Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7876cfc4-e938-32bd-a80d-9645eb91f879.roa
File:                     7876cfc4-e938-32bd-a80d-9645eb91f879.roa (raw, json)
Hash identifier:          EGyEGAm82jrUO1ni+oK4tfOuaCNuDFwhomccKdz7tWo=
Subject key identifier:   FF:AF:E1:EC:FE:36:64:5E:41:86:16:AF:1D:B6:22:D6:7F:A9:76:DD
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584A119AA4EEFF2843710C84EC80
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7876cfc4-e938-32bd-a80d-9645eb91f879.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     19437
IP address blocks:        68.67.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:a4:ee:ff:28:43:71:0c:84:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=c4e378a8-7d0a-4fbe-b128-e470f4eaef8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:e5:63:00:52:6f:ff:c1:79:ff:fd:1c:62:
                    98:fa:51:10:29:84:35:22:4d:f8:a2:4e:fb:0b:16:
                    97:7f:90:ab:a6:c4:16:3d:5c:18:17:b4:fb:fa:3a:
                    c2:8d:21:00:69:0f:e3:21:70:cc:f9:23:23:02:a2:
                    33:a4:c2:ee:9c:34:f9:e9:ed:7e:d5:a0:c7:03:bd:
                    54:ad:89:ef:00:67:78:0a:09:58:f9:27:ff:e2:27:
                    07:f2:8f:13:d4:51:e3:08:ab:be:08:e3:07:b6:ef:
                    ca:fd:6a:d6:0e:4f:c1:87:c9:bf:22:60:d4:c6:5a:
                    ae:d6:eb:7d:3e:ab:b9:a3:f7:c3:80:f8:08:f3:74:
                    50:37:d2:29:1a:5c:78:93:3b:c7:f4:68:15:50:f9:
                    a7:f4:a8:c2:b6:a0:2e:55:51:ce:f5:a8:ab:cb:75:
                    90:86:10:84:e9:83:88:d9:c9:d3:8d:0c:61:32:4b:
                    0b:6d:b1:98:77:dc:35:85:08:9d:a7:7e:92:17:02:
                    d7:ec:02:4b:5c:e9:fe:11:26:00:9e:9d:ed:69:5a:
                    1b:d4:89:87:bf:52:44:a8:35:fc:7a:36:36:01:8a:
                    b8:0b:72:ac:49:11:10:a8:2f:13:c4:f2:56:9c:f3:
                    87:46:4c:20:35:cf:2c:ed:b0:81:e9:a8:f3:cc:cc:
                    cc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AF:E1:EC:FE:36:64:5E:41:86:16:AF:1D:B6:22:D6:7F:A9:76:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7876cfc4-e938-32bd-a80d-9645eb91f879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ef:30:72:1a:c2:ab:67:ac:34:fc:3a:ea:f5:0f:f0:79:53:
         d0:59:0b:b3:64:75:56:94:d0:5b:15:fe:9e:5d:0f:dd:ac:fb:
         18:a7:7e:5d:1b:5a:cb:16:6f:7a:32:6c:47:60:a2:a9:68:fb:
         73:08:34:12:b9:3c:d4:24:05:ba:61:82:11:14:e2:5d:f3:76:
         8e:56:67:7d:b6:19:94:b3:c4:d1:73:93:1f:64:67:f7:88:28:
         fb:c5:49:b3:68:65:ad:ad:05:78:bc:35:cc:0a:da:e0:2f:23:
         07:75:5f:9d:bf:f5:fa:1e:4e:f1:cb:55:3d:9b:0f:48:e2:f0:
         58:a1:83:78:3a:8b:64:aa:76:e9:a2:a8:1a:45:83:60:f0:d5:
         ae:42:f3:28:ea:f6:96:21:01:54:14:09:0a:cb:1c:af:d3:83:
         e5:a1:ac:9d:71:cc:30:1a:6d:8f:a0:cd:37:5c:ee:96:be:57:
         41:53:97:5f:b8:38:8d:1b:33:30:10:6c:cd:1e:b8:d7:2f:62:
         67:27:a4:47:95:6c:45:70:d8:57:df:17:07:82:8a:c1:0b:70:
         ce:ef:76:c1:c5:bb:8f:47:cc:14:de:60:0a:d1:2c:37:e7:a8:
         92:c2:af:aa:ff:9f:3a:f7:21:0b:26:9f:94:04:b3:32:94:f2:
         63:39:93:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:25:45 2025 by rpki-client