Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65e055ea-ed18-3596-9288-b54e6a3dae30.roa
File:                     65e055ea-ed18-3596-9288-b54e6a3dae30.roa (raw, json)
Hash identifier:          WEIjnenFo6ITtSR73nnlQTvhB0pecZibxsgKe51Q5jQ=
Subject key identifier:   B5:A0:0D:DB:3D:98:A0:0A:8B:F8:4F:7F:C4:E1:21:3C:15:94:98:9E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FD670D8EE873D4CE7F300
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65e055ea-ed18-3596-9288-b54e6a3dae30.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     3356
IP address blocks:        192.57.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d6:70:d8:ee:87:3d:4c:e7:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=23891d87-bf89-49e2-ab81-f7002b1256d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0a:76:74:c2:02:0f:18:9e:34:9b:95:6b:c0:
                    36:7d:01:4f:ef:b0:dc:74:b0:48:b0:ae:46:b8:cd:
                    eb:ea:9c:49:07:7b:b2:f2:10:d8:1b:36:98:ef:b3:
                    6f:f2:5d:2c:79:5a:79:1b:bc:48:50:0b:47:91:26:
                    a5:fb:90:87:90:78:01:2c:f0:a7:27:76:42:ca:e3:
                    04:55:49:c3:55:a6:d5:b5:f6:5b:1c:02:12:21:4a:
                    e5:95:18:58:a5:91:89:3f:52:3f:12:99:54:e4:ea:
                    e1:22:03:0d:05:b5:53:0c:aa:41:8f:b1:a7:dd:2e:
                    ac:a7:af:e2:e7:c7:2d:e2:89:8d:f3:4f:1a:f5:43:
                    7e:73:1f:a4:a7:f3:ef:2a:e5:4c:a4:34:a4:6d:74:
                    30:ee:67:61:21:4f:f3:10:db:e6:bf:a5:b4:6d:cd:
                    e2:d4:60:9e:eb:61:12:a1:a2:94:8f:fe:95:32:eb:
                    66:77:92:8c:49:d8:38:2f:5c:96:d6:e0:0a:92:53:
                    cb:57:c0:5d:70:88:76:9b:df:ef:6a:d1:7c:8c:67:
                    84:55:62:80:75:db:1a:66:00:4f:68:ab:e8:7b:bd:
                    8c:d6:98:0a:d6:65:b1:ae:e6:11:5a:91:5e:e6:8d:
                    2b:be:3d:7d:19:1b:47:80:bd:49:06:04:d7:46:fe:
                    3f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A0:0D:DB:3D:98:A0:0A:8B:F8:4F:7F:C4:E1:21:3C:15:94:98:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65e055ea-ed18-3596-9288-b54e6a3dae30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:46:33:94:5a:91:27:ee:21:e2:92:60:ad:e2:a3:5d:03:85:
         f0:a7:8d:03:ef:10:67:0b:6b:79:7e:19:81:67:69:ab:c7:4b:
         27:62:c9:dc:11:3e:91:39:07:60:e2:32:f1:62:14:27:8c:1d:
         26:36:bb:80:30:56:77:24:73:12:5c:f8:fc:64:c5:3d:03:f9:
         31:b4:11:ab:33:26:c7:7d:db:b5:89:3c:37:7b:b6:ed:e1:88:
         88:d4:2a:64:09:5b:d8:ff:69:c8:57:bc:98:e1:55:70:0e:6d:
         98:26:e4:0c:65:eb:c7:62:c2:2a:6d:e0:9b:ef:ca:20:3b:d8:
         b6:aa:3b:6a:52:81:13:3f:f7:e9:7e:f3:15:ff:2b:e6:62:34:
         69:b0:3f:15:29:05:6a:6e:45:02:73:c8:94:5e:0b:d1:d5:ad:
         54:77:db:ca:f4:90:22:0b:fc:e8:78:49:d6:89:88:aa:49:0d:
         e9:a6:a9:05:8b:3a:dc:85:0e:ed:fc:0e:4b:d5:50:ca:61:48:
         cd:9b:5f:5f:7b:e3:94:36:a9:1e:5c:6f:c3:d0:70:90:ca:ee:
         8a:f7:43:a8:ed:2f:0f:73:91:b6:c9:6d:fd:33:10:36:7a:37:
         cd:2d:41:18:41:53:f5:44:eb:1e:72:cc:55:39:98:61:39:98:
         a2:6c:4a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:56:20 2025 by rpki-client