Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/46397b0c-4139-3aff-bf7e-00d25aaeafd7.roa
File:                     46397b0c-4139-3aff-bf7e-00d25aaeafd7.roa (raw, json)
Hash identifier:          IbgnGfDwFdSCDV1g99CxdMB2CvEzg9BFOEBgYA6op44=
Subject key identifier:   AD:FD:EB:18:70:7B:F7:63:33:32:7A:78:29:57:86:B6:C4:07:EB:71
Certificate issuer:       /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial:       010D0C9F4328584A00DAC63E7277E1CACDF68680
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/46397b0c-4139-3aff-bf7e-00d25aaeafd7.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     1640
IP address blocks:        76.72.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c6:3e:72:77:e1:ca:cd:f6:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=9e35f867-aa31-4f85-b733-88d3e3b0190a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9d:ce:c8:50:cc:9d:96:35:36:1e:c4:2c:ef:
                    ae:cd:17:7b:21:02:a8:c3:5d:77:e6:4b:e1:6f:26:
                    bb:99:36:d6:81:78:57:5e:42:f0:06:9b:6c:45:a9:
                    28:03:e4:7b:a1:ec:49:df:8a:69:30:d3:9a:50:5c:
                    73:e3:2b:a1:ff:73:98:04:b0:dc:2f:db:c5:c9:3a:
                    23:46:c8:3c:d1:e9:cb:fe:5d:98:21:da:a9:70:19:
                    77:c4:e0:b1:26:e0:f0:16:df:26:7b:85:5f:96:ef:
                    dc:db:85:73:04:ac:0f:df:f3:ff:91:32:f1:33:f3:
                    69:53:82:c4:7f:5b:d0:04:be:46:f6:46:97:48:12:
                    5b:b7:c1:7d:c1:a2:56:c2:c3:c0:d2:09:a5:7e:e9:
                    c9:ca:7e:61:d9:bb:fd:01:1c:75:a9:0b:32:df:4f:
                    37:5c:87:e7:3d:16:5f:17:2f:9f:d9:59:0a:c3:3c:
                    25:c3:ce:7c:a3:2c:3e:a1:09:a0:1a:92:bb:ab:83:
                    0e:77:68:06:51:79:8c:fc:e6:20:fd:bd:fe:b1:f4:
                    7f:cb:44:90:45:ce:72:c8:74:f3:14:04:3d:88:ea:
                    a0:cc:1c:2b:da:56:9b:5b:7c:5b:08:27:19:96:21:
                    27:1a:6b:73:f4:a6:c2:09:b8:87:43:56:a2:d9:47:
                    c6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FD:EB:18:70:7B:F7:63:33:32:7A:78:29:57:86:B6:C4:07:EB:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/46397b0c-4139-3aff-bf7e-00d25aaeafd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.72.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:52:c9:4d:41:10:81:ef:a6:57:3e:1f:3b:ba:ff:e6:e8:45:
         28:2e:83:b3:e7:78:09:b1:bf:fd:f1:0a:6a:2f:8b:a4:b6:e0:
         3b:ee:13:a2:05:b0:4d:48:0b:b0:1a:b7:8d:9d:8c:5c:7e:67:
         77:ec:44:99:06:ab:04:09:26:aa:0a:e3:fa:97:83:c7:86:ed:
         77:55:85:82:0a:b0:92:89:fc:1d:b4:02:37:af:43:5e:b1:5e:
         8f:20:47:c3:11:1a:4a:fd:0b:e5:84:0c:ee:3f:41:9a:56:63:
         70:27:08:9f:a1:fc:02:c1:64:b1:3b:4d:8b:30:7c:34:5d:05:
         bb:b7:95:e2:6b:8d:9b:45:07:a6:4b:11:b9:ec:3e:17:5a:12:
         14:53:d5:9f:b1:33:60:85:3e:8d:dc:c6:70:51:43:e1:79:94:
         6f:b8:24:c0:cb:2f:f9:97:a2:49:38:c8:84:32:e2:31:61:9d:
         ab:7c:28:5c:42:76:02:d2:06:1e:ba:11:4b:64:df:6f:8c:75:
         4e:96:4c:f7:6d:71:46:09:51:2c:fd:36:29:7d:50:36:ea:b7:
         f4:c5:0c:95:bb:47:e1:5d:73:7e:52:cd:72:a8:3c:99:f3:41:
         6f:7b:3c:98:11:e0:d9:12:09:39:0f:3b:2d:ce:35:bf:8b:f3:
         87:2c:00:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:23:59 2025 by rpki-client