Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7f93ed14-adce-318a-a8a0-17029e539127.roa
File:                     7f93ed14-adce-318a-a8a0-17029e539127.roa (raw, json)
Hash identifier:          ePiUDDCrD914CUp4Rxzp4EdbCO6CoAiNG23UzDWJHes=
Subject key identifier:   A4:75:90:73:03:8C:9A:0A:75:62:BC:BA:13:0C:05:A6:2A:3E:14:2C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A23C00E778DB189338D5361C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7f93ed14-adce-318a-a8a0-17029e539127.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     202
IP address blocks:        168.87.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:0e:77:8d:b1:89:33:8d:53:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=065aada8-696c-41b6-a6c0-d059709e4164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b4:62:93:c1:18:58:7e:1e:35:86:e5:d6:7b:
                    55:29:dd:dd:79:8e:25:33:a4:69:5a:d0:96:0f:e6:
                    09:12:4d:bd:cd:e9:d9:28:e0:ed:f7:49:be:b7:58:
                    aa:2d:3b:9b:51:50:25:ac:8f:b3:ce:bf:2f:ed:c2:
                    59:d8:c9:d0:4e:46:cb:9f:77:22:13:2d:d1:5c:84:
                    a0:67:38:29:9f:c9:69:ff:96:f7:a8:65:1b:5f:d7:
                    16:99:10:b7:ac:62:99:55:42:de:2f:cc:dd:31:eb:
                    fc:c6:16:e9:ff:ee:16:db:7b:4b:5e:86:6e:bd:0c:
                    05:66:16:4e:ef:5e:61:0f:81:a1:8e:dd:6e:2a:af:
                    a0:14:06:1b:5e:dc:87:18:e4:80:8a:e6:2b:79:ef:
                    1b:f6:d1:c2:58:aa:36:7a:63:89:0c:1b:44:ba:42:
                    d2:90:6e:87:be:9e:27:e1:35:c8:46:10:62:53:24:
                    4a:13:59:0f:e1:02:81:fb:45:01:93:5f:86:d7:3a:
                    f2:64:6f:95:4b:a6:23:13:ec:44:13:93:24:f0:7a:
                    b8:fa:33:36:00:73:31:eb:93:73:5a:0c:84:31:ee:
                    e2:04:01:ce:36:da:6c:44:d4:10:1f:6d:10:6c:71:
                    8f:fe:a6:4c:aa:70:12:86:48:84:a7:d3:d5:ff:ff:
                    05:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:75:90:73:03:8C:9A:0A:75:62:BC:BA:13:0C:05:A6:2A:3E:14:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7f93ed14-adce-318a-a8a0-17029e539127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:58:d6:2f:15:dc:d5:a7:c2:5e:53:46:2e:50:ad:66:6d:9d:
         05:ee:fb:23:8d:43:7b:09:01:85:23:4d:29:0a:73:71:9f:df:
         db:6c:0f:54:97:45:cc:3f:9c:c3:a0:1a:08:f0:74:7b:2b:a3:
         d0:d2:81:2f:70:1c:ef:69:be:a6:81:d7:08:93:4e:58:8a:fe:
         47:7b:8a:83:3c:30:f4:d4:63:0c:74:b1:71:cd:1b:24:40:91:
         9c:28:69:e2:81:0b:6d:81:f6:8f:12:0e:41:0c:57:17:83:dd:
         d7:4a:c7:d7:b2:09:37:1c:ee:f3:5b:8b:6f:d4:57:e6:a7:8b:
         d8:08:46:24:56:07:99:e4:b5:a0:de:e2:74:fe:7c:f5:b4:ed:
         4b:31:a0:a3:e1:d1:a9:d1:8e:f0:89:f1:b5:bd:2e:36:b8:2e:
         80:c3:89:ec:86:be:81:11:7d:da:16:4d:e7:7a:da:ab:a8:76:
         44:45:d6:82:bc:aa:98:17:32:43:33:14:34:bf:2a:cb:0e:01:
         45:b7:77:f3:35:14:7e:62:a3:fc:5f:54:55:ba:95:83:db:d3:
         90:a8:19:51:a6:4f:60:80:01:7e:a8:c3:5b:1f:07:16:27:31:
         03:7f:75:00:24:a1:98:ba:19:11:17:4e:ad:60:d0:6f:33:77:
         83:6c:f8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:49:41 2025 by rpki-client