Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e5ac2027-987a-3f35-bfa4-aab957e5aac8.roa
File:                     e5ac2027-987a-3f35-bfa4-aab957e5aac8.roa (raw, json)
Hash identifier:          LI/arYGLkS54ISHOlv+BHZjnhD3G9x3jLFvgSKbTobw=
Subject key identifier:   7D:5B:F7:E4:EE:70:0B:4C:F8:1E:23:21:D7:C6:3A:3E:AE:35:B5:3C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849998F366797F38F250D236600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e5ac2027-987a-3f35-bfa4-aab957e5aac8.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     203
IP address blocks:        192.85.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:36:67:97:f3:8f:25:0d:23:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=a7649261-9bb2-4773-8231-3a78be5cdc11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d6:6a:9f:3b:64:bc:5d:71:15:9e:c9:10:44:
                    95:48:5e:d4:8f:ea:83:16:1e:d0:3d:6d:d0:c0:67:
                    a9:ac:6c:23:71:23:6f:76:8b:de:87:92:21:0c:12:
                    37:92:79:15:34:1d:dd:06:d7:b1:8e:3a:d5:4d:51:
                    70:77:d7:a3:ac:13:35:32:94:10:d7:c4:f3:61:00:
                    12:88:91:14:99:c0:7c:f2:a5:63:8e:fe:21:16:90:
                    f9:ed:a6:c9:26:e1:63:bf:c2:ec:04:87:07:34:57:
                    78:59:26:48:23:f8:88:87:53:aa:5d:19:b6:45:89:
                    5d:a3:5b:78:a3:d3:35:fa:fa:ba:6f:b9:f4:44:98:
                    f1:57:1c:7d:d9:85:a8:7d:e6:de:de:59:67:f7:fb:
                    5c:9c:d9:66:65:e9:85:db:a9:2d:04:69:9e:73:65:
                    45:09:53:b1:00:40:5d:86:2e:f0:87:d0:52:5b:42:
                    a1:81:28:d4:39:aa:9e:5c:84:eb:63:f9:3a:6e:4f:
                    93:f4:ce:01:32:dc:ef:57:28:10:4e:00:96:5b:03:
                    9f:26:96:1d:2b:d4:a1:73:09:be:4d:88:8c:dd:25:
                    77:07:b9:11:39:cf:9a:fa:a2:3d:6d:43:14:92:2a:
                    a2:6a:83:3e:cf:66:3f:51:b4:7e:ed:fa:fc:1d:e8:
                    5b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5B:F7:E4:EE:70:0B:4C:F8:1E:23:21:D7:C6:3A:3E:AE:35:B5:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e5ac2027-987a-3f35-bfa4-aab957e5aac8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:30:20:31:1a:7a:66:53:fe:c0:91:f8:6c:03:cf:e1:a3:b0:
         bd:84:42:31:4a:5b:a0:68:58:ac:f8:ec:61:1f:78:01:6f:2e:
         3d:c0:89:a5:18:8c:9f:41:f0:fd:0f:c5:5f:b9:b1:a2:ba:d5:
         64:5d:d2:36:29:ee:cc:3c:18:52:7f:47:2b:9b:ad:7b:df:fd:
         17:04:d2:17:b1:91:84:ca:28:23:bf:d3:8a:20:a7:95:e3:d6:
         0e:12:f8:19:2a:f1:04:b8:d1:9f:b1:51:34:44:cb:18:4d:9d:
         06:4d:fe:88:1e:94:1b:30:16:c7:16:5a:90:58:2e:5f:0e:c4:
         15:85:85:c9:94:a2:3d:71:ce:c0:a9:fe:d1:0f:9c:ce:4e:a2:
         e5:3a:9d:bb:28:36:d4:72:72:9a:e6:9f:d4:36:43:0a:60:43:
         cb:2f:0b:52:7b:76:de:44:bc:ec:66:f4:d9:db:09:d7:e4:a7:
         39:74:9d:70:49:39:7d:5f:a7:e1:1e:18:f2:53:5f:d7:34:3d:
         d3:13:45:1b:27:93:d3:a2:37:58:3d:46:eb:cd:1e:c0:f8:ba:
         40:1e:43:1f:42:41:45:83:27:75:ba:5a:a4:1b:0b:e5:c7:35:
         89:f6:80:02:2e:de:17:f6:da:5b:c9:69:61:14:5d:64:38:ec:
         74:c4:8b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:29:29 2025 by rpki-client