Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/878b1986-100b-3cbc-ab7a-208cc7fe18f9.roa
File:                     878b1986-100b-3cbc-ab7a-208cc7fe18f9.roa (raw, json)
Hash identifier:          w5kZLPcXXz0MjdcpzalF8i6NTdzR5haNqQl1BKWhzp4=
Subject key identifier:   0C:35:C4:62:92:B1:97:BE:1F:D8:67:B0:6E:C1:BB:5A:18:16:F3:5A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A3461D4D46847528A2F75C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/878b1986-100b-3cbc-ab7a-208cc7fe18f9.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     5714
IP address blocks:        192.57.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:61:d4:d4:68:47:52:8a:2f:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=d3d70feb-1a89-4712-bcb4-1c92aca17206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:8d:d5:da:b6:6c:aa:fb:2c:e5:bd:10:ab:
                    85:34:62:da:03:1f:f3:43:e2:6a:56:78:2b:f9:de:
                    a0:46:e2:eb:37:ff:8b:3a:6e:15:8b:14:7f:09:58:
                    9a:23:3d:35:53:08:93:e0:8b:46:12:bb:c2:d1:43:
                    c5:e9:f2:00:0e:dd:75:20:2e:3a:a6:af:27:ad:35:
                    f9:27:af:6e:15:61:8e:99:c0:3a:a4:46:56:a8:8f:
                    06:df:b7:32:a1:b8:1a:96:cb:91:ef:4e:ef:a3:56:
                    90:cb:0f:b7:04:bd:f0:ea:df:05:89:46:cd:a6:4e:
                    9b:b4:03:f0:dd:fe:7c:a7:ea:e2:ca:ae:75:20:95:
                    86:b7:8e:85:3e:b0:12:c1:b3:cd:de:64:d2:6b:0e:
                    12:4e:ee:f3:4a:86:11:64:4a:cd:f2:e7:27:21:d0:
                    e4:55:28:df:2a:ef:cd:da:fc:f5:46:60:e8:15:61:
                    9f:47:7d:85:3d:c4:18:10:40:dc:ee:65:1a:21:f4:
                    af:18:f6:3b:42:e0:b6:f5:25:f6:2c:5d:23:a4:48:
                    15:7e:85:f4:31:21:c6:ef:79:e4:bd:bb:8e:25:80:
                    75:e9:56:80:2b:74:3f:a0:06:1d:d4:3b:44:1e:3b:
                    24:09:2b:7f:a8:db:0e:1e:51:c5:a5:45:01:17:77:
                    6c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:35:C4:62:92:B1:97:BE:1F:D8:67:B0:6E:C1:BB:5A:18:16:F3:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/878b1986-100b-3cbc-ab7a-208cc7fe18f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ee:cd:ae:3a:ed:15:b7:55:c3:39:40:56:d7:d6:ed:a5:a6:
         78:cc:7b:23:0c:f1:ff:be:15:40:a8:9b:bd:ff:9a:3e:e7:9f:
         31:63:fb:88:1d:d1:af:e5:8d:35:cc:af:a9:13:47:50:9a:4e:
         72:08:ed:fc:c8:4b:d5:7c:32:2b:5a:bb:b2:94:d0:cd:30:29:
         2c:9b:8b:a1:a1:ee:4d:a0:b3:6f:0e:dc:8a:ef:ac:0e:b6:5d:
         7b:a2:f3:b8:2c:fb:57:60:59:52:c8:5d:17:c3:f4:56:76:c2:
         95:e1:7f:32:f8:89:6a:a7:e4:74:fc:9b:03:85:d0:1f:41:7b:
         cf:31:93:28:9f:41:af:67:f3:15:d3:33:59:e0:50:cb:c9:c2:
         c6:05:9e:5e:76:47:b5:8a:85:a3:93:69:2a:73:e3:a9:45:2f:
         cf:fc:33:9e:9a:92:8c:13:00:d6:ac:74:52:be:ea:30:58:6f:
         2c:44:a3:82:76:d4:9f:cc:aa:0e:e7:0a:ba:5e:53:56:d1:7b:
         20:9d:25:42:52:b2:f4:09:7b:61:1a:49:61:f6:d9:ea:05:10:
         3a:f0:0b:6c:05:ea:86:af:03:90:32:2a:e8:ca:6b:e9:42:47:
         84:b4:3f:9f:0d:2e:4f:90:66:e0:5a:8f:dd:79:c2:81:75:ff:
         78:fe:ca:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:06:21 2025 by rpki-client