Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/72369819-8616-3a20-a1f6-c5c9f3b8a6b5.roa
File:                     72369819-8616-3a20-a1f6-c5c9f3b8a6b5.roa (raw, json)
Hash identifier:          kGQgZAapcwjK3yZ5Et3o1T0Qm7B2AuT+YM0rVq3BBmo=
Subject key identifier:   2A:FA:D8:8C:29:2B:F5:65:B1:AF:DB:35:CF:6D:4A:8B:B9:3B:EC:4E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AC24617E2C14ED00CFEE65380
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/72369819-8616-3a20-a1f6-c5c9f3b8a6b5.roa
Signing time:             Tue 05 Aug 2025 19:48:49 +0000
ROA not before:           Tue 05 Aug 2025 19:48:49 +0000
ROA not after:            Mon 03 Nov 2025 20:48:49 +0000
asID:                     3356
IP address blocks:        168.87.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:46:17:e2:c1:4e:d0:0c:fe:e6:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug  5 19:48:49 2025 GMT
            Not After : Nov  3 20:48:49 2025 GMT
        Subject: CN=a44f6835-fab3-4179-92f1-692bbdfac04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8a:29:a7:49:73:bf:27:8a:65:9a:8e:3b:05:
                    d1:15:ad:7a:e8:2b:b7:49:b2:46:02:24:af:77:1a:
                    cd:13:dd:12:97:bc:77:98:09:cb:ff:eb:ea:eb:e2:
                    1c:c8:10:91:92:99:f8:64:6e:e7:ff:bb:73:2a:b6:
                    a1:04:2e:89:58:35:99:29:90:97:ec:bd:a9:d1:93:
                    ec:4b:16:63:8d:ea:de:25:7f:83:e6:fc:e6:43:35:
                    54:f2:6b:5b:cb:8e:a6:37:9e:53:c4:8c:47:b7:17:
                    01:be:82:c8:4d:f8:11:4b:1f:75:44:f8:1c:be:0c:
                    8d:6b:14:a1:83:63:96:dc:2c:d5:dd:b4:b8:07:19:
                    57:70:91:c0:21:a9:a1:4b:22:a6:6c:7b:88:06:b2:
                    0d:42:39:f4:c5:78:79:19:0d:41:31:66:78:b4:c9:
                    11:0c:f7:a1:c8:31:06:bc:79:58:29:ad:ff:bb:45:
                    45:31:b2:ba:4c:0f:0b:5a:f7:24:80:c1:ef:90:52:
                    6b:33:e6:01:8c:ce:5e:a5:67:0f:57:cb:ee:25:1f:
                    4d:6b:b5:e0:6d:6f:ec:0b:24:87:8e:19:f6:9c:70:
                    2f:79:4b:f1:ec:79:22:68:66:45:9f:78:e1:2e:a6:
                    14:22:07:21:1e:af:e1:a8:13:81:bd:77:b5:20:ee:
                    6c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FA:D8:8C:29:2B:F5:65:B1:AF:DB:35:CF:6D:4A:8B:B9:3B:EC:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/72369819-8616-3a20-a1f6-c5c9f3b8a6b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c5:c6:2b:9b:f0:6e:58:7c:67:11:34:a5:56:ce:8f:95:ee:
         d5:17:3c:71:43:8c:c9:7d:8d:f9:ec:73:50:22:89:47:4f:d4:
         0f:41:0e:db:8f:f6:92:8a:b0:40:81:c2:a6:ca:41:f2:dd:90:
         d1:53:23:1d:73:9b:93:7d:6a:17:72:97:5f:ce:1b:89:b0:bb:
         a5:3a:f7:e6:05:ef:c4:61:d1:26:b8:29:bd:ac:37:65:26:db:
         c1:f2:d7:be:bb:7d:ee:24:63:a8:3a:bc:29:96:96:6b:c7:48:
         49:8a:e5:34:f0:1f:33:58:19:82:d1:da:12:d5:d1:7e:fe:99:
         68:e5:62:dc:6c:fc:74:d3:06:6d:72:94:f2:7b:c2:36:81:6c:
         68:e0:fb:db:93:b5:ae:d1:49:bb:72:57:44:00:85:2a:e0:ab:
         ee:a7:09:03:de:57:19:1c:7d:d8:10:e6:b7:90:1b:a0:a7:9e:
         e3:33:ec:1f:e4:64:3b:a1:e1:2b:49:8d:8e:aa:7f:ff:fc:d3:
         5a:0d:46:29:43:e9:a5:84:af:d0:22:02:17:f3:ca:1a:4e:73:
         33:5d:49:32:b8:7f:88:f3:bc:eb:b5:4f:61:48:8f:34:0b:c9:
         ce:f4:6d:ce:6c:4f:20:89:ba:c3:b3:57:0c:3e:84:88:8c:d7:
         47:b0:c6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:34:58 2025 by rpki-client