Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/87ae1ed7-9ccc-32fb-875b-fd8fa2e40f7b.roa
File:                     87ae1ed7-9ccc-32fb-875b-fd8fa2e40f7b.roa (raw, json)
Hash identifier:          5VenHc4+deUvY1BbQcGyKX1efD7fpjnxK8NV2MQWkuc=
Subject key identifier:   8C:55:8C:25:9C:AD:78:79:51:E6:2C:88:9C:B6:85:14:30:37:04:C8
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A71EB51186DAC94D7560BBE80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/87ae1ed7-9ccc-32fb-875b-fd8fa2e40f7b.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     203
IP address blocks:        168.87.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:51:18:6d:ac:94:d7:56:0b:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=b9598d82-1cc4-4c44-813f-a1747296aef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0c:81:5d:81:2a:73:59:12:22:ea:84:7b:3b:
                    9b:67:ee:2a:99:5b:91:f8:8c:2d:58:4d:ef:cf:4c:
                    9f:5d:dc:02:35:e7:b7:b6:70:ce:51:48:16:e2:63:
                    cf:c5:26:eb:4e:27:25:12:ff:30:58:f1:df:13:1d:
                    7c:03:2b:ed:43:a9:c8:ac:3b:0a:48:14:62:3a:87:
                    af:59:c4:0f:9e:14:b1:12:7e:73:3b:fc:b0:52:3a:
                    d7:1f:21:73:b7:e7:05:f6:0e:17:89:ee:17:3b:dd:
                    24:2f:c0:fc:32:76:af:83:8a:0a:61:b6:06:f2:77:
                    a9:09:8e:06:e9:c7:16:17:2b:f5:e5:e1:52:44:15:
                    13:5b:ec:fd:02:f6:b7:f1:fc:bf:36:45:11:24:2d:
                    49:c4:37:49:0e:aa:57:be:71:fc:d7:af:9d:cd:58:
                    e4:f7:9e:8f:f3:82:85:ae:78:1d:4e:d5:94:2c:4d:
                    da:17:b9:96:0c:e1:57:3c:a2:32:f3:ec:d6:f9:e4:
                    34:b2:f0:33:60:59:04:31:a7:4b:e0:31:d8:a9:ad:
                    43:ae:7e:15:b7:fb:87:f5:15:53:5c:99:91:03:ac:
                    c1:23:5f:91:be:26:38:28:7a:9b:ea:69:95:e0:44:
                    78:27:93:17:3a:0d:0f:70:62:8f:e6:81:26:0a:6c:
                    bc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:55:8C:25:9C:AD:78:79:51:E6:2C:88:9C:B6:85:14:30:37:04:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/87ae1ed7-9ccc-32fb-875b-fd8fa2e40f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:82:e6:8a:60:e9:a3:a8:19:31:fa:37:ee:3b:17:8f:96:bf:
         d3:8c:b5:52:1c:f5:9c:1d:7f:71:71:42:30:64:2e:3f:e9:d6:
         66:60:27:1f:cf:59:fc:de:24:90:8a:5c:e8:99:32:f8:94:36:
         01:a3:7d:79:6b:70:68:ec:ab:d7:e2:4f:43:79:27:13:c2:b3:
         f1:5e:d7:01:36:6a:05:2a:a6:20:c0:87:e1:15:07:c6:dc:c5:
         b0:bf:82:36:91:4a:76:59:58:f5:f3:f2:5f:46:a2:a4:1f:82:
         7d:72:a5:9d:74:58:51:0a:df:14:a8:37:38:60:5a:98:65:34:
         29:fe:5e:19:c4:3c:fa:7d:e5:44:b5:e3:a7:ef:7f:e6:5b:6b:
         cf:84:24:73:59:49:ef:cf:ac:82:35:72:17:e6:a7:7e:e0:5a:
         c4:54:93:09:c9:4f:e4:5f:81:ec:f5:85:10:57:89:0f:29:e1:
         c5:d5:f5:a1:73:12:87:d7:2c:8a:38:1f:f7:3b:53:9e:6b:80:
         2a:36:78:e8:94:94:72:1f:e2:94:cc:a4:e5:53:82:ef:8c:a6:
         26:b6:34:7d:7b:30:e8:eb:b0:e7:6c:78:7f:e8:61:44:97:79:
         0b:00:33:d3:3f:2a:99:2a:0b:c6:ec:2b:70:22:43:d4:82:4d:
         c5:8d:8f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:25:32 2025 by rpki-client