Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/f9d49657-6d05-3b8c-b970-634f3d73d3d8.roa
File:                     f9d49657-6d05-3b8c-b970-634f3d73d3d8.roa (raw, json)
Hash identifier:          Z2T81jXOX2k6mZ6HTv5mc8jrwpmo7imF/MiXSX0uj7g=
Subject key identifier:   B4:F0:16:F8:BB:71:41:97:BA:6E:34:33:CA:0F:89:CE:7D:10:28:1B
Certificate issuer:       /CN=293ffb60-5163-4ccd-8c12-c520cba4608b
Certificate serial:       010D0C9F43285849E225147E66D6E47B1456DB00
Authority key identifier: 6D:A3:88:72:CF:F2:A2:88:34:FF:26:E8:6E:73:11:06:0D:DF:B1:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/f9d49657-6d05-3b8c-b970-634f3d73d3d8.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     54598
IP address blocks:        208.76.213.0/24 maxlen: 24
                          208.76.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/293ffb60-5163-4ccd-8c12-c520cba4608b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/293ffb60-5163-4ccd-8c12-c520cba4608b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:14:7e:66:d6:e4:7b:14:56:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293ffb60-5163-4ccd-8c12-c520cba4608b
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=b09fbc2f-d02e-446e-a686-1e03929e53a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:70:9b:39:d2:16:ad:b6:32:a3:45:98:e7:f1:
                    b8:cd:2c:9e:8e:ca:02:0b:86:97:72:5c:4e:ee:a2:
                    f3:4c:ad:72:d3:07:1d:51:c5:db:84:a4:28:e3:8b:
                    0b:ef:5f:46:df:76:fb:b4:66:79:01:bc:a3:89:e1:
                    07:e6:03:60:db:cc:f0:37:a4:70:e5:28:e2:53:c7:
                    e5:9b:8b:c6:82:3f:de:84:2a:65:15:8e:ce:a0:4b:
                    ac:36:52:18:2f:a8:2f:82:cb:16:3e:70:cc:63:b9:
                    00:4a:91:8f:b2:3c:b4:4b:67:71:52:68:1b:49:87:
                    3c:20:77:8b:da:1e:7c:42:2b:3b:66:42:a0:65:20:
                    c2:ee:ed:ff:58:07:2f:14:34:7d:6e:5d:c2:a0:b1:
                    11:3b:1f:dc:74:5c:bb:87:f6:9c:03:39:c9:5c:b3:
                    22:8e:9b:61:55:07:ce:f8:a6:12:43:26:3d:d4:fb:
                    43:5c:68:db:fa:d3:6f:f9:ab:66:4d:77:40:28:9a:
                    3e:3b:40:11:78:c0:c2:38:4c:e3:4b:52:84:ce:c8:
                    b8:47:95:a1:5a:dc:9f:16:57:aa:39:b0:d2:91:e8:
                    3b:0a:a0:75:6f:78:c1:0a:5f:4e:b8:f9:a3:01:0f:
                    83:7e:30:ff:5c:d4:14:8c:5e:38:05:20:80:d3:67:
                    46:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F0:16:F8:BB:71:41:97:BA:6E:34:33:CA:0F:89:CE:7D:10:28:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/f9d49657-6d05-3b8c-b970-634f3d73d3d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/293ffb60-5163-4ccd-8c12-c520cba4608b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:A3:88:72:CF:F2:A2:88:34:FF:26:E8:6E:73:11:06:0D:DF:B1:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.213.0-208.76.214.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e7:d6:21:e6:00:d3:25:ba:de:a9:ea:6e:df:c5:bb:2d:f7:
         75:d1:bc:98:78:14:ec:9c:a5:4b:7d:0f:65:a6:4e:96:7b:8b:
         fc:d3:21:cf:c3:d6:43:8c:88:f7:73:62:f9:62:e9:90:f6:78:
         d1:8b:96:03:34:e7:43:85:2e:2d:46:75:bb:90:ac:00:2e:64:
         4c:69:f1:f9:b6:ee:2d:a8:c4:e2:02:23:69:04:bc:48:71:c6:
         6f:9b:64:7b:dd:80:34:59:98:d3:ed:0b:00:97:df:f0:04:27:
         61:29:93:af:a9:80:aa:2a:97:f3:af:ce:a1:15:0a:4c:5a:4b:
         5f:ea:84:e2:82:6c:7d:19:8c:ee:77:40:2c:9c:1d:47:47:3d:
         cc:2e:8a:60:e0:99:30:c1:3a:a9:17:2e:39:82:cf:a0:01:01:
         ae:f8:0b:48:62:54:c7:4e:37:7f:20:ed:64:82:ff:d4:17:d5:
         f8:88:7d:0a:9b:2a:d5:12:64:e7:11:09:79:69:c1:a5:19:de:
         25:35:5a:9c:e1:72:f7:97:84:03:58:64:6a:5c:18:33:ff:b9:
         7d:96:64:2d:34:b3:50:57:ce:d9:42:dd:fe:17:bd:ae:af:0b:
         9a:f2:e8:2b:c6:44:24:ac:b2:4c:71:53:30:41:6f:d3:5a:cf:
         c9:ea:bf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:06:32 2025 by rpki-client