Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/0f8115e7-3642-3437-b0de-9f2ea1d7600e.roa
File:                     0f8115e7-3642-3437-b0de-9f2ea1d7600e.roa (raw, json)
Hash identifier:          baZCqeHHUUmylajCiBzhM2UPbakwHElHjT4dfCiEt4Y=
Subject key identifier:   69:65:1B:15:5C:C8:9D:A8:D5:E3:C3:6F:1B:6C:6B:C7:7F:15:84:8A
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F4328584A612B1D631C45A231EDC3A200
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/0f8115e7-3642-3437-b0de-9f2ea1d7600e.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     23546
IP address blocks:        76.77.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:1d:63:1c:45:a2:31:ed:c3:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=fdeb2e9c-a545-45d1-9d16-76b077b7303d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:69:98:ff:80:33:3f:ab:0e:e3:41:d5:ea:23:
                    58:70:bf:36:35:df:d5:9b:5d:40:60:74:b9:31:3d:
                    de:7f:be:db:cc:c0:22:cc:09:12:76:bd:23:1d:9e:
                    ce:a2:1f:9c:06:56:90:b6:ac:ac:3b:bc:55:0b:4d:
                    f5:b4:3f:6a:f5:19:e9:cd:c8:e0:72:be:d3:99:cf:
                    f1:68:7f:ea:c1:0c:d0:9f:fe:92:55:88:32:fe:98:
                    f0:19:ec:49:ef:53:00:df:a7:ee:89:cc:d0:61:3b:
                    7a:fc:47:7b:0f:71:c8:1b:a0:1f:a2:1d:8d:f9:8f:
                    68:0b:db:62:85:e1:45:41:51:44:bd:dd:6d:35:89:
                    22:7d:de:b7:9f:67:7a:b6:dc:2e:c4:41:27:e3:4c:
                    9c:2a:06:5d:01:0d:26:67:88:bb:f8:57:b2:26:0d:
                    ed:b7:f1:0b:69:b9:23:e5:16:49:ec:ab:5b:8d:ee:
                    7c:0d:31:a2:aa:c7:4b:dd:0b:61:a7:c4:63:21:5a:
                    78:17:46:f2:6d:09:8b:7d:32:1e:9b:cf:79:d7:e0:
                    36:c6:a8:a8:ba:7b:0c:b7:41:3e:cc:b1:5c:a1:29:
                    d7:0c:55:4f:f5:05:5e:32:be:9a:16:d0:c4:f5:a3:
                    be:1b:20:be:3d:fa:b0:07:e0:98:f6:a7:da:ee:94:
                    15:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:65:1B:15:5C:C8:9D:A8:D5:E3:C3:6F:1B:6C:6B:C7:7F:15:84:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/0f8115e7-3642-3437-b0de-9f2ea1d7600e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:26:12:c9:f5:e1:fe:2d:f3:28:05:0d:7a:65:f7:83:10:69:
         81:d2:62:12:d5:95:9b:54:6d:8a:96:c0:84:8b:4b:37:e5:8a:
         e0:d3:4c:3f:f5:33:66:1a:a6:9e:03:8d:f8:08:9c:fd:25:f7:
         1c:9b:d7:a3:9f:54:ff:33:9c:2f:ce:48:95:29:8a:df:3a:34:
         a5:4f:70:5d:6b:9b:18:bb:5f:48:77:ac:22:34:e4:f0:0c:81:
         5a:ea:fa:6b:cf:4f:7d:a9:9d:ea:05:4f:cd:01:ad:bb:c4:0c:
         e6:12:30:09:15:6a:64:25:4e:ec:3a:85:9a:3c:37:69:31:e8:
         53:13:3a:6e:07:66:cd:06:1e:6d:26:fb:04:3d:0c:b6:3d:49:
         0b:de:63:cd:a8:0e:13:54:48:4c:03:5a:dd:c8:0e:70:e6:03:
         85:c6:55:b1:97:d4:d7:29:a8:a0:cc:8e:24:22:1c:f1:ad:3a:
         71:f9:af:79:06:87:0d:59:16:60:31:dd:68:91:0d:40:5b:dd:
         bf:52:64:d8:f6:5e:c6:4c:0a:95:25:04:7d:6b:ca:c4:fc:41:
         e3:7e:90:de:3f:23:75:51:ef:01:c3:87:40:9c:f8:87:f2:4a:
         45:5f:68:50:73:c9:15:1a:6f:c8:00:0e:fd:ff:27:12:75:2d:
         5c:68:55:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 11:41:58 2025 by rpki-client