Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e1449b40-c4e8-38ff-8b05-5fd9dc245096.roa
File:                     e1449b40-c4e8-38ff-8b05-5fd9dc245096.roa (raw, json)
Hash identifier:          phn59L217xdfm4IAf/mMBKqLaqBR15YhR3LSXdRib0s=
Subject key identifier:   8C:FF:66:59:00:0C:C4:E6:F1:07:57:0E:1A:98:49:90:BD:0C:0F:57
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858497DA469C24523689FA7F5D600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e1449b40-c4e8-38ff-8b05-5fd9dc245096.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     86
IP address blocks:        168.87.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:69:c2:45:23:68:9f:a7:f5:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=d49e0e73-b6df-435b-9a20-e46190effded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0f:01:47:42:e3:fe:76:bd:c6:31:6d:8f:e8:
                    16:97:90:cd:ab:4d:f4:9c:e3:e5:19:75:14:4a:94:
                    0d:5b:4d:59:16:57:99:7f:06:97:e7:70:58:e7:57:
                    82:8d:7a:48:88:91:74:00:5e:c1:a2:59:44:be:50:
                    14:4c:aa:81:be:f3:7a:3c:c3:ba:07:2d:08:fc:c0:
                    e6:f1:86:72:8e:b1:5f:c2:19:11:0d:1a:06:8d:b5:
                    d9:7a:4f:99:f0:2c:e6:6e:1a:dd:e5:62:c4:7e:5f:
                    e3:22:d9:a6:20:8a:03:3a:32:23:0c:6a:03:ff:27:
                    f1:1c:28:e7:f7:83:2f:9b:44:bb:5d:56:9c:44:70:
                    bd:f6:a3:3a:aa:0c:bd:d4:6e:cf:56:bf:64:81:79:
                    89:a5:01:b0:1e:26:e1:28:6d:88:a0:71:ee:c5:13:
                    97:e4:9c:83:45:da:97:58:32:25:e0:98:92:c0:16:
                    6c:93:c8:de:d5:bb:a1:6b:a8:4e:51:48:3b:86:9b:
                    c0:87:97:1c:b9:5b:2c:3f:60:76:27:1e:e3:1c:99:
                    d7:46:89:4c:7a:92:5f:29:72:f3:2b:4b:aa:c0:55:
                    cb:e6:0a:65:81:74:f2:43:4b:7e:80:7c:cc:49:44:
                    44:4f:68:27:cf:99:42:0a:15:66:36:36:87:55:09:
                    17:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FF:66:59:00:0C:C4:E6:F1:07:57:0E:1A:98:49:90:BD:0C:0F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e1449b40-c4e8-38ff-8b05-5fd9dc245096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:2a:24:30:5a:68:e5:d4:a4:12:33:a3:65:77:a7:d9:4e:d2:
         77:2e:b7:27:04:55:83:0a:e7:62:4c:3f:2c:72:ea:d9:71:f3:
         3d:95:13:a2:82:d9:f4:92:e7:8b:5e:95:a7:87:69:8b:7e:85:
         3a:44:da:5e:43:35:ea:ac:79:01:4e:b7:f2:62:cd:1d:75:d1:
         aa:7b:8b:ff:b7:18:53:a6:79:e5:1b:70:fd:2d:46:a0:b4:81:
         66:2c:e6:4d:62:62:f0:09:da:da:53:4a:cc:81:b8:c1:30:7a:
         5f:4b:d6:f8:56:35:13:09:fa:aa:c9:5c:cd:f6:bd:f6:ac:8c:
         1b:88:37:b8:48:6a:49:41:9e:77:95:dc:b5:a5:7c:d4:f1:14:
         70:52:e9:b3:20:69:95:69:46:d9:04:c0:9e:3b:37:24:05:c6:
         1e:14:4a:6a:86:88:05:4a:a9:56:69:0d:a5:6c:4d:c9:f5:a8:
         00:3f:72:79:27:a9:7d:7f:0a:0f:f7:e6:26:0d:9c:9b:8d:f1:
         d3:91:ef:ee:c5:af:98:64:ae:b6:e0:ec:f1:ba:31:f5:aa:fc:
         ce:9e:e2:07:16:a8:fe:8c:93:23:60:72:fa:63:7b:b4:d8:cf:
         88:58:35:c4:89:c3:2d:0e:0a:5b:12:eb:0d:70:d5:52:08:c2:
         1d:e9:7d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:26:49 2025 by rpki-client