Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/52e0c708-d581-338b-a618-cc5c3a9caf20.roa
File:                     52e0c708-d581-338b-a618-cc5c3a9caf20.roa (raw, json)
Hash identifier:          a9O9gMvplX9NGh/bN6/ougTJXFKNS6tWcbt1w62IVuk=
Subject key identifier:   31:AE:D6:D9:4E:26:60:9F:97:EB:1A:58:B9:83:2F:C5:66:10:53:8E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FD3946DA864718A750A90
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/52e0c708-d581-338b-a618-cc5c3a9caf20.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     202
IP address blocks:        192.85.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d3:94:6d:a8:64:71:8a:75:0a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=8cf08078-839b-4697-91b2-318f968dc181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5b:6d:34:c3:84:41:cb:4e:1a:0c:f7:b1:2b:
                    47:9b:c8:d6:9e:cc:0d:02:1a:69:84:f1:5c:89:5e:
                    25:17:79:ab:22:22:af:db:a9:c8:92:09:7b:ae:57:
                    2b:35:81:d9:27:ed:59:a8:c3:6d:fc:d9:22:0d:f9:
                    d0:a0:ca:1e:f5:f9:98:24:d5:67:4d:29:84:95:87:
                    54:5f:20:8d:70:d2:8a:48:71:ef:ea:91:7f:1e:ab:
                    f9:fa:fc:2a:88:8e:c0:b7:4e:0d:7b:2c:f7:2c:07:
                    31:4e:2b:2b:dc:74:58:75:43:59:02:05:ef:7c:82:
                    b9:38:bb:f8:6f:98:8a:90:7f:ac:33:0e:86:90:a4:
                    43:35:1a:fe:2f:4e:e0:cd:b9:34:3b:d3:e8:06:8a:
                    bc:c1:e4:93:58:51:6a:89:e6:b4:51:ad:e4:83:84:
                    f1:7d:c4:59:c2:e7:82:58:89:a5:3b:ab:51:22:3d:
                    20:98:cd:ba:88:83:5f:54:4c:e6:31:8b:71:d9:f7:
                    77:2c:22:1b:84:cc:b4:f7:68:7f:03:2d:9f:35:65:
                    e4:58:97:ec:61:e7:8b:9d:50:96:60:13:7b:b1:eb:
                    2c:65:ad:ef:98:83:46:0d:57:e4:52:22:90:12:c7:
                    f2:a0:7f:30:90:e1:fd:ea:c1:08:98:ec:fa:d3:09:
                    14:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AE:D6:D9:4E:26:60:9F:97:EB:1A:58:B9:83:2F:C5:66:10:53:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/52e0c708-d581-338b-a618-cc5c3a9caf20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:b5:98:11:23:25:bb:e1:49:a5:c7:01:01:59:4f:d3:74:3b:
         eb:63:e3:3a:3a:9b:99:09:7f:32:cc:a0:d9:ae:64:68:d5:1b:
         d3:2a:32:01:5f:ba:f3:da:5a:15:44:67:8b:b6:2c:b2:17:43:
         e5:c5:e0:3e:0b:7d:ca:21:62:03:14:7d:f4:34:04:c8:ea:d2:
         73:ed:9d:1b:58:e5:95:44:c8:78:e3:a0:21:77:1f:a4:0a:40:
         78:79:51:db:94:62:c4:9d:da:92:aa:a7:8c:d9:f2:80:28:35:
         8a:23:1c:2c:c2:7c:1c:1d:74:98:80:31:ed:1a:e3:eb:29:c3:
         04:7d:a9:fe:6a:6b:29:4f:db:af:65:8c:ea:1a:37:34:f8:f0:
         41:ae:7d:7b:c8:d9:87:fa:b5:db:be:f3:ec:38:4c:97:fd:2d:
         5d:c2:61:22:0f:3a:c0:89:01:30:a5:93:8c:f9:91:38:a3:cf:
         95:1c:71:cc:38:2d:32:ce:f1:78:93:6e:e4:0a:5c:12:91:85:
         30:6f:71:7e:8f:8e:1d:5e:be:f0:0f:ce:d2:e7:86:29:20:fb:
         3e:df:db:90:0f:52:86:3e:b0:59:fc:7e:58:80:a2:4e:b6:13:
         0b:8a:f9:67:44:50:fe:00:d6:e5:b8:cc:f9:b1:0c:61:1c:aa:
         f8:35:b8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:58:35 2025 by rpki-client