Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e36c0ac-1e5b-3d3c-90ac-3f8a0b05848b.roa
File:                     6e36c0ac-1e5b-3d3c-90ac-3f8a0b05848b.roa (raw, json)
Hash identifier:          El8ODSGmy4ZdbA7bld9ZYTsyNo9dQaCz56kHsZM6kag=
Subject key identifier:   06:88:FB:4E:AA:54:80:F4:4F:DE:2F:21:9E:24:8A:EE:D6:BB:88:57
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AAB266A3EC1D1FC861E171C68
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e36c0ac-1e5b-3d3c-90ac-3f8a0b05848b.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     202
IP address blocks:        206.164.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:6a:3e:c1:d1:fc:86:1e:17:1c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=a42cc3ee-cd72-46a3-ae45-0dee844aa7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:37:25:8f:54:7b:ff:4e:c1:57:d1:63:09:
                    0c:5c:f7:b7:cf:10:86:5c:31:26:12:70:bc:7e:e4:
                    5b:f3:7c:f5:fd:6a:76:e0:1a:6f:f7:98:1a:8b:d3:
                    b3:38:49:43:a5:9d:cb:62:fe:75:92:dc:fb:94:4c:
                    b6:4e:30:a5:e1:fb:f7:ff:db:2e:70:12:ae:de:37:
                    ab:c7:16:b2:05:53:9e:34:56:1c:53:eb:94:75:e4:
                    ad:fe:97:73:fb:5a:60:d8:db:fd:f7:a0:15:90:b0:
                    90:2e:e9:d6:fa:be:1c:77:65:25:e9:51:ff:74:c2:
                    8c:57:cf:ff:8a:08:c5:bb:93:ef:26:c5:f8:ce:7c:
                    cf:f5:a0:03:6b:22:36:e1:c6:21:9f:91:69:9c:42:
                    1f:90:71:c3:5e:68:93:4d:0c:25:98:1d:ea:de:1d:
                    42:84:ec:ec:57:63:5c:69:7d:52:98:6f:ff:eb:d4:
                    f4:56:1f:19:c8:7a:55:c2:94:37:04:dc:d5:b6:bb:
                    1f:3a:4f:71:10:6e:b1:5e:e5:01:a3:69:03:f6:78:
                    e0:6d:2e:13:b7:cb:32:59:f4:fb:70:a6:10:52:49:
                    a3:a2:65:29:bd:d9:ac:ad:69:b4:31:82:bc:b7:3f:
                    01:b3:8b:89:61:23:89:f6:48:2e:21:cd:31:e7:98:
                    30:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:88:FB:4E:AA:54:80:F4:4F:DE:2F:21:9E:24:8A:EE:D6:BB:88:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e36c0ac-1e5b-3d3c-90ac-3f8a0b05848b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:9c:fe:18:52:f8:7d:81:63:48:0e:42:96:c4:d6:ed:61:03:
         96:a5:0e:0a:b3:8a:f8:9b:7a:5a:62:c1:67:c0:5c:89:1c:de:
         56:5a:ea:ab:e9:36:e4:11:65:27:3d:2f:83:1f:99:9a:ae:71:
         3a:bf:7a:2c:65:4d:71:d1:bf:c8:37:b9:42:17:eb:93:ee:e0:
         4a:0b:f7:61:37:bd:9d:43:a6:f4:43:ad:d1:98:63:9e:5f:d5:
         83:71:c0:aa:39:ba:7e:b3:1a:f5:48:be:72:cc:5e:87:02:60:
         0e:1e:00:48:de:49:e3:e9:5d:78:e4:0e:c2:fc:20:2b:60:69:
         f0:17:1e:d7:61:0d:93:24:90:f4:fa:a0:3a:4e:08:2d:56:c6:
         ca:e0:d3:07:ad:92:51:20:12:f1:be:b7:76:dc:a4:9d:f1:0e:
         09:e9:76:c9:26:9f:3a:91:03:49:df:c2:2c:3c:4b:9b:ed:4c:
         61:3c:ba:ea:f8:16:af:da:42:56:a6:82:6a:35:47:9d:b0:6c:
         1e:15:63:48:15:71:31:f4:73:62:7e:95:5c:a0:69:ab:45:19:
         0e:79:3c:02:0d:63:82:53:67:b5:60:75:3e:94:b0:a9:f4:6e:
         a3:2e:f1:1f:bb:29:51:61:fb:37:62:db:7c:96:3e:c8:8b:a2:
         7c:b9:46:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:30:56 2025 by rpki-client