Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ff6512e2-8768-347b-b6de-54dce8a114a8.roa
File:                     ff6512e2-8768-347b-b6de-54dce8a114a8.roa (raw, json)
Hash identifier:          97KFPaWd6iHXUcupIQCKwtSxdwJYiL4sBybA2FC75Bk=
Subject key identifier:   BB:CE:DF:AD:30:6F:D3:12:14:AF:35:F2:56:B6:BE:97:A2:0C:43:D4
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584961B9A2009883C04CE7416300
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ff6512e2-8768-347b-b6de-54dce8a114a8.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     12083
IP address blocks:        208.74.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:a2:00:98:83:c0:4c:e7:41:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=08d15de0-e9a5-41d6-97e2-9b2fd0d50754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:f5:4b:85:53:04:07:3f:3d:fb:05:60:a1:
                    37:ef:da:be:d4:38:16:af:28:e8:03:56:22:97:08:
                    97:0b:d4:fb:02:5e:2e:30:f9:00:03:78:74:32:c0:
                    ce:e0:ba:9a:37:80:1d:ab:53:7e:7b:f5:a1:64:b4:
                    9a:c2:60:92:ca:39:63:ce:26:5a:0b:7d:c4:1c:30:
                    8c:19:bd:fb:7f:28:04:43:83:e5:f5:f6:ba:2f:cb:
                    e4:3c:5f:99:f0:ac:d4:d5:25:42:1b:76:7e:eb:fb:
                    a7:6e:3b:5f:5e:54:92:7f:78:5a:d2:0d:85:78:6c:
                    94:ae:c2:0d:28:b6:6b:60:0e:3b:60:5e:9c:5b:55:
                    5e:42:8b:d6:11:d1:ca:e9:93:55:f7:53:6b:53:63:
                    e2:d7:4f:7a:95:a9:9b:b4:6b:be:74:88:57:a5:20:
                    ad:09:e9:7c:21:dc:0b:5e:05:c6:d8:99:a2:de:f1:
                    8b:12:e9:6a:c3:11:a4:63:97:f2:b8:ea:8e:52:09:
                    38:3d:ef:6f:11:ff:f6:84:e4:d8:b1:85:9e:16:65:
                    ee:c6:df:2c:d0:72:a6:c1:d6:ac:8f:74:c2:0d:0a:
                    0c:ca:1b:73:5f:69:a6:ee:48:10:4a:f2:56:d1:35:
                    ae:91:a7:92:e8:73:1b:e5:cd:01:01:c6:01:22:a6:
                    9b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CE:DF:AD:30:6F:D3:12:14:AF:35:F2:56:B6:BE:97:A2:0C:43:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ff6512e2-8768-347b-b6de-54dce8a114a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:55:49:3e:97:5f:55:8e:a1:2a:cd:3a:d3:ec:9b:a4:38:f4:
         bf:bd:d3:29:7a:0e:bf:ce:85:b9:49:dd:ce:d0:75:4a:3b:c0:
         85:ff:b5:10:b7:1a:3f:fb:cb:93:81:da:b0:21:46:fd:b2:2d:
         7e:bc:06:c8:bb:24:c9:cc:10:83:04:d0:da:2e:09:5c:04:5e:
         8a:4c:c3:4c:21:14:b7:6b:15:ec:7f:9e:8a:38:ee:4f:d6:96:
         ef:2e:c6:50:7c:a9:28:cc:42:a5:32:3a:5f:06:58:0d:a3:2f:
         63:3c:2c:56:16:89:bc:e0:03:a3:6e:10:3b:ab:e7:15:5a:d0:
         e0:33:34:f2:7e:22:c1:d9:76:80:8f:96:af:28:98:63:95:1d:
         fd:53:e6:22:9b:f4:ce:6c:cc:94:de:c3:12:94:79:94:ac:59:
         fe:43:a2:82:c7:88:fe:33:47:4e:e2:20:87:6e:b8:f7:e4:52:
         3b:20:1f:65:4c:8c:74:21:31:3c:77:6c:ad:ce:67:7d:4d:a8:
         3d:28:8d:90:3e:b1:dc:30:95:41:7d:55:ab:bb:98:ba:69:44:
         3b:aa:32:92:54:7c:06:91:46:a6:e9:57:f4:8c:d0:14:a3:3c:
         d7:10:7e:ca:21:07:f1:0e:58:22:50:45:f5:fd:ca:5c:1b:40:
         e3:8d:19:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:35 2025 by rpki-client