Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/4807742f-74ff-37de-8eca-3d27d87c431c.roa
File:                     4807742f-74ff-37de-8eca-3d27d87c431c.roa (raw, json)
Hash identifier:          JzE5yEndhhWfvBvdCDzTSguSkFHO45175MB5E4RWkPc=
Subject key identifier:   96:89:BC:31:55:1A:F7:3E:F0:B8:1C:22:36:3C:6F:A1:B6:F3:40:5A
Certificate issuer:       /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
Certificate serial:       010D0C9F432858495004AFC9AFE89351A9067840
Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/4807742f-74ff-37de-8eca-3d27d87c431c.roa
Signing time:             Wed 26 Mar 2025 04:47:56 +0000
ROA not before:           Wed 26 Mar 2025 04:47:56 +0000
ROA not after:            Tue 24 Jun 2025 04:47:56 +0000
asID:                     14090
IP address blocks:        76.10.72.0/21 maxlen: 24
                          76.10.80.0/20 maxlen: 24
                          76.10.96.0/20 maxlen: 24
                          76.10.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:04:af:c9:af:e8:93:51:a9:06:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
        Validity
            Not Before: Mar 26 04:47:56 2025 GMT
            Not After : Jun 24 04:47:56 2025 GMT
        Subject: CN=1e38233c-b6e4-48d3-bee4-afe401ab8cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e8:75:22:42:38:f5:b1:6c:6c:93:db:b7:92:
                    55:b4:52:e7:4a:34:b5:46:94:90:b0:46:cb:5e:79:
                    b0:5e:50:a6:44:92:95:d0:f6:b5:7f:f3:81:1b:af:
                    ff:74:5c:ab:0f:4b:68:d1:86:83:95:3c:5f:40:bb:
                    c6:9b:d6:36:3f:08:23:1a:10:d6:45:d1:e0:ad:f9:
                    8c:e7:44:e3:1a:b9:6b:7d:75:3c:1f:c2:d5:76:45:
                    c8:09:68:45:af:bd:cd:28:fc:41:19:d6:95:3d:d4:
                    e4:72:bf:85:ef:0a:d3:15:77:b7:52:ba:ed:fd:ff:
                    58:a9:68:30:12:04:e6:ed:ca:9d:71:50:09:4a:2c:
                    51:13:01:68:12:0d:8f:ce:4d:9f:fe:93:9c:5d:b8:
                    0d:64:37:22:8b:2a:4e:23:b5:14:a5:97:91:15:5f:
                    06:ff:bd:6e:25:29:bf:4c:ed:1a:63:d3:86:64:1e:
                    a3:e9:4d:46:27:bc:d1:13:9d:3f:9e:16:6f:8e:65:
                    d2:38:5c:cc:34:6c:4a:57:6f:19:2c:02:a2:fa:40:
                    32:7a:4d:53:a2:ef:ae:44:b9:95:fc:3e:8a:cb:58:
                    b1:ae:03:8c:c2:2c:34:52:bc:64:e3:c0:af:39:25:
                    82:4e:6b:ce:db:5c:60:22:55:c6:f4:09:3d:a8:03:
                    9f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:89:BC:31:55:1A:F7:3E:F0:B8:1C:22:36:3C:6F:A1:B6:F3:40:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/4807742f-74ff-37de-8eca-3d27d87c431c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl

            X509v3 Authority Key Identifier:
                keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.10.72.0-76.10.115.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:90:41:43:af:0c:4d:36:a3:8c:e8:9a:43:81:89:ee:44:f6:
         0a:5a:f5:63:1d:7c:c4:89:0a:5d:1d:68:86:d1:c4:a3:20:9d:
         f6:9f:fb:cc:65:db:a4:3a:c9:65:11:7e:5a:99:48:2a:9c:a2:
         bf:8a:6e:e7:5c:d9:d6:b2:e9:65:1f:d2:79:2d:38:39:a4:30:
         4e:5f:b5:97:73:0c:c3:d2:7b:83:bc:1f:3d:bd:ef:2f:95:e3:
         e2:f6:87:2d:f0:b0:f8:98:28:f0:b6:ea:81:47:3c:ec:40:50:
         e2:77:bd:50:f8:c9:34:d1:d0:57:26:74:38:e8:92:3f:c0:3d:
         4b:a8:bd:f4:72:95:a9:4b:f0:fe:2e:74:f1:c3:ca:b0:b5:17:
         e5:12:1f:72:28:2a:eb:9c:11:b4:fd:7f:3d:8c:f6:6f:a0:88:
         82:45:f5:e4:76:e2:a5:18:78:9a:2d:cb:27:a2:6d:b5:56:31:
         a4:22:96:a6:66:57:bf:58:84:8b:d8:37:9d:78:bf:df:ed:c5:
         32:2f:e2:61:79:4d:ec:e6:e1:6d:23:0e:a6:82:32:eb:5c:34:
         7c:75:2c:95:6e:22:0b:81:ed:0a:9e:5b:7d:40:d6:2c:3b:fc:
         cc:9a:d0:e5:9b:31:74:ec:6b:12:e4:53:3e:e0:48:99:5b:ba:
         88:48:d5:da
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWElQBK/Jr+iTUakGeEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk
ZTYxMB4XDTI1MDMyNjA0NDc1NloXDTI1MDYyNDA0NDc1NlowLzEtMCsGA1UEAxMk
MWUzODIzM2MtYjZlNC00OGQzLWJlZTQtYWZlNDAxYWI4Y2YyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuh1IkI49bFsbJPbt5JVtFLnSjS1RpSQsEbL
XnmwXlCmRJKV0Pa1f/OBG6//dFyrD0to0YaDlTxfQLvGm9Y2PwgjGhDWRdHgrfmM
50TjGrlrfXU8H8LVdkXICWhFr73NKPxBGdaVPdTkcr+F7wrTFXe3Urrt/f9YqWgw
EgTm7cqdcVAJSixREwFoEg2Pzk2f/pOcXbgNZDciiypOI7UUpZeRFV8G/71uJSm/
TO0aY9OGZB6j6U1GJ7zRE50/nhZvjmXSOFzMNGxKV28ZLAKi+kAyek1Tou+uRLmV
/D6Ky1ixrgOMwiw0Urxk48CvOSWCTmvO21xgIlXG9Ak9qAOfDQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFJaJvDFVGvc+8LgcIjY8b6G280BaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3
ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvNDgwNzc0MmYtNzRmZi0z
N2RlLThlY2EtM2QyN2Q4N2M0MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1
NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl
ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5
ZGQ0ZWRlNjEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANMCkgD
BAJMCnAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAHJBBQ68MTTajjOiaQ4GJ7kT2Clr1Yx18xIkKXR1ohtHE
oyCd9p/7zGXbpDrJZRF+WplIKpyiv4pu51zZ1rLpZR/SeS04OaQwTl+1l3MMw9J7
g7wfPb3vL5Xj4vaHLfCw+Jgo8LbqgUc87EBQ4ne9UPjJNNHQVyZ0OOiSP8A9S6i9
9HKVqUvw/i508cPKsLUX5RIfcigq65wRtP1/PYz2b6CIgkX15HbipRh4mi3LJ6Jt
tVYxpCKWpmZXv1iEi9g3nXi/3+3FMi/iYXlN7ObhbSMOpoIy61w0fHUslW4iC4Ht
Cp5bfUDWLDv8zJrQ5ZsxdOxrEuRTPuBImVu6iEjV2g==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:39 2025 by rpki-client