Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/00f6a963-b32a-3889-b9fd-e220b34242ca.roa
File:                     00f6a963-b32a-3889-b9fd-e220b34242ca.roa (raw, json)
Hash identifier:          pA8zFCeca3ROWWtl3zKelPTDSicTtPOHMBuIjYl0M6E=
Subject key identifier:   91:DD:13:3A:D9:70:15:D4:75:83:75:89:16:07:72:13:79:0B:B6:AD
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858499829D217154C7508037D4E80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/00f6a963-b32a-3889-b9fd-e220b34242ca.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     203
IP address blocks:        168.87.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:d2:17:15:4c:75:08:03:7d:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=893b898d-4c95-4272-9e34-901cde825c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e6:5a:c3:59:66:d7:31:68:3d:d7:8a:38:ae:
                    58:27:7e:d2:bd:68:f9:a9:86:53:f2:b9:de:37:9c:
                    c8:f6:78:1d:42:cc:92:c4:f8:e2:b8:f6:40:f1:ee:
                    c8:3e:9a:17:49:87:a6:37:6c:91:45:c8:95:25:79:
                    04:cc:25:7f:9b:79:26:ff:81:f4:c1:6b:b8:1e:1f:
                    70:14:b5:2f:ff:24:c2:a3:ff:92:42:73:7b:d1:85:
                    f0:55:68:95:7a:20:4c:41:96:44:9a:b7:2d:5e:ef:
                    7d:af:be:17:54:18:f5:83:bf:f1:52:7e:de:b5:72:
                    41:c0:b8:55:fe:84:1f:40:c8:3f:fa:38:a8:e8:15:
                    da:d3:e3:2a:b4:46:ac:59:f5:21:cb:e0:fa:d6:4a:
                    d7:d1:1e:34:b9:ed:b1:13:7c:d8:96:3b:f9:75:4c:
                    d5:ea:2f:42:52:2f:b7:81:63:1c:37:fe:88:ed:ff:
                    9a:ed:75:91:2a:f4:36:ed:ef:f2:d3:66:90:e2:7a:
                    6d:eb:c2:55:31:38:3c:d0:2e:cb:46:7a:25:33:40:
                    d5:ca:ef:8e:b0:2c:f0:fc:f4:6c:1b:bb:fa:cc:6e:
                    f7:fc:67:c1:ac:1a:52:8c:2e:c5:17:e6:7d:d9:95:
                    9f:7a:30:2e:e2:d5:15:2c:57:ef:bf:bc:86:c6:bd:
                    d9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DD:13:3A:D9:70:15:D4:75:83:75:89:16:07:72:13:79:0B:B6:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/00f6a963-b32a-3889-b9fd-e220b34242ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:6b:e3:12:99:71:e0:51:da:29:d0:e4:9d:de:ba:35:e9:
         40:b3:fd:a6:61:05:12:03:58:ee:7f:d2:de:0a:95:36:fd:26:
         f3:d7:b5:d9:20:86:ae:6a:bf:ff:46:da:25:75:b7:67:af:61:
         f2:f7:d8:be:c9:e0:f0:ae:61:47:ea:50:2d:88:da:de:9a:da:
         cd:42:a9:24:87:9b:5b:7f:a7:68:54:56:d6:2d:d0:67:7c:ed:
         93:80:56:90:e3:67:4a:41:2b:be:97:56:8a:b1:7a:3d:a9:ea:
         4a:62:0a:4b:e9:bb:aa:95:6b:83:6c:bf:5b:87:dd:a3:fc:e7:
         ee:07:72:3c:d1:6c:fa:79:8f:6d:66:18:f5:ee:f9:c3:94:96:
         14:d3:3b:88:79:61:dd:a8:18:40:28:0a:0c:15:fc:0c:aa:dc:
         0a:c4:5b:8a:f4:99:73:81:14:a9:56:d8:0f:f1:46:be:70:75:
         7d:db:a6:de:81:98:70:2c:4b:1a:2a:a2:a4:55:02:ef:f0:0a:
         a7:9c:2e:64:01:fb:5e:c9:fa:73:b8:75:8d:cb:35:35:ad:9b:
         be:67:9a:d0:44:dc:59:d1:f9:bb:00:5e:48:ca:6a:b0:ff:5f:
         94:b7:6c:8c:60:33:e1:85:82:7e:b7:4b:53:be:94:e9:c3:a0:
         e9:b8:9e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:27:50 2025 by rpki-client