Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9acc2eda-1601-340e-81c2-c6d3c321ed38.roa
File:                     9acc2eda-1601-340e-81c2-c6d3c321ed38.roa (raw, json)
Hash identifier:          BO7OwuRal9gTG6V8Hc5JYIDmCz+G1ffRJiQergueV+s=
Subject key identifier:   C1:DD:96:33:A8:6C:C3:07:58:F8:98:D4:C3:EC:CE:3E:65:BA:70:C4
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858499DBF3B763CF914744237B700
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9acc2eda-1601-340e-81c2-c6d3c321ed38.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     202
IP address blocks:        168.87.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:3b:76:3c:f9:14:74:42:37:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=093e9d01-0523-443b-b160-2811da4d93bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:de:f2:5b:8c:7f:10:04:14:f0:74:eb:fa:
                    99:db:cf:9b:cf:dd:b0:da:38:c7:ac:52:a8:31:7c:
                    4d:ac:e2:1c:ca:80:51:9b:3e:20:3b:69:5d:4d:21:
                    4d:8a:d8:52:36:b3:a8:b1:a9:01:18:e4:f9:00:05:
                    60:79:f7:d5:56:67:89:a7:4d:92:7b:14:bd:9c:7f:
                    40:81:4d:26:40:3e:21:fb:4a:e3:c6:86:67:b8:28:
                    05:9d:53:5c:69:38:c6:9b:bc:c1:4d:e7:59:f7:56:
                    6a:82:d4:46:5f:3a:e8:0f:84:b1:5d:a4:62:42:53:
                    c5:63:6b:4b:24:15:eb:e8:b4:88:d9:d1:23:ab:a6:
                    16:00:04:4e:18:a3:36:ea:04:8a:1c:a0:dd:de:30:
                    c6:9d:7c:8e:d1:46:d9:d8:31:9a:c5:b3:5e:e3:e4:
                    0c:e4:f4:7e:2a:30:1e:c0:2b:f9:58:8d:0e:81:4e:
                    e8:14:9c:65:bb:7f:cb:a0:c7:02:61:d0:96:08:4a:
                    32:0d:40:38:7c:b4:43:36:d1:ef:c7:8a:99:2f:49:
                    ed:4c:9b:dd:4f:28:23:57:ac:a7:4e:bd:a7:06:f6:
                    c9:b1:0d:fd:4d:aa:5f:42:3e:15:99:03:97:8c:ed:
                    16:c4:f9:0a:05:7b:17:ce:60:1b:ee:65:5a:b2:e1:
                    5c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DD:96:33:A8:6C:C3:07:58:F8:98:D4:C3:EC:CE:3E:65:BA:70:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9acc2eda-1601-340e-81c2-c6d3c321ed38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:39:a3:b4:37:6d:49:b8:0d:65:0d:7b:42:2e:8f:28:4e:5b:
         63:be:da:9a:6e:c3:e1:33:b5:bf:f7:83:99:a0:fb:aa:2b:70:
         e9:51:9b:88:33:b7:55:5e:61:a7:de:26:d9:73:b1:c5:04:3b:
         f6:68:58:d7:56:24:00:6f:75:1d:c6:9e:15:4a:94:69:4d:3a:
         d7:77:3e:5a:a7:64:f3:65:47:a4:92:13:42:73:ac:ca:20:d9:
         dd:08:5e:b9:d1:6f:9f:e9:85:36:eb:8b:e7:2a:a5:06:c9:78:
         99:ad:0d:72:09:80:38:f0:ea:a0:fb:bb:f7:2e:c4:83:2f:0e:
         80:8b:93:fa:fa:8a:c6:15:4b:a9:c7:b1:3b:43:20:85:e1:f5:
         15:33:5d:ea:49:0a:bf:f2:bb:e8:09:74:a8:45:88:46:47:f4:
         cd:93:af:2b:2b:1b:f4:ee:21:99:53:e1:d8:b2:d0:3d:0f:ef:
         1b:20:bb:57:fa:4e:86:ec:e8:1a:f3:ab:49:02:2f:02:42:fa:
         50:9b:9e:4d:ed:69:28:e1:96:2e:6c:74:93:a1:45:20:b5:65:
         9e:8b:0a:cc:99:43:d4:e0:d3:b7:11:b7:d1:9d:db:46:ec:50:
         cc:7d:35:bc:e5:4b:d2:07:b0:b3:3a:53:fe:8a:99:1b:90:66:
         0a:07:d5:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzt2PPkUdEI3twAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk
MDkzZTlkMDEtMDUyMy00NDNiLWIxNjAtMjgxMWRhNGQ5M2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6fe8luMfxAEFPB06/qZ28+bz92w2jjHrFKo
MXxNrOIcyoBRmz4gO2ldTSFNithSNrOosakBGOT5AAVgeffVVmeJp02SexS9nH9A
gU0mQD4h+0rjxoZnuCgFnVNcaTjGm7zBTedZ91ZqgtRGXzroD4SxXaRiQlPFY2tL
JBXr6LSI2dEjq6YWAAROGKM26gSKHKDd3jDGnXyO0UbZ2DGaxbNe4+QM5PR+KjAe
wCv5WI0OgU7oFJxlu3/LoMcCYdCWCEoyDUA4fLRDNtHvx4qZL0ntTJvdTygjV6yn
Tr2nBvbJsQ39TapfQj4VmQOXjO0WxPkKBXsXzmAb7mVasuFc4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMHdljOobMMHWPiY1MPszj5lunDEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWFjYzJlZGEtMTYwMS0z
NDBlLTgxYzItYzZkM2MzMjFlZDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFcZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE85o7Q3bUm4DWUNe0IujyhOW2O+2ppuw+Eztb/3g5mg+6orcOlRm4gz
t1VeYafeJtlzscUEO/ZoWNdWJABvdR3GnhVKlGlNOtd3PlqnZPNlR6SSE0JzrMog
2d0IXrnRb5/phTbri+cqpQbJeJmtDXIJgDjw6qD7u/cuxIMvDoCLk/r6isYVS6nH
sTtDIIXh9RUzXepJCr/yu+gJdKhFiEZH9M2TrysrG/TuIZlT4diy0D0P7xsgu1f6
Tobs6Brzq0kCLwJC+lCbnk3taSjhli5sdJOhRSC1ZZ6LCsyZQ9Tg07cRt9Gd20bs
UMx9NbzlS9IHsLM6U/6KmRuQZgoH1cU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 03:35:00 2025 by rpki-client