Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/75ae1dc4-78e2-39b0-9e67-7e4f38f0706c.roa
File:                     75ae1dc4-78e2-39b0-9e67-7e4f38f0706c.roa (raw, json)
Hash identifier:          Fy8GbZbX+2xG7xkGlN0VZ0b4YT8QjqSnDIEOho/sPY8=
Subject key identifier:   28:80:D8:19:4D:96:46:49:31:76:89:62:BB:3E:43:C6:0A:C4:D2:D8
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FD3F09CBE29CF98A9D900
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/75ae1dc4-78e2-39b0-9e67-7e4f38f0706c.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     3356
IP address blocks:        192.85.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d3:f0:9c:be:29:cf:98:a9:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=d396c888-5d39-4f7e-a47d-c5e4fda41401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:01:20:e5:8b:c9:0f:4a:9e:53:eb:9e:62:f0:
                    f0:40:62:35:65:51:10:32:43:2c:57:f6:60:b5:8f:
                    2d:2f:57:62:da:d5:ef:c4:37:fc:01:4c:e1:bf:42:
                    c1:9e:32:a3:fc:3b:37:dc:f7:ed:4c:12:c4:64:1a:
                    60:8a:a4:fa:be:d5:f5:35:aa:0e:8c:83:a6:dd:af:
                    06:f2:47:41:2d:96:a6:68:08:0d:ce:4e:3e:39:7d:
                    44:2f:0a:e5:bc:73:b7:d3:7e:0a:46:0b:17:af:b1:
                    5b:89:24:64:a5:5d:55:81:1f:83:e4:d0:f5:24:ee:
                    1e:91:99:83:a2:ea:a4:fe:35:db:1a:8f:88:a0:ea:
                    de:93:9e:8e:bd:d1:05:f1:f1:4d:94:5f:98:79:77:
                    fb:90:13:f5:81:2e:54:89:c6:17:80:c7:21:1e:53:
                    25:63:0a:da:13:b9:57:95:a7:87:ff:07:d6:11:14:
                    34:df:08:41:76:db:3d:da:14:83:f3:8e:01:3f:b7:
                    fe:ad:0d:d1:08:f4:45:46:11:10:59:c6:8e:4a:40:
                    6d:80:42:66:97:e8:dc:0e:67:e0:77:41:e7:a0:19:
                    fe:ef:49:8c:96:b5:b5:07:ac:1c:15:23:91:2d:ba:
                    cf:12:9d:68:f7:40:96:4b:43:88:2c:4e:cb:90:a5:
                    b5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:80:D8:19:4D:96:46:49:31:76:89:62:BB:3E:43:C6:0A:C4:D2:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/75ae1dc4-78e2-39b0-9e67-7e4f38f0706c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:6c:60:76:d4:53:8a:af:96:fb:c9:9f:28:fe:42:22:61:a8:
         4f:33:0c:eb:5d:e0:d9:c7:80:96:b6:c0:c1:4f:70:a3:d3:4f:
         d4:41:88:3d:49:06:bc:53:e9:df:8f:1f:86:cc:d3:d8:86:d0:
         81:a5:98:ea:ea:d7:0e:58:69:f8:5d:34:6e:d5:b3:a7:58:4c:
         80:98:5a:e5:fc:00:18:ac:5c:54:71:be:14:b0:c7:69:fc:4c:
         51:de:68:27:06:56:dd:25:a7:1b:b1:4b:bf:8b:00:5a:04:81:
         86:94:9f:13:69:1a:ad:87:15:51:18:a5:9a:c7:73:d1:65:14:
         d6:05:db:c7:ab:40:8d:95:c3:13:6c:fd:fa:b5:93:f2:d4:6a:
         9b:56:21:d0:9b:fd:10:ce:7b:d7:15:04:60:c1:8e:5d:f7:07:
         fc:6a:61:95:64:a2:73:cb:ef:90:63:72:25:01:56:6e:78:43:
         92:fd:b8:c2:e2:0b:80:7b:f5:79:54:0d:ec:0d:c8:4a:da:5a:
         6e:f0:5b:40:eb:24:40:0c:35:5c:52:e5:32:35:6c:87:7e:39:
         c6:10:71:78:4f:54:f8:c7:71:4c:5c:22:c7:b8:c8:78:55:78:
         f2:9b:45:a2:9a:31:f5:fb:f5:47:a5:66:4d:4c:50:f1:03:37:
         7c:c2:01:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:37 2025 by rpki-client