Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/18900fde-da30-3fdd-80da-d78090baa1d7.roa
File:                     18900fde-da30-3fdd-80da-d78090baa1d7.roa (raw, json)
Hash identifier:          PVOgHIOdWUOgcd6N5hMatqIJjCuLK009t1awQAjmkZA=
Subject key identifier:   73:72:5F:1C:1D:FE:7E:D2:FB:08:45:54:85:69:3C:82:B6:69:C1:60
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AC0F94D4135FD2720C435C000
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/18900fde-da30-3fdd-80da-d78090baa1d7.roa
Signing time:             Tue 05 Aug 2025 08:38:17 +0000
ROA not before:           Tue 05 Aug 2025 08:38:17 +0000
ROA not after:            Mon 03 Nov 2025 09:38:17 +0000
asID:                     14618
IP address blocks:        168.87.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:f9:4d:41:35:fd:27:20:c4:35:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug  5 08:38:17 2025 GMT
            Not After : Nov  3 09:38:17 2025 GMT
        Subject: CN=19c64615-f6f9-4e85-809b-f93833483ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:df:b2:fc:40:29:c8:11:c9:d6:3d:82:9b:8f:
                    b9:db:3e:3f:55:5c:1c:f8:01:07:2b:93:9c:41:a4:
                    18:06:86:e0:dc:e6:aa:69:7b:e6:05:ed:00:3c:af:
                    35:6c:71:22:3d:7e:31:a8:51:4c:3a:d0:63:28:3f:
                    de:1d:1b:27:62:3a:28:98:82:f7:fc:95:e3:b9:30:
                    75:59:62:90:e5:1e:c7:64:75:54:73:8e:0d:af:b4:
                    0b:b6:59:cf:ab:71:df:57:9e:57:70:1d:a3:d7:04:
                    be:c5:a9:28:65:7e:cb:47:e6:15:5a:93:06:09:b8:
                    ce:e4:fe:f7:13:c9:33:fc:82:b0:db:a2:4e:44:7b:
                    76:4b:1a:04:1a:4e:1b:02:3e:f0:94:62:5c:9f:64:
                    42:94:6a:57:a9:e5:23:ad:d1:53:4d:f2:94:5a:39:
                    b9:ee:e5:46:de:fd:94:d2:37:0c:14:48:b4:5b:a4:
                    a0:4d:03:65:de:4e:30:7b:8c:bf:e4:50:82:ff:b9:
                    84:18:7c:51:1b:48:35:bd:22:0b:ff:62:15:7e:6f:
                    97:df:f6:d7:8f:3c:52:18:da:4c:b9:59:ad:85:d5:
                    f5:7f:71:f0:d9:55:74:01:f8:24:96:a4:fa:c2:2c:
                    63:d6:51:67:24:cf:c1:fc:4e:5c:92:71:78:a2:d9:
                    bc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:72:5F:1C:1D:FE:7E:D2:FB:08:45:54:85:69:3C:82:B6:69:C1:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/18900fde-da30-3fdd-80da-d78090baa1d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:6a:37:6a:5d:1d:5f:05:fe:45:c4:2c:06:98:47:c7:38:12:
         7e:35:2b:ca:ee:79:be:99:e3:16:3e:ba:59:6b:50:da:7a:81:
         24:c1:0a:55:bb:f3:fc:ee:dc:f2:a8:6a:d7:5a:c2:ca:7b:05:
         c7:90:06:1d:31:b4:0f:5a:54:ca:02:cd:d3:b4:f6:b1:22:ca:
         1a:20:c3:82:d2:72:30:5b:ab:d6:d3:4d:a5:af:df:32:24:06:
         c1:3a:3b:65:0c:02:24:a4:76:3e:c8:c6:4c:07:21:c8:62:6c:
         2a:2f:cb:c1:f1:a9:ce:54:34:a8:55:d5:6b:2c:95:91:18:87:
         d8:31:c7:4e:47:eb:1e:10:29:59:23:ba:9f:50:82:f6:6a:55:
         fe:a3:ea:39:a5:48:ad:83:45:3a:59:90:c5:4e:68:c6:f8:28:
         e9:60:a0:6c:f4:80:d6:c1:a6:79:fc:12:31:35:3d:81:43:f9:
         c3:d5:d7:0d:19:e9:b9:19:cd:48:eb:4d:a4:db:8e:ec:20:ce:
         8f:f6:98:e5:a1:8b:37:51:16:7c:87:84:bb:ec:a9:b1:b8:cd:
         14:15:a0:0c:69:65:35:ea:17:2a:c0:6c:32:3b:0a:13:38:96:
         a0:7d:3e:71:8a:01:ab:a0:ef:f4:f8:0e:12:0e:34:6e:c8:45:
         32:32:f9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:46:26 2025 by rpki-client