Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dbb15421-34db-37e7-8e5b-41000615d40d.roa
File:                     dbb15421-34db-37e7-8e5b-41000615d40d.roa (raw, json)
Hash identifier:          MKyUGcrlWWHKsa2a4LIJLiBv8U9O5/RmUonOnNQzNC8=
Subject key identifier:   49:44:82:2A:E6:50:25:CF:C4:40:AB:D0:11:A4:E8:84:62:92:12:61
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A34667C65689A46B222CE00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dbb15421-34db-37e7-8e5b-41000615d40d.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     5714
IP address blocks:        192.85.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:66:7c:65:68:9a:46:b2:22:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=4284a692-f813-48f3-9abe-03aa611559f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:68:30:7b:f0:9d:a2:6d:6f:48:2c:fd:9c:4a:
                    cc:12:80:c0:ef:4a:a8:b6:ad:96:fd:b7:d8:f1:50:
                    91:14:7c:d5:4e:09:cf:d6:b0:8c:5d:56:31:86:a8:
                    fd:4b:41:82:48:ea:22:a6:28:41:d6:10:84:f4:3a:
                    e3:a0:a8:c1:d6:7f:88:fe:29:03:58:8d:c9:f5:01:
                    40:37:cc:ab:74:54:64:5d:96:03:eb:8a:15:47:32:
                    00:03:d3:44:72:03:29:ff:35:f0:23:9c:16:4a:fc:
                    02:da:95:59:d7:b3:87:8e:5d:94:52:5c:bf:0b:2c:
                    b4:49:30:cd:09:39:f5:d5:80:0e:e1:03:ba:04:86:
                    87:89:80:63:d7:e0:bc:a2:24:86:4e:5a:39:7d:34:
                    ce:9f:39:89:2e:5c:84:79:01:a6:74:55:58:39:62:
                    c7:df:e0:59:46:f5:0d:af:d9:01:0f:f0:6e:1f:65:
                    6c:64:11:f6:c2:ef:b0:8b:5a:b6:8f:29:bb:5c:31:
                    80:a7:3a:d8:9f:c3:24:07:ea:be:43:6b:bc:09:2c:
                    b1:de:77:dd:0e:af:7a:0b:40:49:63:3a:36:eb:2c:
                    23:00:32:00:8f:c9:f9:fa:04:5f:69:74:aa:10:c2:
                    5a:c3:2b:d7:ba:ee:6a:9c:63:42:44:f9:cc:15:34:
                    00:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:44:82:2A:E6:50:25:CF:C4:40:AB:D0:11:A4:E8:84:62:92:12:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dbb15421-34db-37e7-8e5b-41000615d40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:7e:10:a2:7a:81:e6:8e:2a:d5:b1:a7:41:ae:db:6a:98:e2:
         5a:ba:b6:f1:2b:91:d1:1a:5d:8d:be:cd:12:a2:a1:73:a0:1a:
         f0:cc:cf:45:42:5d:a0:9c:49:06:83:8f:11:85:72:ee:d5:a2:
         97:fd:79:0f:0a:90:41:83:9a:35:9c:59:aa:59:1e:8c:f2:68:
         6f:9d:a7:f2:f4:f0:6b:bb:bf:62:f7:37:6c:6f:71:3b:04:0e:
         f1:f2:e1:cc:49:99:1a:b3:2c:44:26:4f:fd:a4:e4:76:db:24:
         c8:97:73:c9:f3:6a:02:c4:1a:92:28:58:4c:6a:fc:34:6e:62:
         f2:2a:01:6b:e2:47:bc:15:6c:a7:3b:da:fb:9d:68:79:d8:71:
         6d:f1:c8:ba:c7:e8:60:48:d5:0e:d5:5b:8a:7e:20:25:89:01:
         01:0d:3a:1b:3e:93:4d:18:34:59:5a:34:69:59:84:35:15:65:
         52:c9:21:51:dc:62:28:eb:35:4d:6b:5a:ac:40:1c:f0:0c:39:
         5d:f1:a2:b6:7c:c6:72:e7:01:79:fe:56:6c:cf:6b:84:1e:86:
         f1:29:a0:ec:06:49:ee:cb:b4:d1:54:14:25:fc:db:ff:25:3e:
         8b:d5:af:5a:5a:ac:54:55:26:6e:b3:c5:ca:7a:0e:26:f5:a4:
         28:93:e8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:30:00 2025 by rpki-client