Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/50b0e155-7d06-38ad-8cb6-6cc7685f7bf0.roa
File:                     50b0e155-7d06-38ad-8cb6-6cc7685f7bf0.roa (raw, json)
Hash identifier:          X8I8F/m1FoRbZHZk5eJFWItIFrwETBabdDJSi2gEPG8=
Subject key identifier:   B5:04:17:B1:F0:FA:D5:23:56:92:E2:C1:A8:85:3A:6D:61:78:54:67
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A77808DB05333EC7922029B00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/50b0e155-7d06-38ad-8cb6-6cc7685f7bf0.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     202
IP address blocks:        168.87.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:8d:b0:53:33:ec:79:22:02:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=9e52620a-0ef6-4214-a853-eb35cefbb809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:46:9d:7c:10:a5:7c:07:32:04:39:a5:c9:
                    9b:a9:ab:a1:2b:72:ea:94:8d:b6:c1:66:c5:26:0a:
                    ed:fd:a7:b7:b0:6d:d6:d5:b2:b0:5e:22:29:0a:6b:
                    64:01:e2:55:25:53:01:9b:fd:3e:9d:da:8b:c0:c6:
                    3e:18:8f:d6:3b:68:cf:6d:b9:e4:d6:79:34:62:ed:
                    55:3d:71:6e:2a:f3:98:5b:ce:fe:03:d1:d6:cb:6e:
                    10:9f:7c:59:3d:35:44:97:2b:b5:bd:a9:db:4a:61:
                    e7:4f:52:a4:e7:ff:17:c8:07:b5:41:80:15:6c:5f:
                    f1:91:75:b9:ab:74:4d:0d:83:94:98:e3:1b:af:f0:
                    da:2f:40:97:2a:1a:08:8c:0a:ee:0f:ef:74:fa:00:
                    26:5b:bc:e2:2d:63:18:e5:ca:0a:13:d1:d1:c4:19:
                    a8:45:22:f0:5a:5d:f5:15:41:ae:18:0b:58:82:a2:
                    fc:40:b6:87:d6:45:32:93:1c:fe:2c:48:3a:98:0f:
                    95:39:8a:a1:c9:c2:5a:9a:69:76:99:15:62:68:db:
                    0a:d7:76:4e:64:74:4f:b3:b7:37:3b:30:1b:e5:ba:
                    99:6d:0e:71:dc:88:64:7c:d0:00:ac:1f:91:a0:3d:
                    3e:72:2c:20:e4:8a:5b:c4:b5:75:aa:31:7c:b7:41:
                    28:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:04:17:B1:F0:FA:D5:23:56:92:E2:C1:A8:85:3A:6D:61:78:54:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/50b0e155-7d06-38ad-8cb6-6cc7685f7bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:8a:ae:3a:b3:46:d4:2e:92:86:44:69:07:be:de:3d:40:ab:
         61:4c:c8:6a:0c:df:93:db:18:aa:0f:d0:85:ae:c8:31:c6:c6:
         83:ce:67:59:09:c9:7e:2d:ab:6b:0d:6a:7c:e5:d6:66:8c:b1:
         93:a7:db:1c:f8:1f:51:0f:c6:27:9c:20:6c:6a:7c:ed:30:ba:
         3d:a6:d0:93:d1:bf:7c:ad:ac:c6:60:00:8d:f4:09:f5:c8:32:
         3f:fa:fe:79:4f:37:b8:15:91:a5:f8:26:3c:ec:19:01:6b:9a:
         83:3a:77:e9:74:71:3b:e7:1f:65:c7:50:e2:9f:a5:8f:e8:2f:
         3a:c0:5e:89:e2:28:a4:c1:c5:e5:26:f6:08:5a:85:fc:51:01:
         97:ae:2f:36:18:d4:b1:0b:8b:81:b7:09:4b:a5:42:bc:04:69:
         75:b9:ba:7a:12:ba:19:3a:dd:f3:a6:92:96:63:0b:c3:6f:b1:
         86:79:1d:cf:65:9a:28:8b:bf:e0:b8:97:cd:18:ff:e3:8b:9f:
         76:62:89:06:46:a6:dd:a1:9d:5e:e6:db:e4:90:3f:26:c6:c6:
         39:12:40:98:65:e6:89:13:1b:88:67:f2:7c:5c:17:bd:0b:4f:
         a7:ab:01:de:3f:3c:36:71:87:b4:ce:0a:81:e2:c6:b4:89:5d:
         bf:e4:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:05:23 2025 by rpki-client