Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/0f8115e7-3642-3437-b0de-9f2ea1d7600e.roa
File:                     0f8115e7-3642-3437-b0de-9f2ea1d7600e.roa (raw, json)
Hash identifier:          C496b5+CDPloBjm3AYRPzweWh06HKlI6cXrfbcAUsLM=
Subject key identifier:   C9:69:E6:D6:4E:D1:CE:90:30:54:95:EB:FC:8E:CE:CA:FB:17:A7:61
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F43285848A164B381A0AF996BD65892C0
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/0f8115e7-3642-3437-b0de-9f2ea1d7600e.roa
Signing time:             Wed 22 Jan 2025 15:34:56 +0000
ROA not before:           Wed 22 Jan 2025 15:34:56 +0000
ROA not after:            Tue 22 Apr 2025 14:34:56 +0000
asID:                     23546
IP address blocks:        76.77.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:64:b3:81:a0:af:99:6b:d6:58:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Jan 22 15:34:56 2025 GMT
            Not After : Apr 22 14:34:56 2025 GMT
        Subject: CN=f5da6f28-25ac-4532-9634-95bf17e83e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:ab:7e:3f:57:f7:3b:7d:27:12:16:f4:79:
                    35:da:05:43:6c:8b:60:ee:8f:98:e3:fb:d0:cb:6a:
                    07:f4:99:e6:5b:be:00:38:e7:4d:38:24:77:df:64:
                    56:0b:6d:7a:42:62:c3:86:3b:25:11:37:17:f3:ee:
                    f2:f1:a6:d2:a2:ea:b8:64:99:cc:81:c0:04:6c:82:
                    83:05:31:3d:f5:e0:90:0e:b0:10:24:a4:00:65:7f:
                    1f:5f:c9:a2:4d:aa:92:0a:26:76:f5:27:39:6f:11:
                    2d:9b:09:55:70:4d:21:34:57:33:df:c0:c3:61:85:
                    21:4b:a9:02:08:4d:04:8b:71:4d:6c:e9:b3:20:e9:
                    be:2f:1c:7d:4d:b2:62:3e:2f:ef:69:b7:b6:fd:38:
                    65:99:54:b2:0c:4d:7c:e1:26:bc:ca:c9:3b:d6:70:
                    d6:4d:32:3f:b6:16:ed:7a:87:2b:b6:4d:15:d5:42:
                    bb:42:20:82:33:bc:1e:0e:76:9e:bd:5a:8d:51:46:
                    eb:48:59:0c:aa:79:c1:47:24:fc:0b:13:cb:e5:3d:
                    10:6d:90:a9:df:c8:12:cf:be:7f:0e:dc:cd:74:5b:
                    18:5d:19:a0:ea:fe:16:96:6e:23:4e:36:87:0c:d9:
                    9e:c8:92:ef:86:13:56:84:47:f3:21:88:a3:8b:62:
                    9d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:69:E6:D6:4E:D1:CE:90:30:54:95:EB:FC:8E:CE:CA:FB:17:A7:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/0f8115e7-3642-3437-b0de-9f2ea1d7600e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:39:c7:f6:80:b9:91:fa:4a:8b:3b:2f:d7:cf:c5:90:e5:46:
         52:d8:a5:c5:8b:5b:fe:f4:95:6a:36:03:82:9e:bf:0b:cb:56:
         83:8e:3e:b8:b9:a4:11:0a:86:c6:5f:1a:c2:24:72:ab:a0:fe:
         4c:0f:5f:01:38:db:46:5f:6e:3b:27:75:99:64:26:76:64:84:
         a0:a9:a0:16:aa:76:89:47:6c:33:25:28:64:e9:0f:8c:a0:14:
         31:89:e1:39:6a:6d:03:c3:eb:a2:16:cd:86:d1:da:fd:c7:87:
         8a:0b:a7:5b:a8:aa:2f:c4:99:d6:51:e9:77:d0:7f:db:aa:f6:
         b1:81:2b:e2:3f:34:dd:43:5b:ef:17:86:79:8f:b2:ad:ca:7e:
         4e:9e:4f:b0:93:5b:ec:4b:37:25:91:c8:e0:eb:a2:fc:b1:8d:
         ae:25:53:93:50:07:f5:21:6f:e9:59:64:57:50:3c:85:5f:e1:
         72:8d:65:bf:fe:eb:15:f3:7c:56:83:35:2f:1b:53:98:96:84:
         db:e1:c4:b0:53:87:55:67:9a:ea:90:bd:59:82:88:27:37:29:
         8d:e4:3d:7d:c9:3f:99:81:d9:30:6c:64:74:b8:f1:45:3b:ee:
         7b:2b:bf:2c:3b:16:fd:84:92:4d:76:6e:e9:16:d8:df:f2:aa:
         78:6f:9e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:15 2025 by rpki-client