Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b071bda5-0f4c-3008-9326-976b5c41a2ab.roa
File:                     b071bda5-0f4c-3008-9326-976b5c41a2ab.roa (raw, json)
Hash identifier:          ArGb+c1WIX3xWj1oacyHa/WoxKng13d7fE+fVpxtj+M=
Subject key identifier:   3A:93:DB:7D:A7:F2:FA:FF:82:E7:7C:07:E1:D6:7F:55:EC:1A:60:92
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858495ABEE2D72A601FA3B82FAFA0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b071bda5-0f4c-3008-9326-976b5c41a2ab.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     203
IP address blocks:        192.85.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e2:d7:2a:60:1f:a3:b8:2f:af:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=cfc5a811-5b68-4298-9a4b-104523dfca91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b7:f2:f1:02:1c:31:b6:0b:1b:d1:de:70:b7:
                    2d:df:62:32:91:00:da:f7:54:34:26:49:67:3a:4b:
                    72:05:29:d9:28:ca:c7:93:32:39:ce:75:e4:7b:50:
                    bd:8f:ab:6c:63:3a:55:e7:b8:43:cf:a6:04:02:b4:
                    d4:49:8b:ed:d1:fd:e1:58:7e:bb:be:3f:21:5b:0d:
                    3e:d2:64:61:34:0d:29:19:71:85:2f:ea:72:9a:9b:
                    38:95:61:1c:6c:1e:e0:ee:b2:ba:eb:3e:98:ac:5b:
                    26:aa:78:8d:a7:70:78:6c:c8:50:aa:2c:ad:f0:39:
                    70:b9:6a:8c:f5:81:a2:3c:ed:f0:d0:81:9a:fe:c9:
                    fd:a0:1c:17:db:74:c1:2f:3c:48:12:bb:be:0b:8e:
                    db:7a:03:35:73:94:8e:15:69:f4:91:ab:5f:2b:a6:
                    da:0f:52:8a:8f:2a:47:a0:89:db:1f:b4:e7:9b:de:
                    c8:2b:48:d3:77:0a:f7:e1:38:9b:c7:41:ef:84:26:
                    31:ff:3f:2c:ef:2e:40:42:c8:7c:13:f8:14:39:94:
                    ea:82:1a:d1:7b:7f:3a:70:a6:31:10:b4:ef:b3:49:
                    f0:cb:9b:12:4b:0a:1f:58:ec:1d:d9:0f:6a:48:c9:
                    ef:4f:3e:37:43:dd:c5:b4:b5:25:51:2a:6e:66:e4:
                    35:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:93:DB:7D:A7:F2:FA:FF:82:E7:7C:07:E1:D6:7F:55:EC:1A:60:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b071bda5-0f4c-3008-9326-976b5c41a2ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b3:84:e6:c5:48:89:76:be:a7:f5:7b:88:83:bc:c9:1e:00:
         66:e5:81:71:fa:d8:48:4d:f5:41:e0:4e:6d:8c:f8:3c:1a:5c:
         8d:ac:19:8a:cf:07:27:57:9c:46:2e:5b:8d:e7:6b:3a:09:39:
         10:28:2e:c0:4c:fd:0c:9e:38:2f:89:58:30:f3:30:c5:49:4f:
         8a:1d:51:17:70:99:4e:2e:7c:95:3a:5f:ed:35:c8:e4:bc:53:
         70:6c:d6:5f:1f:10:db:87:7c:e4:32:49:db:e9:7e:6c:8f:56:
         89:73:19:f1:6b:8a:8f:93:f8:60:f0:10:30:7a:f6:af:b0:98:
         8b:22:e4:36:a4:e5:c6:07:26:aa:1c:c2:de:70:08:c3:3c:e5:
         21:ba:32:2f:ea:b0:a3:8f:5c:4d:9b:60:12:ee:63:b5:f8:3f:
         61:85:33:ee:ef:fe:9a:c1:60:f4:9a:7f:49:18:1f:1d:2a:ad:
         9f:15:e1:b5:1e:16:3a:e8:d9:f6:7b:1d:8d:19:8b:3d:13:1f:
         ae:10:3b:7a:5d:ec:c9:e9:31:16:06:88:f4:10:ed:75:d1:15:
         79:38:80:f1:01:07:7f:f8:60:6b:52:73:29:18:e5:49:bc:53:
         9b:7a:27:a6:96:39:59:52:b0:a7:07:ef:74:73:e7:d0:8d:d0:
         a1:73:4d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:23:41 2025 by rpki-client