Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/915690e8-0d9a-30b3-a924-298e0b5a6ef9.roa
File:                     915690e8-0d9a-30b3-a924-298e0b5a6ef9.roa (raw, json)
Hash identifier:          3TO6UWyhcOXFmAhPISPJF1b9Aqj5+NSPK+hAGqL7pSg=
Subject key identifier:   50:D9:F7:01:99:77:16:CB:CE:97:68:7E:A7:3F:42:E0:66:55:B2:4F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FD3BFD2A085100F9AFCC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/915690e8-0d9a-30b3-a924-298e0b5a6ef9.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     3360
IP address blocks:        192.85.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d3:bf:d2:a0:85:10:0f:9a:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=c921be51-2d3f-4ae5-8f6d-89bb2dd398ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:97:e4:bb:43:c7:18:34:e1:2b:86:e8:df:ae:
                    65:71:fe:58:a7:14:16:b3:fa:a0:df:88:7c:52:11:
                    16:1a:b9:17:6c:06:e5:68:c4:86:65:dc:e0:ec:c1:
                    d5:18:15:19:38:fa:b4:72:03:c8:cb:70:5c:ff:de:
                    68:f3:0e:ed:0c:39:3b:fc:d2:d3:13:44:d8:68:64:
                    0a:95:62:0c:e6:73:9a:ae:2d:e6:a1:b7:9e:24:49:
                    c5:57:49:70:34:60:82:d2:93:f4:09:cb:b4:21:eb:
                    a0:8a:e8:6b:bb:7e:47:b4:ac:0c:98:c5:a5:99:99:
                    f3:8b:97:5e:36:d2:7b:12:5a:69:1e:4d:e1:1c:e4:
                    b9:45:1d:39:92:f5:6f:30:73:ba:b9:4e:e1:b1:ab:
                    72:99:9c:cb:d3:b4:d0:2f:78:a5:23:68:40:57:87:
                    10:9e:f8:9b:d5:75:6f:99:5b:57:61:b4:11:3e:18:
                    1a:b8:49:0e:82:8c:54:dc:3f:ed:94:c3:dd:2f:54:
                    2c:6a:4e:c2:f9:41:50:38:35:73:fe:e6:a3:a1:4e:
                    b6:c3:67:83:e1:88:c1:4a:16:f8:32:e2:f0:c7:a5:
                    e1:d5:57:51:84:21:ba:ed:f1:ba:e7:86:c7:fc:03:
                    27:51:4b:51:dc:26:ec:23:4a:ed:ce:63:20:06:30:
                    32:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D9:F7:01:99:77:16:CB:CE:97:68:7E:A7:3F:42:E0:66:55:B2:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/915690e8-0d9a-30b3-a924-298e0b5a6ef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:be:d9:10:32:a2:60:ef:fe:db:62:2a:8d:a4:30:b2:39:fc:
         34:41:3c:3e:b1:56:e3:d7:0e:b2:e9:37:11:19:a7:45:3e:47:
         d6:e4:18:a8:4e:d0:64:f4:d8:d8:fb:f2:45:e8:e9:f0:eb:5a:
         10:79:f3:d6:79:42:4a:1c:90:a4:f8:86:2d:84:92:a9:6a:0d:
         e9:ba:ee:24:24:8b:ab:5d:4e:0e:07:fd:98:6e:88:ec:0a:88:
         99:a8:6e:51:7d:fe:f9:a8:8c:b6:b1:5d:5c:c2:0f:a5:eb:64:
         44:83:30:cb:92:c7:91:1e:f9:1b:23:5a:cb:32:29:49:13:df:
         ab:15:b7:6d:e3:93:74:df:c9:40:cb:0d:8e:d3:55:29:da:e0:
         a6:9f:cc:41:31:78:15:26:b5:b8:b5:22:7d:73:6b:db:72:b6:
         20:b6:db:5b:a4:b2:ff:d0:b6:f1:6a:f0:69:da:84:b4:f4:57:
         ef:ba:d7:1b:66:f1:ef:13:24:74:05:a8:48:84:14:f4:4a:09:
         99:94:46:56:c8:a2:9f:40:07:e8:3a:8d:44:cb:67:ab:8b:b4:
         a4:73:12:46:2c:5a:c8:4b:96:e9:64:d6:71:84:1d:4e:fe:61:
         df:68:72:ac:5c:76:08:68:97:e8:85:ad:f6:f3:c0:70:aa:92:
         96:05:70:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:25:46 2025 by rpki-client