Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/09e8d3d8-dfaf-3e0f-8bac-098c4a7890f9.roa
File:                     09e8d3d8-dfaf-3e0f-8bac-098c4a7890f9.roa (raw, json)
Hash identifier:          c/J9ORB/ECB6UX8EYa9kq2TVT1ZGAifWs+3QuaRyDe0=
Subject key identifier:   B0:A7:BE:8D:FC:44:4F:89:DF:E2:CF:8E:C2:CD:04:CA:FC:F1:B8:11
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B3316295E67EAA3914800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/09e8d3d8-dfaf-3e0f-8bac-098c4a7890f9.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     3360
IP address blocks:        206.164.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:33:16:29:5e:67:ea:a3:91:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=5809bae1-b828-4e99-a34e-cad878f484d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:fb:6d:30:92:2c:07:84:3b:b0:9b:49:88:
                    cf:94:b8:0a:91:4c:66:f1:7c:40:9f:57:8c:a1:40:
                    66:d7:f2:0d:28:be:13:89:bf:84:e5:80:bd:ab:d1:
                    00:6f:53:92:39:dc:5b:eb:f5:5b:5a:5f:d1:45:f1:
                    06:d0:7b:15:f2:7f:63:2b:68:8b:17:6f:de:96:4c:
                    09:d7:0f:47:c0:56:65:3a:ec:a1:1f:3c:76:83:89:
                    56:5c:04:1a:da:1f:d8:02:27:ff:13:26:20:e4:5c:
                    b1:d6:90:c1:9f:d4:92:11:a2:2c:50:a9:86:f5:cf:
                    36:aa:7a:5e:08:68:1f:c0:86:1b:78:ca:81:3e:33:
                    04:e4:09:c8:65:ab:3a:8f:cf:4f:09:57:53:fd:94:
                    d5:35:9b:ca:a1:22:f7:58:06:8d:bc:81:57:96:93:
                    28:26:c3:51:6c:ae:32:d3:98:50:1b:7b:91:37:f4:
                    82:6e:09:d1:f4:72:78:7a:ef:c9:8f:34:eb:aa:cf:
                    95:65:f1:6d:1f:ff:55:28:b4:35:0b:ef:b3:a5:7b:
                    c3:5f:73:23:b3:52:15:af:8d:0e:5c:f3:de:10:26:
                    b4:3b:66:d9:10:79:ba:f6:a0:65:28:5b:89:56:14:
                    af:38:bc:aa:18:24:c5:48:c5:e4:0d:d5:95:8c:f8:
                    c7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A7:BE:8D:FC:44:4F:89:DF:E2:CF:8E:C2:CD:04:CA:FC:F1:B8:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/09e8d3d8-dfaf-3e0f-8bac-098c4a7890f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:36:13:1f:42:d5:b4:db:7d:8e:f0:07:a4:96:16:f0:10:dd:
         73:dc:49:6f:62:f9:22:7c:3c:5c:8a:12:b7:83:c4:2a:79:fd:
         ba:da:74:32:bb:28:8e:b7:d8:78:c6:eb:32:c4:db:56:15:93:
         1b:ed:c4:9e:21:7e:b1:27:5a:cc:9f:5d:c6:56:7a:f5:81:95:
         44:9b:b0:f2:74:97:93:31:b7:69:ff:a1:50:ce:43:06:fc:cd:
         29:34:f0:6d:3b:f9:8b:00:4f:a5:f1:09:d1:ec:f9:a0:95:47:
         34:94:b7:95:6c:29:4d:eb:15:39:bd:7a:57:11:2a:6a:c0:58:
         bb:5a:b1:17:f3:86:cd:f3:ad:8e:a8:68:b8:37:d2:9e:df:7b:
         11:f8:06:7c:02:b3:25:87:b5:a3:fb:7f:26:e1:42:d6:51:ea:
         1a:bc:5b:4d:cc:77:cb:33:82:28:f1:df:24:cf:bd:1e:c8:8c:
         ad:91:e6:77:80:33:e9:5e:92:70:c2:c1:55:41:cf:44:99:84:
         28:c6:cd:92:5f:59:b3:92:68:51:e4:af:7d:6b:c3:62:3b:e3:
         40:cd:ef:4f:7e:f1:87:1e:61:ed:da:02:4b:82:63:f1:55:37:
         a9:5a:c7:a4:2e:fd:dc:e1:65:4f:1c:27:4f:a6:4b:95:02:0f:
         94:d5:29:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:39:20 2025 by rpki-client