Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/678c2786-4349-3a13-8476-3b89495cae56.roa
File:                     678c2786-4349-3a13-8476-3b89495cae56.roa (raw, json)
Hash identifier:          LK8g/2CDJCIW+GHA/Sl4NiXx0nMXTgtO4KW7qnQK5e4=
Subject key identifier:   F6:1E:53:11:28:44:C4:BB:07:FC:7D:69:37:D9:81:49:02:4B:01:14
Certificate issuer:       /CN=c7036deb-a358-4ff8-8a2d-c51f0988c8a2
Certificate serial:       010D0C9F4328584B33F1A969CAF091CA3C28DF00
Authority key identifier: 05:C6:11:20:66:E0:FA:5E:98:9C:8B:85:30:7E:E5:34:E9:0C:A0:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/678c2786-4349-3a13-8476-3b89495cae56.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        208.76.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:a9:69:ca:f0:91:ca:3c:28:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7036deb-a358-4ff8-8a2d-c51f0988c8a2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=dde6b8e1-c39e-4897-9002-8083364a2f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:8e:e9:af:be:24:81:9c:bd:f9:2b:96:48:
                    7c:30:de:f3:8a:cc:d8:35:84:00:7f:42:bc:00:22:
                    82:47:c0:93:de:1f:e4:dc:b5:5d:50:d8:49:bb:03:
                    59:91:61:7b:24:12:ed:7a:09:5c:74:30:63:20:3a:
                    9b:a2:1f:ee:55:3e:c2:86:a4:bd:b6:bc:26:c8:18:
                    10:77:51:5e:47:e2:75:ca:2f:44:1b:a1:5e:b7:08:
                    73:0c:06:ba:27:15:79:bf:24:90:96:6d:c4:3b:da:
                    a5:43:34:46:7d:b7:05:52:53:a6:73:7e:2d:41:5d:
                    3d:f3:d5:4f:4c:e0:fe:32:54:4b:10:09:dd:b0:1d:
                    29:96:59:02:7f:f0:67:f6:d6:58:96:f6:c6:41:3a:
                    88:1e:4f:7a:6b:ef:87:7b:66:23:ee:aa:47:3e:01:
                    20:bb:c2:f3:a2:1e:96:5c:12:6b:10:a0:b9:d9:b6:
                    3d:f0:8f:7e:e0:a5:69:c2:70:9f:20:e2:35:c0:46:
                    67:ec:d2:c8:86:dd:b4:26:e9:82:b6:53:6e:17:75:
                    b9:eb:8f:fa:e7:01:80:6a:e6:ce:7e:38:b6:79:d6:
                    e7:aa:f4:d0:6f:e1:6a:cd:20:da:35:cf:8c:b1:7e:
                    8a:24:67:51:f0:b1:91:fe:42:b0:92:e4:57:d8:ad:
                    09:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1E:53:11:28:44:C4:BB:07:FC:7D:69:37:D9:81:49:02:4B:01:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/678c2786-4349-3a13-8476-3b89495cae56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.crl

            X509v3 Authority Key Identifier:
                keyid:05:C6:11:20:66:E0:FA:5E:98:9C:8B:85:30:7E:E5:34:E9:0C:A0:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:9c:86:33:d9:ef:8a:e6:f1:34:b5:fe:91:fc:b0:f8:23:05:
         6d:fd:9e:c3:6b:4f:d0:61:99:8e:43:cb:20:30:fd:f2:b6:d5:
         25:fe:59:82:11:54:e4:3c:f3:53:d4:53:dd:cc:72:30:a7:1a:
         e3:37:05:a1:05:da:e0:fa:1f:38:5f:62:64:0b:4c:1b:50:90:
         b6:aa:60:25:c8:8a:54:fe:fc:02:2d:6c:7b:a3:e9:4f:d7:6e:
         55:73:2b:b2:27:5b:de:2a:5d:03:c2:36:1e:6e:29:5f:e2:56:
         fb:b1:64:1b:f8:3b:fa:3b:95:28:eb:9f:3e:a9:e8:40:87:ca:
         54:5b:3b:40:ac:b1:36:48:33:91:b6:34:ab:5d:c0:f3:12:4b:
         b0:e0:0b:5e:b5:cb:88:ae:3e:d8:5d:7b:fb:6e:a1:c7:4c:62:
         cb:62:ec:0d:40:b7:9e:de:2f:c6:89:ef:84:37:84:a5:97:62:
         46:b4:e8:73:86:ab:52:ec:73:7f:e5:36:20:8a:4c:25:2b:da:
         02:4a:22:69:1f:59:74:8d:c5:e9:b4:52:b9:9e:a6:c1:e8:74:
         b1:20:b7:7d:42:65:aa:28:89:3d:37:dc:7a:c9:b4:d7:1a:58:
         62:4a:24:89:31:d7:1a:98:bd:a0:96:a8:e2:ea:d7:c9:cf:28:
         07:c2:71:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:03 2025 by rpki-client