Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7e245c35-5c51-3e26-9934-faa86e6b6cc6.roa
File:                     7e245c35-5c51-3e26-9934-faa86e6b6cc6.roa (raw, json)
Hash identifier:          kFHqjSWT88s3ANlU+w3u4KT+mdtjeqOFTarz4xUxOiA=
Subject key identifier:   57:9A:62:AF:87:C6:09:8F:63:92:3D:57:F8:AE:68:E3:D2:5D:ED:51
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584944694680FB69D167B3E58440
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7e245c35-5c51-3e26-9934-faa86e6b6cc6.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     3360
IP address blocks:        168.87.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:46:80:fb:69:d1:67:b3:e5:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=9e0971c7-59a3-48f8-8a81-f01c0843b17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bc:74:ec:99:0f:68:9b:61:9b:00:7c:e1:35:
                    38:3f:c7:85:45:f5:2f:8f:fa:83:12:aa:98:8d:05:
                    58:e3:a0:2d:b4:76:62:75:91:43:4f:37:b9:74:19:
                    9d:af:d4:52:5a:7a:76:12:ba:c8:96:a4:da:dc:e6:
                    77:78:01:da:62:63:b1:a0:8a:4e:9d:dd:54:76:f0:
                    05:dc:18:14:cc:5b:b5:5a:4a:b4:b8:2f:99:5e:a0:
                    c7:11:90:56:dc:b0:fb:b1:ca:76:fd:23:16:3b:6d:
                    f7:ad:7c:a7:e0:c0:fb:99:69:d5:95:5f:ec:9b:f7:
                    43:93:2b:07:01:eb:65:63:ca:ea:21:19:13:27:34:
                    92:30:5d:8a:bb:16:41:76:dd:2c:c7:d9:1a:9d:2e:
                    02:95:6a:ea:f2:1d:3e:1a:2d:1d:b8:12:d5:55:5f:
                    dc:3f:8f:d0:9c:34:ba:20:ba:60:79:85:51:f5:73:
                    ea:4b:bf:d7:6f:4c:0d:20:ca:83:17:58:88:f4:eb:
                    0f:8e:e3:2d:4c:ed:64:6e:ad:3f:1a:aa:09:36:3b:
                    09:d0:ba:b9:5d:d8:4a:af:3b:49:91:85:6d:49:48:
                    c2:22:95:87:56:c6:b8:ea:53:a1:cd:05:57:98:be:
                    88:d3:b4:4c:96:5a:86:4e:5c:ce:25:c0:9a:93:59:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9A:62:AF:87:C6:09:8F:63:92:3D:57:F8:AE:68:E3:D2:5D:ED:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7e245c35-5c51-3e26-9934-faa86e6b6cc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:98:5c:23:2c:54:20:cd:79:93:d9:60:4d:3e:59:8a:84:75:
         3b:28:c9:a7:11:f7:58:29:20:70:bd:62:94:f2:9f:7b:bf:62:
         91:9a:3c:cf:45:a5:f1:9d:c2:11:3b:93:53:30:51:da:b6:26:
         9b:9a:67:f0:93:2a:d7:f6:2f:19:4d:df:8e:a2:fe:2d:c4:e8:
         0e:00:ac:94:41:f7:57:fc:d1:44:5e:4e:37:4f:fa:2f:5d:80:
         89:72:72:5b:c8:ab:01:28:e6:b4:14:08:c5:5f:06:0c:6c:95:
         8c:aa:aa:a8:1e:66:ab:4a:c8:c1:84:b9:58:bf:dd:10:c6:7c:
         51:2c:ac:ec:f7:e7:b4:7c:d1:b5:86:2d:7e:70:2d:8c:0f:00:
         a9:99:ef:7b:5d:cf:a6:64:41:47:81:5e:d8:5f:30:e3:df:68:
         b1:73:a9:6f:1c:80:bf:92:4b:f5:7d:ff:f2:c7:cf:c3:de:29:
         2b:27:0c:42:3a:9b:87:08:b2:8c:8b:9f:f8:a5:3a:d8:13:97:
         97:5a:a5:7c:13:02:06:bc:82:c1:78:76:e1:c2:61:7f:df:53:
         12:4b:7a:73:ab:27:af:19:5a:63:41:d8:8a:88:bd:0f:65:c7:
         b5:74:19:77:3e:2c:e5:77:60:76:5b:b9:cf:f9:59:21:28:aa:
         43:27:8e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:07:38 2025 by rpki-client