Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6f32d04f-110e-3eac-bb44-1767630c5605.roa
File:                     6f32d04f-110e-3eac-bb44-1767630c5605.roa (raw, json)
Hash identifier:          aMnvrMA4+7MkzMyv+v0q73G+qlxlNpHiy6q4tlrpqgA=
Subject key identifier:   F7:67:09:E2:31:8F:B5:C6:AB:F1:21:70:87:FB:62:26:0B:9C:40:C7
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AC0F5AF7C60B2D11D57C97280
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6f32d04f-110e-3eac-bb44-1767630c5605.roa
Signing time:             Tue 05 Aug 2025 08:30:59 +0000
ROA not before:           Tue 05 Aug 2025 08:30:59 +0000
ROA not after:            Mon 03 Nov 2025 09:30:59 +0000
asID:                     16509
IP address blocks:        168.87.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:f5:af:7c:60:b2:d1:1d:57:c9:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug  5 08:30:59 2025 GMT
            Not After : Nov  3 09:30:59 2025 GMT
        Subject: CN=8e13f318-c444-44db-a5e3-d15962941405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:7d:ab:3c:f4:bb:20:b1:7b:fc:67:e7:08:
                    5e:a3:4c:17:f9:65:2d:96:ed:56:5b:cb:7b:21:43:
                    ed:75:33:11:38:ea:12:ce:4f:81:b4:ba:33:89:8c:
                    c4:3a:61:ff:7a:b0:83:a0:40:20:7f:b8:18:f0:17:
                    76:b0:e0:45:fd:3f:9b:03:b2:03:18:cb:5e:a1:63:
                    a0:e3:b3:50:8d:5f:a5:6f:89:9c:94:30:a9:aa:2d:
                    39:e8:58:4b:36:5c:90:42:4c:e7:e7:a8:b3:40:de:
                    13:64:22:b7:c7:96:50:19:3e:d9:4e:c8:8e:0e:e2:
                    09:b3:4e:2f:2e:92:8b:10:ca:19:c2:42:e6:f8:88:
                    df:8f:ed:d1:b5:01:b3:f0:54:39:37:96:f0:f1:98:
                    e4:cd:d8:6b:ef:1e:15:87:fd:63:6d:f3:65:d3:63:
                    79:d2:7b:2d:06:11:14:23:b5:04:16:84:16:3f:2d:
                    6e:08:89:0b:f5:52:4a:0e:f8:1b:36:9b:0b:57:ea:
                    fc:e1:50:5c:d0:30:78:e1:a2:ce:88:69:54:19:5c:
                    32:62:47:fb:28:70:bf:23:40:3a:61:a6:ed:5d:5c:
                    64:36:15:1d:6e:fb:00:6d:cd:28:1b:8d:9b:2a:58:
                    de:4a:29:18:2e:9f:51:5c:ca:3d:dd:63:74:ec:8c:
                    3b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:67:09:E2:31:8F:B5:C6:AB:F1:21:70:87:FB:62:26:0B:9C:40:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6f32d04f-110e-3eac-bb44-1767630c5605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:f6:e1:bb:bd:a3:9a:7e:6a:0e:6b:31:de:e4:77:78:8f:73:
         37:5f:d4:ed:2e:73:ef:64:31:53:1c:a8:a6:80:a5:00:32:dc:
         f7:3b:dd:02:2b:2b:3c:ad:e1:cf:4e:42:39:1b:c3:49:25:57:
         fb:d1:48:22:41:4e:a0:6a:69:f2:b1:c4:a8:48:a1:6b:17:12:
         1f:7e:4a:ed:56:fe:c9:4a:b4:66:5d:7d:ca:f8:de:73:77:74:
         54:66:a0:4c:6e:9d:bd:d5:ae:ea:6d:0d:80:19:98:4c:56:96:
         0e:df:75:ca:63:b4:c3:6d:31:5e:4e:b6:7b:d5:f5:35:6b:ce:
         07:8e:96:d0:61:74:ca:b6:3f:6f:69:09:8c:72:59:ba:4a:00:
         5a:43:f2:ab:39:72:da:fc:8f:3b:7d:22:ec:21:94:85:dc:f2:
         46:9e:18:ba:b2:11:db:ed:6b:82:13:3b:17:37:e5:d3:ae:60:
         38:3a:99:bb:8e:d3:cd:37:b0:d7:3f:da:e1:cc:89:14:69:51:
         13:70:de:9b:65:b6:90:82:f5:5c:24:dc:41:da:17:78:e9:63:
         c6:07:82:18:32:49:12:c1:c9:87:fc:f7:10:99:25:9b:8d:37:
         c1:32:9a:df:b8:40:0f:91:c1:a2:92:ee:ef:98:2b:01:0b:e7:
         69:ea:38:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:47:20 2025 by rpki-client