Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/68b08497-d3bb-31ed-927f-aaf8d6bb70ba.roa
File:                     68b08497-d3bb-31ed-927f-aaf8d6bb70ba.roa (raw, json)
Hash identifier:          WdVqmKL1cIKcM1HN7xQdm+4BmQ24nY4nINnSQlnDMF0=
Subject key identifier:   95:5B:EA:15:C3:A5:76:77:5C:A5:32:DC:E0:EC:93:AE:91:7E:72:D8
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B3A0F7DB5335896363E829A80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/68b08497-d3bb-31ed-927f-aaf8d6bb70ba.roa
Signing time:             Wed 17 Sep 2025 17:35:48 +0000
ROA not before:           Wed 17 Sep 2025 17:35:48 +0000
ROA not after:            Tue 16 Dec 2025 18:35:48 +0000
asID:                     23473
IP address blocks:        76.10.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:0f:7d:b5:33:58:96:36:3e:82:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 17 17:35:48 2025 GMT
            Not After : Dec 16 18:35:48 2025 GMT
        Subject: CN=2a4699a8-50af-4d32-ad43-e2a76c7ab3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:ae:b4:f4:b5:09:83:df:c1:d1:26:2d:c7:
                    e2:da:eb:2f:db:5c:23:21:9c:a9:5e:ac:97:e8:cf:
                    3c:ef:93:15:d1:88:de:0d:36:3d:9f:3f:d8:98:af:
                    52:b9:39:bd:41:bd:20:6c:c2:d9:28:e4:00:10:f3:
                    cc:c3:9a:49:f4:b4:d5:1e:69:27:57:2c:ff:4f:f0:
                    ba:4f:aa:f2:de:30:f9:33:b2:d4:1a:f2:74:3c:7d:
                    31:77:39:21:e4:81:19:7f:d6:a2:ca:b7:b7:66:81:
                    e5:48:c6:12:a3:7a:5b:c8:18:be:6b:44:42:c1:ae:
                    16:2d:50:45:a8:8f:b0:9d:df:7c:b5:40:97:f8:64:
                    d0:8c:46:19:de:45:c6:0e:4a:59:71:03:04:81:6c:
                    27:2f:14:ce:81:ef:b5:34:58:7e:cc:12:a8:13:58:
                    61:c0:9b:5f:49:5e:07:b0:b9:f9:d0:42:54:67:8d:
                    df:2e:bf:cc:92:65:20:de:ef:d0:10:fc:71:5d:c4:
                    08:ea:e2:bb:64:fd:a1:7c:bc:43:a5:54:c6:e9:80:
                    d9:17:bd:d5:bc:1f:6b:80:c2:42:b5:57:f8:38:e2:
                    8b:df:15:01:4b:46:f3:5e:ca:f4:33:57:64:75:f0:
                    7a:64:94:14:3b:cb:9f:69:a4:f8:98:18:e4:bd:24:
                    45:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5B:EA:15:C3:A5:76:77:5C:A5:32:DC:E0:EC:93:AE:91:7E:72:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/68b08497-d3bb-31ed-927f-aaf8d6bb70ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.10.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:cb:10:33:0d:87:bd:6a:5e:d9:01:7e:8b:be:29:59:50:ac:
         2e:2d:21:90:63:da:a5:70:51:0f:fb:d6:39:d1:e4:bf:98:5d:
         32:97:ec:46:f3:0b:98:71:be:ee:22:33:15:c2:1a:ef:44:0c:
         00:a0:a4:7b:ac:a4:1f:eb:d6:1d:80:12:81:aa:85:19:12:e4:
         8c:bc:9e:73:d7:37:ef:64:34:c1:d8:cf:80:c9:a6:d8:61:ec:
         35:d0:d5:cb:30:3b:ae:77:1f:89:4d:07:29:8d:21:f0:0d:cf:
         57:8a:33:c5:ca:a4:b8:f8:9d:84:b3:86:44:c1:af:e3:77:01:
         72:94:3d:f3:bc:c1:3d:e7:7f:9e:f9:f6:56:3d:6f:9c:c2:fd:
         cd:ba:79:90:d8:91:e6:c2:ca:cf:09:cf:14:7f:fc:c6:d4:fb:
         f4:40:1c:6f:f8:00:b2:cb:8e:1e:ea:95:62:37:7b:d4:01:a8:
         a0:7f:ce:05:f9:a9:ed:b5:27:89:f4:89:1c:c6:fe:7f:87:da:
         f7:59:71:98:df:06:ef:9a:e5:58:82:96:0c:30:b2:d3:4f:24:
         f9:2c:55:9a:2d:e4:6b:2d:cb:e6:9f:d6:0a:c1:2b:94:97:71:
         15:3a:e0:b1:ce:0d:2a:53:88:f3:d0:49:21:de:7f:bf:6c:29:
         e0:37:b9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:49:36 2025 by rpki-client