3:95:7d:51:28:57:41:3c:12:f3:94:d8:
         42:3a:ce:54:9b:c2:43:62:8d:d3:91:ca:b2:e5:31:55:a9:88:
         74:39:9f:af:05:b6:44:cb:1b:36:ce:95:9c:dc:64:2f:73:f5:
         8f:93:6c:11:a4:47:4f:88:0e:73:ee:07:18:fd:eb:2f:3b:ad:
         ef:c1:ed:18:58:f1:57:7e:ea:54:a7:18:d3:d4:a4:2b:8c:f5:
         8c:f7:70:f0:eb:76:a7:63:81:0d:e4:d5:a9:5a:44:c4:e8:9c:
         39:46:3b:d1:c1:87:8d:a6:36:b0:bd:53:3e:66:50:07:b9:f1:
         0d:00:2b:6c:7a:23:b4:4e:ae:e9:61:39:01:e3:15:f9:92:90:
         71:40:25:17:5e:c4:41:24:00:a1:27:96:af:be:a3:b5:4d:c6:
         cf:04:bf:8b:71:b6:61:27:87:96:b0:ed:04:71:5c:0a:5c:0c:
         b1:0e:8f:f3:ad:33:f4:a3:bb:1f:2a:66:3d:2b:b2:98:14:4b:
         87:f5:67:11:ab:ef:a5:df:d4:b5:b8:b4:20:5b:a1:84:7f:d5:
         82:f0:83:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:52:20 2025 by rpki-client