Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/33d78819-d68b-349a-8527-6568c3437399.roa
File:                     33d78819-d68b-349a-8527-6568c3437399.roa (raw, json)
Hash identifier:          Bqkbd0/TGYWvPEQ/dJngseG7GlHCgKeW3NYy3+9GfOc=
Subject key identifier:   BB:F4:01:55:92:EC:D3:B2:8E:94:B1:85:FD:13:7A:48:BC:70:A0:9E
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F432858496A19A977A90C5BE46941B800
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/33d78819-d68b-349a-8527-6568c3437399.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     46294
IP address blocks:        76.77.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:a9:77:a9:0c:5b:e4:69:41:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=befdf846-8dd4-40e0-ae57-513cfb134361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fd:6b:32:ac:54:b2:d0:5d:97:dc:45:14:9b:
                    a0:c8:65:2c:7f:76:53:3c:3c:1e:82:e3:26:55:25:
                    53:6b:45:5d:be:0f:7b:27:63:97:e8:57:e8:88:57:
                    f3:60:1a:cb:55:d4:49:6a:54:66:8d:37:2d:1e:34:
                    16:8c:50:a2:19:e9:fa:c0:ed:52:e9:11:5a:15:b1:
                    72:a1:36:5a:8f:9a:3c:8f:ac:8e:7a:55:9e:1f:35:
                    aa:6d:52:21:fd:7d:8d:33:02:67:27:ad:dc:93:6c:
                    0e:9f:e6:3e:68:20:30:c6:5f:89:8c:6a:c1:0f:57:
                    53:83:5d:b3:e9:51:b4:70:6d:b1:36:f4:47:b8:54:
                    f3:b5:ca:8a:0f:fb:7d:25:69:16:9a:ec:e8:fc:e0:
                    98:4c:f0:3b:0b:cc:39:b6:76:66:ea:95:20:e3:e7:
                    cc:4e:e1:c6:36:f9:60:2a:a9:f7:14:66:06:23:87:
                    78:af:11:b8:ad:e7:e4:85:8b:15:40:db:f8:ac:a8:
                    a3:17:c0:3e:7e:17:2d:64:dd:64:19:a4:92:2b:be:
                    f0:dc:85:5a:be:d5:a8:29:59:b3:4f:ec:06:4a:6f:
                    eb:45:d6:51:ee:ef:25:63:4a:e1:71:67:e4:75:02:
                    2b:7c:14:10:79:7e:cc:c9:29:f5:35:e6:4f:e6:c7:
                    aa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F4:01:55:92:EC:D3:B2:8E:94:B1:85:FD:13:7A:48:BC:70:A0:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/33d78819-d68b-349a-8527-6568c3437399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:73:88:de:ec:84:6d:48:32:18:0c:95:fe:2e:d5:e8:75:e1:
         c6:84:45:e7:10:ce:d8:89:58:c8:73:86:80:6f:e9:9e:85:b7:
         a4:f8:3f:af:82:fc:1c:ce:85:ab:be:90:3a:19:18:cf:e0:52:
         26:05:3e:ec:f2:af:05:cd:80:a3:2a:05:9d:f7:41:4b:77:a0:
         1a:b1:5e:a5:6c:c2:3c:88:1a:39:8f:fa:4d:0c:79:01:c7:8d:
         de:52:11:5d:5c:bb:43:53:6f:25:14:46:8d:c6:37:fb:5c:11:
         be:c3:b1:f5:ce:eb:ca:5b:77:5c:39:cf:11:3d:59:49:af:9a:
         63:11:d5:5d:80:54:95:40:a4:62:40:be:67:a4:55:d9:02:77:
         b8:32:b9:65:79:6a:62:e5:79:0d:ca:9f:d7:18:63:c9:7b:71:
         20:47:bd:1d:06:74:7b:cc:f8:82:85:43:06:7e:88:6f:c5:04:
         8a:29:8b:d6:67:70:a6:e3:5e:15:a8:23:72:78:27:e9:96:58:
         2e:19:ce:25:b2:27:f1:fc:f5:45:71:be:d0:88:bb:c7:fc:4b:
         00:c1:20:4e:e1:d4:ca:92:f9:fb:d2:7b:13:cb:35:c1:3f:7d:
         50:70:3b:f5:48:8d:fb:1a:4c:be:c3:de:a8:98:3f:da:3b:83:
         9a:c4:2d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:40:21 2025 by rpki-client