Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/97ee2311-ca30-38b3-a703-3295e852e513.roa
File:                     97ee2311-ca30-38b3-a703-3295e852e513.roa (raw, json)
Hash identifier:          lg8go8oKjZMsjFHUIpWltfSaxT5ygyXrVs6UllMPQTs=
Subject key identifier:   F1:4A:5F:3F:AC:21:B1:11:AD:53:6A:14:B6:39:91:67:0E:97:07:D2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B26A7FEBA9BA42EB7E5D0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/97ee2311-ca30-38b3-a703-3295e852e513.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     3360
IP address blocks:        192.85.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:26:a7:fe:ba:9b:a4:2e:b7:e5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=29626110-f35b-4e4c-bf98-752ffb50ec78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4c:ca:7c:f6:35:c5:bf:0c:a9:25:62:81:be:
                    a5:53:01:a9:5f:95:85:66:21:de:ad:fd:e6:e7:89:
                    c8:f4:60:81:a4:d0:3c:48:ca:8f:1b:39:cb:7a:a8:
                    76:3c:b3:15:f7:1d:50:86:13:6d:ce:b6:b7:d1:94:
                    19:c6:c4:ec:38:ec:1d:cd:88:0b:85:89:b4:43:97:
                    be:e0:d2:ae:fd:a9:75:e2:b0:35:fa:23:de:94:26:
                    25:d4:62:eb:5f:24:c7:15:70:b8:79:74:0a:8a:9e:
                    25:45:29:3c:ca:82:b0:ea:ef:06:01:30:77:38:07:
                    a6:69:09:d6:76:de:31:31:6d:32:1c:3c:8c:0b:e3:
                    bb:42:34:28:26:a7:c5:2c:2c:d9:04:14:c1:d7:f4:
                    2e:23:62:51:ef:a4:0d:09:ec:75:6d:fe:39:0d:d4:
                    09:9f:7d:88:9f:20:a4:14:89:31:76:9d:78:d9:50:
                    45:c1:ce:c7:c6:0b:f5:3a:58:46:c0:2d:5e:87:ba:
                    09:0e:97:23:07:f3:96:c4:6a:3d:e8:5a:c3:17:c8:
                    55:ce:f9:f8:e1:cb:a0:47:77:c6:36:b7:1b:0a:3b:
                    1f:ef:20:e4:2b:46:ad:28:02:50:c8:09:42:07:5a:
                    8c:b5:8d:3f:37:86:45:49:19:38:16:6d:00:82:b9:
                    2a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4A:5F:3F:AC:21:B1:11:AD:53:6A:14:B6:39:91:67:0E:97:07:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/97ee2311-ca30-38b3-a703-3295e852e513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:32:a8:93:c7:71:47:e5:c6:e3:7a:29:57:fa:16:50:37:fb:
         29:31:92:83:1d:df:9e:26:a9:e2:e1:05:e8:5b:f2:b6:b1:f6:
         55:f1:58:52:1f:94:97:a6:44:69:05:0a:45:73:8a:7d:00:9e:
         39:15:7d:11:6e:ff:18:39:1d:9b:f3:c9:8d:3a:55:f7:e1:e6:
         1f:5f:ad:85:04:9e:6b:40:da:28:b3:a8:56:69:8f:85:50:fa:
         f5:93:1d:fc:94:11:cd:49:7a:2f:0d:39:5d:57:6c:92:c0:c5:
         6a:14:9f:86:31:63:31:12:a0:3e:e9:6a:41:ed:f4:f5:3b:a4:
         a4:3a:2c:f5:46:36:9f:a8:f5:27:6e:90:4a:28:1f:1b:a3:bf:
         5e:14:9f:ee:1e:91:b0:68:bf:49:fe:1a:40:b7:fc:0e:80:19:
         63:df:a8:fd:6b:23:5a:08:bb:e2:c6:7e:31:5e:48:46:33:e3:
         ea:b6:11:35:a9:eb:d8:16:32:9a:f6:8a:89:6e:c7:5c:2f:39:
         17:a9:76:6b:f5:27:c1:f4:8f:58:c2:fb:4d:e9:de:e5:28:fb:
         d2:ae:f9:cb:62:a3:1c:3b:97:ca:5e:ee:8f:f8:b6:f0:e6:e8:
         37:e4:7c:6e:24:37:6d:59:5f:a6:61:e7:03:13:d3:2f:8c:8b:
         75:54:e1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:45:16 2025 by rpki-client