Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8119298c-1fac-3d2b-a656-b7540129ae06.roa
File:                     8119298c-1fac-3d2b-a656-b7540129ae06.roa (raw, json)
Hash identifier:          w7RV0d0Ojv0NI8SlC9gMjuMAwv6E0hfEsvRnk31k9vU=
Subject key identifier:   BB:11:64:66:34:96:BA:7C:EB:62:E4:08:1C:E9:F0:5A:F4:66:2A:ED
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858494B642D877B729CA2E8407880
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8119298c-1fac-3d2b-a656-b7540129ae06.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     5650
IP address blocks:        76.191.96.0/23 maxlen: 24
                          76.191.98.0/24 maxlen: 24
                          76.191.100.0/24 maxlen: 24
                          76.191.102.0/23 maxlen: 24
                          76.191.104.0/23 maxlen: 24
                          76.191.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:2d:87:7b:72:9c:a2:e8:40:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=5a1c8c48-0040-40d7-a133-0843528a155c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:00:32:67:9b:94:15:4d:4c:50:89:ac:d4:
                    7e:eb:02:c0:96:94:3b:bc:5e:01:75:6a:68:23:50:
                    ee:05:5a:f5:32:f1:52:78:53:da:63:53:70:2a:ac:
                    63:18:8f:e8:d1:30:e7:16:c0:9c:75:73:9f:64:ce:
                    0c:79:6b:07:38:12:6c:1f:e2:b3:68:15:23:64:9a:
                    45:40:45:7f:bb:42:a0:d4:32:b8:1d:21:19:a2:06:
                    1a:a0:47:66:3e:de:4a:bb:a0:12:13:27:6c:4a:8f:
                    05:46:8a:a4:8e:7c:17:e6:f1:d4:a4:f2:04:d5:41:
                    39:be:a1:ac:5f:0c:ab:2a:da:a1:b0:30:30:85:3b:
                    ba:33:ff:d7:16:2c:63:26:93:2a:02:47:95:7f:78:
                    9b:56:92:4b:50:7a:ee:2f:85:81:98:05:1b:f0:02:
                    3a:80:41:31:14:56:6e:c9:0c:7c:d0:03:28:e7:9d:
                    cc:3e:fc:46:05:0f:a7:29:b6:0a:a9:d9:32:9a:de:
                    f6:cf:4b:4d:11:a7:5d:19:f4:5d:38:ef:8b:c6:62:
                    d8:74:45:5a:1c:5a:8e:50:19:86:e7:2a:0f:a7:87:
                    94:47:0a:99:61:31:54:ed:5d:d0:b9:c6:7f:a2:9a:
                    5e:d4:7e:be:98:34:13:5f:f1:1f:c1:d6:6d:5c:e8:
                    ce:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:11:64:66:34:96:BA:7C:EB:62:E4:08:1C:E9:F0:5A:F4:66:2A:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8119298c-1fac-3d2b-a656-b7540129ae06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.191.96.0-76.191.98.255
                  76.191.100.0/24
                  76.191.102.0-76.191.105.255
                  76.191.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:52:05:71:b9:fe:95:39:98:7c:4c:7e:c1:14:34:9f:63:7b:
         a3:1f:f1:44:40:1d:fd:3f:dd:9b:7e:78:95:67:8e:9e:d6:93:
         de:9d:61:50:a3:bc:61:ff:b8:68:bc:d9:ae:ce:ed:45:52:9b:
         47:01:98:88:53:86:34:26:e8:68:18:c9:3e:f6:e9:59:2b:09:
         0d:a2:35:42:84:54:1b:ed:a3:8e:84:c2:fd:9b:4e:b6:59:43:
         db:3c:6e:7a:78:52:3c:bd:98:3c:63:f4:82:d5:72:c4:d0:9e:
         90:c3:c6:dd:5b:d7:b4:2a:2b:5a:25:52:da:01:9a:77:ea:e8:
         b9:a2:25:5b:0e:3b:b2:86:6d:1a:cb:3e:7d:18:68:19:d5:b1:
         64:b0:90:45:67:2d:c0:8d:44:bd:ec:85:a3:fd:f1:2f:9d:62:
         e9:31:fc:15:6f:6e:5e:c5:c4:4e:2e:ed:92:ed:13:f3:e3:5c:
         b9:ca:d1:5b:62:32:a4:f1:3f:d6:94:23:52:46:b6:23:26:ea:
         a8:4c:9b:83:0e:68:39:80:b1:a2:ce:cf:d3:d3:65:e0:78:c8:
         5f:ac:f0:59:2c:f1:2e:1a:0f:0d:35:f5:0a:f6:82:0a:d5:9f:
         a6:10:64:d5:50:5a:f5:9a:5e:65:52:14:13:64:41:89:48:e8:
         f5:8b:68:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:19 2025 by rpki-client