Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/16254962-454c-3505-87cc-bcd272c9dfe1.roa
File:                     16254962-454c-3505-87cc-bcd272c9dfe1.roa (raw, json)
Hash identifier:          iREmFBLcEcHuI2sMeJ9TB4qHGtjCp+xzotIW1MB4kS4=
Subject key identifier:   A7:8B:79:1F:7C:B8:38:39:CF:D9:2D:3F:58:8C:C5:B1:87:26:B3:B0
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858494B643031F7226E7EA582A8C0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/16254962-454c-3505-87cc-bcd272c9dfe1.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     54858
IP address blocks:        76.14.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:30:31:f7:22:6e:7e:a5:82:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=b02d4aa0-afc3-4d45-9a6b-5e83cb45cb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:b0:83:aa:23:92:b5:2c:62:e2:0d:b2:80:
                    17:0e:ab:c0:ae:a5:7a:ed:e7:76:27:5b:ad:01:c6:
                    94:55:10:cd:f6:0e:bc:b0:a5:6a:9f:06:bf:40:60:
                    0e:8d:05:8e:37:10:07:37:86:47:f3:9c:6f:23:e6:
                    28:50:53:45:29:9a:7a:62:79:56:a8:76:46:f0:63:
                    50:b7:13:d3:61:0b:18:18:c2:ef:22:31:be:40:52:
                    9f:dc:18:ae:d4:8d:45:cf:28:47:e5:4e:ee:3a:32:
                    fe:54:83:91:3e:9d:5b:c9:e4:a5:f9:59:8a:f0:f8:
                    6f:db:80:e3:80:e1:ed:ee:dc:7f:46:1b:f7:84:f9:
                    b6:91:03:05:e4:4b:d3:47:80:78:74:2c:b1:7f:07:
                    68:04:ca:e2:05:c8:9e:28:23:eb:0c:a6:dc:df:de:
                    5d:0e:60:97:1c:a4:eb:75:ed:3b:a5:89:ff:1c:a4:
                    cd:54:24:7c:59:02:b2:d0:92:83:2d:b8:3e:3e:28:
                    e8:7c:c4:f7:ec:dc:35:4e:df:83:53:3f:a6:f9:4c:
                    95:b1:5a:ed:1a:fe:52:0d:1c:f9:aa:96:1a:be:89:
                    43:7a:62:4d:d1:8e:93:e0:23:90:32:83:d4:f2:ff:
                    2f:63:e3:08:02:90:6f:3f:34:a5:2a:da:de:d2:dd:
                    5e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8B:79:1F:7C:B8:38:39:CF:D9:2D:3F:58:8C:C5:B1:87:26:B3:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/16254962-454c-3505-87cc-bcd272c9dfe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.14.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:8f:ce:f1:33:f2:88:bc:9e:3f:b9:82:a4:94:1b:15:d2:95:
         c4:c8:3f:0a:f8:76:21:7b:a7:ac:a0:1b:f1:95:91:4b:58:4b:
         18:31:bc:25:3d:25:2b:c8:da:8d:6a:3f:65:4d:79:00:ba:aa:
         0d:9d:ec:62:cd:6d:1e:02:9a:73:8a:b7:7e:3b:5a:1e:d9:1c:
         88:05:81:2f:c9:04:be:ac:5c:51:0e:e5:81:da:ec:ee:9b:1f:
         35:c5:f1:48:3d:f6:85:a7:2c:59:af:f1:97:ad:9f:e7:63:e4:
         bf:97:72:ba:bf:17:80:b2:1b:d4:e9:42:97:90:c9:73:2b:ff:
         13:79:e9:11:eb:f4:21:93:4a:c4:8b:a3:e1:b0:f1:b9:65:d4:
         6c:5b:f6:89:81:74:f9:01:14:d1:c0:9b:b8:ed:6f:3c:00:a5:
         f7:ec:d0:27:59:ac:2a:a8:e4:20:7d:3d:9b:aa:03:5e:89:e2:
         df:51:9e:74:12:7c:de:c8:b1:4f:ce:a9:a4:7f:23:4c:f3:7c:
         58:d1:b4:5c:c6:fd:bc:53:dc:33:78:73:a6:71:62:d6:55:95:
         3b:d7:c6:d3:d3:b6:34:4e:45:70:2b:9c:cf:8c:a5:8c:2e:4d:
         9b:f7:e1:95:ef:76:3f:bb:81:fa:c2:a4:33:1f:8a:63:b3:de:
         52:62:fc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:09:28 2025 by rpki-client