Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/37de577b-6900-3b1a-a93f-a02f477b438d.roa
File:                     37de577b-6900-3b1a-a93f-a02f477b438d.roa (raw, json)
Hash identifier:          txMmqplKOLsXKbmj6/19219e7TGJCgwS1CCMhz7GMyg=
Subject key identifier:   C0:12:F4:B1:14:23:3B:E8:40:06:A2:FF:4B:E1:AA:6E:9D:11:F5:58
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858494733F092FAD41D1067656B48
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/37de577b-6900-3b1a-a93f-a02f477b438d.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     202
IP address blocks:        168.87.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:f0:92:fa:d4:1d:10:67:65:6b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=1253ee6f-3975-4a92-bfde-113621e5c73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d1:28:2e:23:7f:71:0d:bf:53:38:37:c3:89:
                    98:08:e6:70:ee:38:6d:e7:31:6d:81:73:3f:29:ce:
                    31:e8:0f:f2:e3:2a:1c:7f:67:28:10:f2:f6:38:af:
                    7d:d1:f0:3b:51:cd:23:ce:8b:d8:d6:57:8b:5e:55:
                    3a:16:63:89:24:bd:50:4e:58:1c:25:28:b8:88:05:
                    02:cb:0e:d2:77:7d:13:62:01:ed:fc:10:ae:3b:d6:
                    ee:40:40:c2:cc:64:0e:97:3a:88:cb:db:b5:7d:31:
                    e2:f3:b4:3d:7a:cf:06:a0:4c:0b:59:be:56:92:d2:
                    29:85:88:c1:ee:3b:5b:89:16:9a:15:51:03:48:02:
                    9f:30:24:23:da:e7:cb:b1:9f:b8:68:9d:e0:b1:a4:
                    7e:d3:58:f5:bf:42:6a:85:fb:f1:b9:57:e6:18:13:
                    27:f4:ce:8c:bf:27:17:ed:24:9d:51:d9:2f:07:16:
                    8f:90:c7:90:83:77:2d:60:e7:cb:5d:97:ec:57:94:
                    f7:c6:8c:bb:c9:07:f3:e7:76:9b:18:d0:a4:7e:c4:
                    bb:4c:1f:16:2d:ef:d8:b8:75:6a:40:32:c5:02:d4:
                    6f:bc:7a:84:44:bb:f9:85:a5:41:34:d4:88:47:f4:
                    cd:c8:eb:aa:47:ee:e7:4a:d1:11:6d:b2:fb:c1:32:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:12:F4:B1:14:23:3B:E8:40:06:A2:FF:4B:E1:AA:6E:9D:11:F5:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/37de577b-6900-3b1a-a93f-a02f477b438d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:f1:c0:e9:bb:d3:72:b6:e4:cd:3e:6e:33:44:ce:28:ef:1f:
         45:28:61:e6:ab:e7:b3:28:74:59:bf:27:ab:29:5f:15:ea:ce:
         50:b6:8f:0c:50:f1:76:d1:ae:ea:84:00:c1:2d:b0:8f:7a:c4:
         6d:cc:15:e9:62:6a:37:23:47:56:5e:4f:57:9e:a4:ec:9b:38:
         ac:d0:6b:39:6b:1c:b2:3a:5a:4a:c4:77:9a:c4:43:6a:35:21:
         ae:f5:9c:b1:c1:c2:be:ad:67:85:8f:b1:3a:b9:3b:4c:16:24:
         1c:30:a0:9b:08:02:df:9a:78:05:54:a6:77:9e:99:20:56:b9:
         07:84:7a:65:d5:75:dc:50:c6:d7:2e:5e:51:58:13:4e:29:32:
         49:74:37:ca:80:6c:e0:f5:55:2d:83:13:54:7a:f2:80:d3:7d:
         59:61:c4:0f:b0:e2:75:bf:66:0c:c2:fe:43:b0:98:d4:bf:71:
         0c:eb:12:e4:93:61:a4:47:c4:75:5b:28:e5:b2:64:dc:6b:d6:
         71:88:54:c5:5e:0e:5c:e2:be:ae:49:99:28:23:7f:70:ca:f2:
         e6:f5:1a:0c:97:26:b2:23:de:77:11:f3:ef:32:8a:5c:b5:04:
         9c:31:d1:3a:08:b0:0e:da:0c:34:7e:75:16:d3:3a:1b:4b:e0:
         b0:e8:99:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:08:22 2025 by rpki-client