Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5cccfa4d-2301-3e33-a11c-f7bd91c5c775.roa
File:                     5cccfa4d-2301-3e33-a11c-f7bd91c5c775.roa (raw, json)
Hash identifier:          3SozgWiKMbQW8kJfIJxQDa20d2SDlwANhWKUH6Lr1NM=
Subject key identifier:   5A:5E:BD:3A:2E:05:5D:23:33:13:09:1E:FF:73:4B:EE:04:D8:C1:E3
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584A65A28FCCB76B01470DD21B80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5cccfa4d-2301-3e33-a11c-f7bd91c5c775.roa
Signing time:             Thu 03 Jul 2025 15:24:57 +0000
ROA not before:           Thu 03 Jul 2025 15:24:57 +0000
ROA not after:            Wed 01 Oct 2025 15:24:57 +0000
asID:                     23473
IP address blocks:        76.10.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:a2:8f:cc:b7:6b:01:47:0d:d2:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul  3 15:24:57 2025 GMT
            Not After : Oct  1 15:24:57 2025 GMT
        Subject: CN=88823be4-8c89-4e5e-a7c0-0adfcecf7260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ee:2a:cd:9e:17:92:69:39:e2:b2:6a:d7:44:
                    38:92:ee:49:0d:27:c9:ee:6c:38:d4:fa:82:e0:9b:
                    98:81:4c:5e:d6:f4:d0:49:26:89:aa:30:39:9b:d4:
                    c5:8e:f0:b5:fc:78:d5:d4:41:fe:97:11:f8:78:8f:
                    d8:5d:99:68:cc:5f:b4:3f:c2:5f:68:1a:ba:01:a1:
                    02:5d:66:5e:e0:b1:a1:97:d0:f8:21:9d:fa:47:3c:
                    98:ef:71:b3:28:cb:fe:e8:4e:78:6c:ae:60:16:1d:
                    ce:6f:79:80:09:8f:0d:49:0d:d1:2e:dc:24:6d:23:
                    03:cc:01:ed:f8:a8:0e:68:bc:06:d0:95:d5:cd:c9:
                    96:f7:4a:8e:be:95:02:61:78:2a:ac:fb:00:9d:da:
                    f4:f3:5d:a4:1e:71:96:92:6c:4a:cf:48:66:8a:d4:
                    0b:b5:dd:e0:c4:c3:52:49:0a:95:a8:de:04:33:b1:
                    2c:fc:64:84:a5:46:ac:43:06:eb:78:46:82:e3:98:
                    04:9a:b8:b6:dd:b4:d1:83:a3:28:9c:26:cd:39:7c:
                    5a:21:69:d4:22:9b:00:9c:c6:99:e8:bb:3e:27:12:
                    06:a3:a9:4e:d9:68:fb:39:c5:97:58:a1:1d:6f:25:
                    dc:2c:ea:03:12:1f:d1:a6:c3:88:8a:f6:55:0e:73:
                    9c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5E:BD:3A:2E:05:5D:23:33:13:09:1E:FF:73:4B:EE:04:D8:C1:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5cccfa4d-2301-3e33-a11c-f7bd91c5c775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.10.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d1:21:de:4b:b9:00:38:e5:2a:7e:0c:f4:53:e2:45:5b:12:
         3e:47:ff:b8:0a:56:3b:11:99:1a:65:02:c4:63:b0:94:52:2a:
         eb:e1:5b:f6:50:52:7f:cd:87:5a:b9:ff:47:55:b1:04:6a:39:
         da:80:cb:cc:dc:c5:bf:ce:92:e1:0a:59:59:7e:19:04:7e:9c:
         37:40:3f:3e:2d:25:d1:c9:ba:b4:87:e7:c1:39:02:e3:62:74:
         f6:67:bd:8e:0f:1d:fb:8a:17:19:17:76:05:40:60:7f:f1:b4:
         f3:f2:98:8b:a9:e0:9d:c4:41:7a:d2:ad:7a:3b:55:9a:71:36:
         53:dc:81:64:4d:e7:6a:0d:70:ca:2f:c1:76:a3:95:22:05:1b:
         89:a7:19:8b:97:87:bb:ec:cf:25:f5:94:11:2b:9a:26:9e:01:
         e4:5e:c4:e8:92:5c:8d:e7:92:fa:14:e2:19:75:18:55:98:6a:
         3a:14:c6:9a:2f:b0:5a:15:c9:d6:67:f3:3b:38:66:f7:cd:6c:
         13:9f:dd:6a:aa:95:84:94:57:fd:de:5a:aa:b0:30:ac:b6:0d:
         fb:5a:9e:84:9e:ea:2d:b1:f2:1e:6b:48:e8:66:1f:1c:ef:ef:
         74:44:0b:59:a8:dd:48:30:28:6d:71:04:53:ed:76:b9:4a:1e:
         60:43:74:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEploo/Mt2sBRw3SG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI1MDcwMzE1MjQ1N1oXDTI1MTAwMTE1MjQ1N1owLzEtMCsGA1UEAxMk
ODg4MjNiZTQtOGM4OS00ZTVlLWE3YzAtMGFkZmNlY2Y3MjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+4qzZ4Xkmk54rJq10Q4ku5JDSfJ7mw41PqC
4JuYgUxe1vTQSSaJqjA5m9TFjvC1/HjV1EH+lxH4eI/YXZlozF+0P8JfaBq6AaEC
XWZe4LGhl9D4IZ36RzyY73GzKMv+6E54bK5gFh3Ob3mACY8NSQ3RLtwkbSMDzAHt
+KgOaLwG0JXVzcmW90qOvpUCYXgqrPsAndr0812kHnGWkmxKz0hmitQLtd3gxMNS
SQqVqN4EM7Es/GSEpUasQwbreEaC45gEmri23bTRg6MonCbNOXxaIWnUIpsAnMaZ
6Ls+JxIGo6lO2Wj7OcWXWKEdbyXcLOoDEh/RpsOIivZVDnOchwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFpevTouBV0jMxMJHv9zS+4E2MHjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNWNjY2ZhNGQtMjMwMS0z
ZTMzLWExMWMtZjdiZDkxYzVjNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATAoLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHPRId5LuQA45Sp+DPRT4kVbEj5H/7gKVjsRmRplAsRjsJRSKuvhW/ZQ
Un/Nh1q5/0dVsQRqOdqAy8zcxb/OkuEKWVl+GQR+nDdAPz4tJdHJurSH58E5AuNi
dPZnvY4PHfuKFxkXdgVAYH/xtPPymIup4J3EQXrSrXo7VZpxNlPcgWRN52oNcMov
wXajlSIFG4mnGYuXh7vszyX1lBErmiaeAeRexOiSXI3nkvoU4hl1GFWYajoUxpov
sFoVydZn8zs4ZvfNbBOf3WqqlYSUV/3eWqqwMKy2DftanoSe6i2x8h5rSOhmHxzv
73REC1mo3UgwKG1xBFPtdrlKHmBDdA8=
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:27:42 2025 by rpki-client