Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1cad5c47-9aff-3502-b3c4-990556f3e3f3.roa
File:                     1cad5c47-9aff-3502-b3c4-990556f3e3f3.roa (raw, json)
Hash identifier:          j5U2/MFfzPXBsQ9g4Ivz0izzmSxsx24WaQ1+BgMXrZQ=
Subject key identifier:   39:8D:E8:20:BE:2B:67:4E:4C:46:51:C1:32:A1:4F:F4:FB:3D:24:77
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AB91BB2791EDFE17495A05700
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1cad5c47-9aff-3502-b3c4-990556f3e3f3.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     60204
IP address blocks:        206.164.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b2:79:1e:df:e1:74:95:a0:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=3bc55df7-5819-4561-a3bb-84a33b639053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0b:c3:2f:da:b0:d6:66:bf:24:71:76:2f:a1:
                    ba:16:b1:ac:52:b7:73:31:72:f4:6a:f9:88:13:8c:
                    0e:7d:b2:bc:62:68:f5:9d:48:92:00:d8:db:d5:d4:
                    68:e0:5e:9c:f5:bc:c7:c5:96:74:5b:76:53:25:5c:
                    54:94:f0:05:34:1c:d3:e1:ed:fd:13:5c:0f:16:59:
                    db:d6:a6:1e:30:c9:3e:74:69:55:22:d5:f1:07:2f:
                    63:b1:06:10:fc:0f:77:80:a5:13:a1:43:73:66:e2:
                    78:73:fe:ce:ee:b7:c0:0e:61:96:e5:7f:f8:be:01:
                    62:91:ad:60:27:73:f0:ec:35:d8:33:20:75:bf:9d:
                    ef:cc:f8:9b:42:24:d2:e1:42:d0:fc:23:de:dc:ec:
                    23:6c:f5:b1:14:fe:6d:d4:5b:34:c2:4c:3c:eb:cc:
                    d2:40:81:88:99:c4:ad:46:b8:67:e8:4a:ff:e1:a5:
                    c5:00:d0:e0:6c:e1:7c:5e:9b:31:68:49:85:e2:ee:
                    f1:fc:7a:5b:a0:c6:df:e3:f4:1b:ae:48:c3:90:49:
                    7c:07:4f:75:22:de:94:7c:ed:f5:79:a5:fe:35:d5:
                    c8:94:a7:20:16:e7:1a:c7:07:fd:72:cb:01:2f:8c:
                    12:42:8b:17:5d:ca:2d:88:6d:d2:f7:4a:cd:be:50:
                    26:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8D:E8:20:BE:2B:67:4E:4C:46:51:C1:32:A1:4F:F4:FB:3D:24:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1cad5c47-9aff-3502-b3c4-990556f3e3f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:17:63:2d:ec:34:71:85:47:eb:54:dc:0a:8a:7c:df:6b:71:
         67:48:9e:aa:e0:03:c7:c1:31:fe:64:de:ed:0f:84:43:bf:7d:
         98:60:46:be:4f:2d:7d:61:32:5c:55:6f:b5:42:03:09:76:77:
         6b:0a:6c:22:01:7a:68:db:e9:e3:9a:cb:2b:dc:44:8d:62:ed:
         8c:1b:1e:82:1e:33:52:43:70:54:a7:72:6e:4a:f0:35:1d:aa:
         7a:ec:6b:35:29:3d:9c:ec:f7:5d:d4:99:d4:f8:a1:ff:8e:2e:
         d4:e3:3b:45:0d:34:62:92:cf:03:37:af:c4:a9:00:91:9a:14:
         a3:4a:1b:5a:6d:71:37:07:7e:3c:28:b3:9a:cc:c4:db:be:12:
         98:9e:3e:2b:b6:d2:c3:9a:da:16:eb:8d:c4:51:d1:57:de:a2:
         ae:c7:e0:d6:b8:11:c8:b4:33:db:f0:23:f7:f4:82:2c:0b:f1:
         77:be:b7:e8:46:05:af:59:21:72:27:8b:52:ab:b1:d5:33:36:
         a6:97:42:d1:83:e0:cc:8e:d4:b6:c2:73:60:09:8d:e8:50:24:
         31:95:15:75:5d:9a:b8:08:ac:50:cf:34:fb:c4:e1:7e:fb:12:
         1e:1c:22:c7:aa:73:fc:97:4e:c5:a5:ec:6b:a5:a7:69:7e:1d:
         f6:ed:65:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:38:25 2025 by rpki-client