Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ef1ebc6c-1ef3-37ae-a8dd-de87ca94e5c3.roa
File:                     ef1ebc6c-1ef3-37ae-a8dd-de87ca94e5c3.roa (raw, json)
Hash identifier:          anQC7XWg8RImRFUqZpB9UqyOcneQ95CQygkXEJbM/ts=
Subject key identifier:   56:DA:72:C8:10:60:99:98:27:D1:10:E4:A9:FB:C0:69:7E:5C:E1:FD
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB2F7D4DAE28DEAB59B5A4440
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ef1ebc6c-1ef3-37ae-a8dd-de87ca94e5c3.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     202
IP address blocks:        168.87.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:d4:da:e2:8d:ea:b5:9b:5a:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=0bbde6dc-db98-4644-a372-f149e8163713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c4:e2:86:6d:c8:94:82:7b:f8:12:87:9b:67:
                    80:ed:4c:63:89:a1:b6:35:6f:d1:2e:8c:31:46:ae:
                    7d:9c:a4:7f:a8:c2:4f:39:93:17:ba:8f:f2:7c:2e:
                    a4:cb:c1:9a:42:8d:9a:94:fd:ce:83:ba:96:e8:21:
                    ea:95:d0:e2:36:b2:df:81:75:8e:bd:b9:2d:c8:5a:
                    b6:2a:06:ce:02:d8:f0:65:73:87:cd:77:8c:29:9b:
                    58:34:c0:3d:53:bd:04:8a:c4:1f:5d:9e:e9:5e:88:
                    50:36:97:62:8c:45:14:c3:78:02:d3:aa:ba:17:7b:
                    1a:68:03:a9:72:b5:75:d6:8a:8e:cd:e7:a9:21:48:
                    df:cc:2b:f0:9b:70:10:a1:13:51:e9:b0:5d:c8:bf:
                    9d:f9:94:a9:06:dd:cb:c0:71:71:f5:eb:ff:59:6c:
                    fa:f3:e1:11:06:a0:dc:3d:02:c5:26:5a:ee:3d:df:
                    4e:51:21:eb:4f:7c:16:11:3b:ab:6c:40:c9:b0:70:
                    9a:5a:41:ee:4c:b0:64:40:54:07:e0:a9:c4:16:98:
                    6f:f2:00:f5:70:01:61:87:c7:cb:1b:0a:f0:c6:72:
                    e6:a0:17:83:00:c5:bc:69:7d:57:d7:e6:a0:19:22:
                    96:7e:2a:9d:a8:dc:0f:a1:30:af:e2:4e:65:10:bf:
                    e7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DA:72:C8:10:60:99:98:27:D1:10:E4:A9:FB:C0:69:7E:5C:E1:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ef1ebc6c-1ef3-37ae-a8dd-de87ca94e5c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:17:dd:3a:75:c3:a7:6c:3f:56:19:44:06:17:f7:3a:1b:51:
         c8:b1:ed:e3:99:d1:2f:d3:02:fe:7a:8f:1a:84:8b:95:0c:62:
         95:b9:bb:dc:de:49:35:46:a1:25:94:dd:f5:67:45:ed:3a:3a:
         7f:07:b1:fc:81:f6:ee:17:4b:b7:31:9a:52:de:27:50:78:ca:
         2d:87:f5:45:b7:fe:0b:86:7f:b4:d4:12:91:e9:07:be:d2:38:
         61:68:1e:bf:bc:10:de:b6:54:ac:99:b1:83:68:56:e3:4c:cd:
         64:bf:63:6a:29:a7:40:5a:a5:ad:c9:69:a0:02:ea:cf:8b:13:
         cd:e8:8e:b3:ec:4c:8a:fd:b7:87:f5:14:7f:8f:29:4b:0c:86:
         5c:2a:ee:c4:d6:4c:09:2d:fe:24:6c:4b:ff:68:34:8f:3a:01:
         ef:a1:43:b6:9d:05:d3:8e:7d:23:0f:d0:46:99:ca:78:ee:d5:
         90:c9:b0:57:02:69:b7:c2:a1:89:29:7e:65:de:95:2f:4c:7a:
         0e:a0:58:f9:cd:85:27:59:04:ab:67:b6:eb:76:0d:fc:6c:42:
         28:d7:0a:ec:5b:d1:16:67:11:a5:36:53:37:71:d2:86:91:fc:
         e4:40:43:c5:b0:e9:0b:a7:2e:4f:ed:a8:79:e0:e0:67:77:13:
         a9:94:00:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:19:21 2025 by rpki-client