Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3518172a-172f-3260-8508-96bed590a90c.roa
File:                     3518172a-172f-3260-8508-96bed590a90c.roa (raw, json)
Hash identifier:          P6brtdTF8W7nqKnRcFfUTOkpg5Qbe0qgo71RmW1NvZc=
Subject key identifier:   AB:BB:F5:DB:1A:BD:E0:FB:7B:60:B7:E5:E6:22:DD:45:DF:E0:F5:4C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858499294A4D035FB15C8BCABBF80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3518172a-172f-3260-8508-96bed590a90c.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     3356
IP address blocks:        168.87.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:a4:d0:35:fb:15:c8:bc:ab:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=02e9d07d-ed90-4261-b2f5-3c6fb1c74f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4c:e9:1d:46:13:33:c5:5a:c0:cf:b3:1d:e1:
                    d5:07:aa:04:b2:34:0b:a0:7f:35:1e:24:de:d7:20:
                    18:47:7c:ee:8d:99:b1:d8:60:38:12:d2:1f:00:34:
                    69:d9:27:bc:bc:3d:1f:a8:fe:2b:8c:1f:c8:99:11:
                    e8:16:d0:f1:cd:da:57:fd:7b:75:a4:4b:de:38:a1:
                    b2:5f:be:cf:5c:c3:d8:f7:c7:8a:5a:87:be:ff:87:
                    30:96:70:f0:d7:68:d6:6c:85:39:ff:b9:15:a0:dc:
                    94:f1:da:3d:6b:3e:b5:45:4f:b4:fd:37:27:70:ca:
                    39:f2:5c:e2:66:df:ad:09:16:32:34:02:8f:de:6f:
                    42:89:0f:1a:55:3e:3a:cb:89:ae:ec:f8:f3:cd:d3:
                    93:8f:44:18:d7:45:70:52:6e:10:54:31:8f:4f:21:
                    3a:a7:65:69:28:48:1c:e8:4a:27:f1:69:b0:a0:c3:
                    b9:27:f7:d0:a2:5d:82:ac:fc:26:e2:97:73:67:c0:
                    18:9c:a9:35:9b:ee:45:d1:77:4e:9e:de:53:84:f7:
                    96:54:d7:92:a4:8f:c7:3a:c4:de:de:ad:58:e1:96:
                    c6:f8:03:67:22:b0:a1:33:af:de:2e:2c:a0:03:13:
                    c6:3b:af:d5:bd:ff:f8:64:eb:91:32:96:81:c3:4e:
                    9f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BB:F5:DB:1A:BD:E0:FB:7B:60:B7:E5:E6:22:DD:45:DF:E0:F5:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3518172a-172f-3260-8508-96bed590a90c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:e5:26:d7:c1:ae:7e:5a:d6:95:bf:b0:91:a0:98:38:e5:b7:
         18:6d:9f:cc:0d:b8:f9:ad:5a:2d:16:fc:f7:be:cf:22:1c:d8:
         da:c6:70:44:91:df:10:eb:6c:b9:0e:18:ac:39:28:7b:66:4f:
         a6:d7:c2:06:10:b8:d6:97:fd:8e:33:b2:1c:7a:12:d4:ec:05:
         e3:c1:66:ba:88:60:50:bf:34:4a:58:92:72:5f:9c:77:99:00:
         dd:a9:b3:30:96:92:58:e8:3d:e9:c6:35:d5:0f:40:bd:9f:c6:
         fa:ab:fe:4f:66:e9:ed:c6:0e:48:19:60:f7:0e:f1:77:31:ac:
         c3:18:99:c9:d3:da:61:72:ba:db:95:dc:a0:85:18:2c:45:72:
         52:6e:69:39:1a:95:20:34:44:67:1e:49:02:4c:ce:09:0f:b9:
         de:23:d9:95:33:d1:a4:c0:bc:b3:0d:f5:88:81:de:68:ac:8a:
         36:63:40:c3:1b:7e:71:74:74:b1:e5:22:05:a2:2f:3f:4d:1e:
         c3:fe:7c:ac:96:af:61:e0:3c:c5:f1:37:c6:3b:12:7d:f9:d0:
         13:bc:7b:67:d7:5b:c5:0b:db:60:ff:cb:e6:a2:a6:7d:f4:fb:
         d5:b6:80:cb:d8:c3:55:d5:e1:ef:43:d8:30:14:13:41:40:16:
         0f:01:21:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKTQNfsVyLyrv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk
MDJlOWQwN2QtZWQ5MC00MjYxLWIyZjUtM2M2ZmIxYzc0ZjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkzpHUYTM8VawM+zHeHVB6oEsjQLoH81HiTe
1yAYR3zujZmx2GA4EtIfADRp2Se8vD0fqP4rjB/ImRHoFtDxzdpX/Xt1pEveOKGy
X77PXMPY98eKWoe+/4cwlnDw12jWbIU5/7kVoNyU8do9az61RU+0/TcncMo58lzi
Zt+tCRYyNAKP3m9CiQ8aVT46y4mu7PjzzdOTj0QY10VwUm4QVDGPTyE6p2VpKEgc
6Eon8WmwoMO5J/fQol2CrPwm4pdzZ8AYnKk1m+5F0XdOnt5ThPeWVNeSpI/HOsTe
3q1Y4ZbG+ANnIrChM6/eLiygAxPGO6/Vvf/4ZOuRMpaBw06frwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKu79dsaveD7e2C35eYi3UXf4PVMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzUxODE3MmEtMTcyZi0z
MjYwLTg1MDgtOTZiZWQ1OTBhOTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFcHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJnlJtfBrn5a1pW/sJGgmDjltxhtn8wNuPmtWi0W/Pe+zyIc2NrGcESR
3xDrbLkOGKw5KHtmT6bXwgYQuNaX/Y4zshx6EtTsBePBZrqIYFC/NEpYknJfnHeZ
AN2pszCWkljoPenGNdUPQL2fxvqr/k9m6e3GDkgZYPcO8XcxrMMYmcnT2mFyutuV
3KCFGCxFclJuaTkalSA0RGceSQJMzgkPud4j2ZUz0aTAvLMN9YiB3misijZjQMMb
fnF0dLHlIgWiLz9NHsP+fKyWr2HgPMXxN8Y7En350BO8e2fXW8UL22D/y+aipn30
+9W2gMvYw1XV4e9D2DAUE0FAFg8BIWA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:52 2025 by rpki-client