Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78367834-5f73-341b-96be-b9e10e59fce2.roa
File:                     78367834-5f73-341b-96be-b9e10e59fce2.roa (raw, json)
Hash identifier:          L0jAFwTomVfFNEabqIrdoPQDjQfGPo3IlXaNX5Rn23Y=
Subject key identifier:   71:B7:7A:EB:F6:DE:02:65:26:35:C2:5B:4A:5D:7B:9B:B2:21:39:B1
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFD7C3FB2918D9B9FF8080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78367834-5f73-341b-96be-b9e10e59fce2.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        172.64.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:d7:c3:fb:29:18:d9:b9:ff:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=8c28e785-6eb0-49f2-b2a2-25676fdd1967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:42:c3:f0:3e:bd:56:c1:78:2d:97:f7:f7:0b:
                    de:bf:f4:fa:5f:1d:b7:dc:45:04:42:d2:a7:a7:f9:
                    b2:c2:14:48:ad:7a:50:e4:85:44:b2:9e:d9:bd:ea:
                    38:66:fd:a4:22:e3:e8:73:c7:ab:29:2f:55:06:cb:
                    69:d8:16:2c:91:7a:18:29:15:4b:ec:3d:73:f8:11:
                    2a:21:d8:e4:91:7e:5b:25:1c:81:4f:67:08:51:ad:
                    da:44:53:f8:8b:7a:74:77:94:b1:c7:62:a9:ab:91:
                    f5:04:ba:50:f7:28:27:fc:1d:d5:7e:ce:54:67:12:
                    d6:2a:0c:a9:dc:9c:1c:bf:65:f8:e9:33:41:d3:3c:
                    bf:b2:67:70:6c:8c:62:31:23:4e:83:df:df:35:e5:
                    61:1b:5e:30:ed:c4:57:d1:06:be:c8:63:6e:b1:f6:
                    af:44:e9:b4:de:de:54:1b:09:2c:42:26:54:23:66:
                    83:fe:59:64:af:ad:fd:81:43:ec:1e:b9:89:a6:85:
                    a5:ae:46:2f:bb:c1:df:34:a4:7a:c3:62:96:26:bc:
                    f0:78:35:0c:4c:93:d7:60:63:8c:59:6d:41:78:88:
                    24:90:dd:27:3e:ef:9c:72:bd:c4:c2:17:57:45:ba:
                    af:db:ba:fc:51:94:64:ee:c1:7d:5a:48:e8:59:e6:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B7:7A:EB:F6:DE:02:65:26:35:C2:5B:4A:5D:7B:9B:B2:21:39:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78367834-5f73-341b-96be-b9e10e59fce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:10:60:a5:5a:ef:75:77:ea:ef:73:cb:e5:15:15:ee:85:d0:
         14:de:7a:21:00:55:28:92:9c:ba:e9:02:4b:f9:03:1e:97:61:
         64:57:24:07:ec:33:ec:de:bf:01:bd:d1:30:12:2f:ef:e1:06:
         1f:37:43:96:d6:e5:cb:38:c7:a1:97:0a:b2:c0:91:00:e1:a3:
         8a:c4:2d:7b:43:69:88:72:43:5a:7e:19:aa:c0:14:bf:2b:8b:
         67:8e:31:1f:eb:7a:33:55:3b:85:3c:17:73:e5:83:93:36:0f:
         85:a7:c8:4b:bf:56:96:13:04:4b:b4:20:e4:6a:31:28:b8:e0:
         e0:7b:7e:89:03:bd:72:d3:af:26:dc:4b:24:82:8c:d8:7f:50:
         e8:a8:9c:d1:d1:75:05:02:21:dd:6c:70:18:2e:26:e4:0c:60:
         b2:c1:51:af:c9:e1:4a:e1:b0:ab:22:41:bc:33:cc:a1:8d:41:
         f0:e1:aa:55:67:de:9d:f1:0f:26:94:d4:53:12:61:62:1d:d7:
         7c:ea:2c:a9:df:f7:a7:2b:f8:5b:b4:8c:92:14:a9:c4:2c:c3:
         d6:a9:bb:33:31:14:bc:af:cd:d8:f6:d8:14:55:3a:26:9b:c6:
         36:e8:fc:bb:bd:b4:8b:7e:60:75:e2:00:1a:35:6f:b0:ff:24:
         ca:8a:24:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:55:49 2025 by rpki-client