Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2bfcf175-64bb-34d3-a4fe-8bbfe2bf3eae.roa
File:                     2bfcf175-64bb-34d3-a4fe-8bbfe2bf3eae.roa (raw, json)
Hash identifier:          aUbGKjcpHP9mIO4vBuk22n6UX2tqRiBTD+dk+huhSJc=
Subject key identifier:   2A:74:3D:54:E1:BC:00:3A:6A:E1:D8:D8:4E:A4:10:EE:CD:11:85:CC
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AAB2669C216603E5088640080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2bfcf175-64bb-34d3-a4fe-8bbfe2bf3eae.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     202
IP address blocks:        206.164.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:69:c2:16:60:3e:50:88:64:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=e76f02f1-e932-4722-9b03-a7bf22826910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:81:6d:94:ce:7f:02:7f:42:ce:26:be:d7:56:
                    b3:2e:b4:4d:f7:19:00:29:54:fa:5c:5f:7b:34:0f:
                    1e:a1:3d:0e:22:37:94:4f:ca:e1:9a:17:bf:96:5e:
                    d8:a6:ab:56:46:21:61:30:a8:7d:21:e4:7c:1f:da:
                    1c:24:f7:2c:3d:f8:78:3b:de:39:20:8b:c6:bf:48:
                    30:dc:cd:8c:d6:b4:2b:3d:2c:ab:93:31:61:37:fb:
                    d4:a3:56:6d:5f:f7:c2:89:d3:f5:fa:f5:1f:0e:68:
                    cb:b3:70:20:8c:50:db:bd:0a:0c:ef:ea:2a:05:03:
                    88:0b:b7:eb:6d:b9:0f:67:84:91:45:20:46:90:5b:
                    6e:e0:55:ad:2f:10:b1:5b:8b:82:d1:36:28:46:d8:
                    58:fb:e8:e3:0f:a1:e7:59:7a:e3:d3:29:a9:03:6d:
                    cc:bf:a1:50:d1:dc:44:4e:71:37:73:55:23:0e:12:
                    d0:39:2e:e4:7a:01:8b:a3:2b:61:ec:e8:40:f4:29:
                    dc:fc:cc:e7:9b:0b:17:fa:e4:09:a6:ad:86:01:4e:
                    5d:13:f0:98:c1:87:f1:0d:63:03:2d:21:69:16:ff:
                    00:7e:08:a0:3a:f4:50:e7:ab:e4:7b:26:69:a2:16:
                    eb:7f:d5:bc:3d:f5:1b:56:7c:b4:2c:16:1d:e2:6c:
                    77:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:74:3D:54:E1:BC:00:3A:6A:E1:D8:D8:4E:A4:10:EE:CD:11:85:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2bfcf175-64bb-34d3-a4fe-8bbfe2bf3eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:53:c6:de:3b:27:a4:b8:ab:04:5d:bf:80:7d:cb:76:e4:9e:
         bc:0a:bf:b7:66:55:ac:5e:d5:7c:3e:65:85:1b:1c:ec:34:87:
         10:d1:5c:c4:57:93:7a:c7:10:ab:dd:4f:5d:77:8e:08:e9:d3:
         e2:7a:49:f6:31:bc:db:13:12:9d:8c:c0:25:6a:c0:22:66:e9:
         47:bf:a5:42:82:b6:aa:51:18:3d:ef:82:0e:10:7c:42:29:7b:
         b7:7b:37:d7:e4:dc:7a:9b:5a:9c:01:02:1b:ef:fa:90:b0:31:
         3d:50:23:43:32:c3:23:27:77:4a:3c:9f:2c:60:43:c8:da:59:
         e2:a6:70:96:ff:d7:ae:04:14:e8:53:56:48:f2:7e:39:24:b7:
         f4:54:15:ee:da:13:96:da:49:64:14:d0:08:24:c6:ae:3b:de:
         c4:95:28:d3:b3:c0:d9:f3:4a:63:b2:06:97:53:e8:96:ef:25:
         bb:79:e6:47:05:2e:0f:3d:e2:9a:bc:f6:22:4a:50:a2:d1:08:
         55:16:43:19:44:22:71:04:ea:4c:50:fa:a0:3f:c6:f3:f9:6e:
         03:7a:e2:3b:ba:04:73:09:1d:d2:f8:21:24:d0:ee:42:7d:ad:
         03:99:44:dd:48:8d:f2:40:f2:c9:a1:6b:4c:0d:72:2c:40:9b:
         03:60:74:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:48:16 2025 by rpki-client