Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/76c78763-08db-3cb1-83e6-92f1b41f1c91.roa
File:                     76c78763-08db-3cb1-83e6-92f1b41f1c91.roa (raw, json)
Hash identifier:          w/TzmDLJosdZ5c9IlQpKOFnpbt1x5RGtMXM6uqO4LTQ=
Subject key identifier:   32:FA:AE:13:91:46:9C:9F:A6:C3:7C:67:A0:CB:7C:3A:AA:B8:CA:31
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584A07D527CF8D5FC75955355A20
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/76c78763-08db-3cb1-83e6-92f1b41f1c91.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     14297
IP address blocks:        206.201.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:27:cf:8d:5f:c7:59:55:35:5a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=b8a12925-da03-4f28-8a7a-d5f7183d28ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:df:5b:00:02:75:4c:a4:ad:a5:d2:e0:c7:
                    b8:4b:c5:46:0d:26:e7:f5:bd:87:bd:01:e3:89:b6:
                    52:9a:82:16:d4:93:1b:c6:1c:49:56:a9:b8:a6:d1:
                    90:d5:67:8a:e9:ea:91:02:22:70:90:0d:2c:cc:42:
                    05:37:68:dd:ea:51:9c:f1:af:73:5b:68:d3:0f:5a:
                    c1:97:27:e2:f7:07:e3:f5:6d:d8:dc:ef:77:1c:fa:
                    5e:b4:f7:6e:e9:12:83:a0:1b:fb:18:34:35:03:de:
                    ea:da:a9:d0:91:b1:db:a6:e3:81:a9:7e:ba:82:bf:
                    ce:b4:bd:d7:19:10:e1:b4:0d:87:5e:d4:7b:9f:2b:
                    73:d3:b0:39:2d:e1:e3:b1:ff:de:aa:b4:b9:b4:3c:
                    f1:bc:45:37:de:d8:cd:da:30:39:bf:9c:1b:cd:a4:
                    b5:4e:cf:4d:40:80:65:c5:cd:87:ac:b7:0d:af:b6:
                    10:ad:e2:6b:66:4c:13:06:9e:93:65:e7:3c:19:dd:
                    b9:9a:7e:21:62:8a:99:6b:9b:2c:28:43:e8:83:e4:
                    00:f2:d3:ac:f4:b9:40:e8:e6:71:87:d9:6f:83:46:
                    56:e5:d4:5f:7d:62:00:a9:ac:e0:9c:ef:8b:f6:db:
                    3f:fa:cb:cf:d9:ad:73:79:80:6c:9f:d3:7f:a5:35:
                    6c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FA:AE:13:91:46:9C:9F:A6:C3:7C:67:A0:CB:7C:3A:AA:B8:CA:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/76c78763-08db-3cb1-83e6-92f1b41f1c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:31:fb:05:9f:66:45:cc:ff:b8:ba:d7:69:34:e1:e0:cb:dc:
         ef:9c:d9:06:d1:cc:0d:de:6a:ad:27:91:7a:be:2c:55:c0:bb:
         5a:32:34:e9:3a:17:c3:df:f8:e1:af:3e:08:1c:aa:80:ee:5f:
         0b:0b:ce:8e:d7:d4:ee:e2:32:fa:3e:69:ca:fc:6d:47:4c:0e:
         cd:b6:65:34:9f:64:cc:f1:17:25:c7:ec:56:c5:60:07:a2:51:
         eb:a7:54:ee:66:d7:f8:ed:b7:27:30:93:f5:44:e9:a2:f0:25:
         1f:fe:98:c0:d0:8c:94:e4:63:d7:39:14:7d:33:bb:bd:99:f4:
         0a:55:dc:f7:a2:32:f2:55:e3:8a:e6:cd:69:f1:e3:89:46:5e:
         d7:d1:82:8f:88:f1:70:7d:36:44:7c:17:8e:ee:17:4d:78:b9:
         d9:f5:a5:78:e4:72:b2:aa:a2:4e:a3:0c:0a:35:2f:a1:4c:f9:
         b5:79:30:cb:1e:fa:71:87:db:03:c7:30:db:35:d0:1a:7c:3f:
         21:91:2b:6d:0b:f5:ab:56:8e:a2:dc:2e:56:27:3a:28:e9:9b:
         3b:76:85:ec:1f:e3:77:3a:4e:00:8b:ca:d8:8c:9b:4a:b3:af:
         43:36:47:ef:ba:ea:b7:73:de:9a:b4:59:74:ba:28:d9:55:36:
         32:ea:0c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:43:11 2025 by rpki-client