Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e894738f-a5ad-37d5-a627-b088b4baddd9.roa
File:                     e894738f-a5ad-37d5-a627-b088b4baddd9.roa (raw, json)
Hash identifier:          sVNAW45TUWQd7Jq/1e2H79Qk/xnlqFvwrnQdGcbHVuY=
Subject key identifier:   AE:C5:EA:E4:D3:EA:96:18:3C:96:48:75:D7:6A:5C:FB:5E:58:D7:DD
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B25E2ACD2C04ACF8B26B0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e894738f-a5ad-37d5-a627-b088b4baddd9.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     3360
IP address blocks:        192.85.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:25:e2:ac:d2:c0:4a:cf:8b:26:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=b5465c3a-d0d5-4a09-8b80-3b127cf32af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:86:e9:f1:27:71:17:c7:1e:d3:07:c7:a7:1c:
                    a3:9c:e7:69:ed:03:17:da:bc:b1:48:e8:f2:27:ea:
                    61:e1:73:12:c8:26:f3:dc:7d:92:4e:52:6c:eb:a2:
                    9f:cd:e2:96:13:c7:f6:01:5e:20:44:a5:e0:3b:47:
                    52:80:8a:ab:c6:86:88:8b:40:3a:e3:cb:8a:ca:29:
                    3a:55:1f:83:63:46:0d:90:a6:f6:3d:52:93:02:c7:
                    5f:58:50:2c:04:35:59:d0:15:3e:e0:86:d1:7e:9d:
                    93:4c:bb:c6:4a:ff:50:77:2e:c2:ac:ef:0a:81:d2:
                    e4:3b:ea:e4:07:5f:d4:ff:a0:ce:ee:4a:a8:77:38:
                    24:d5:cb:f3:45:a3:af:23:cf:2b:e0:98:47:e5:ba:
                    eb:fa:db:7d:d7:ac:c2:46:9d:0b:d9:da:42:aa:4a:
                    1c:55:96:a6:f4:a4:a9:b5:6b:08:61:eb:fd:24:6c:
                    4c:d3:b8:86:0d:a5:9b:36:1d:66:1d:83:b8:0c:8c:
                    59:b6:a5:00:aa:ce:85:e7:da:26:86:10:cc:6a:41:
                    01:eb:85:64:67:ee:89:ab:3d:7d:dd:0d:06:dd:b7:
                    94:c4:b1:cf:91:88:e7:bb:79:d2:00:d9:a7:93:77:
                    ac:a5:e3:70:68:8a:25:7e:1b:83:fd:c0:0c:be:e1:
                    93:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C5:EA:E4:D3:EA:96:18:3C:96:48:75:D7:6A:5C:FB:5E:58:D7:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e894738f-a5ad-37d5-a627-b088b4baddd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:88:d1:9e:dc:a5:2f:21:c4:8b:f9:61:73:8f:dd:0d:03:19:
         cf:75:6b:2e:5a:45:89:61:99:36:60:0c:a4:68:3a:42:a9:f8:
         58:d3:1f:4b:47:84:d0:f5:72:fa:f3:ce:4a:b6:40:ae:55:4e:
         9a:d9:d0:30:64:bb:14:bb:61:57:68:96:94:cb:f3:2f:61:5d:
         85:94:58:e2:9f:99:ad:99:23:61:f4:f8:2d:d3:1d:bf:95:88:
         f6:b4:68:d8:f8:af:4a:25:27:d6:e3:7a:59:8d:61:fa:76:82:
         4c:ac:c5:5f:53:4a:a5:28:c9:fa:da:58:ee:c0:65:08:94:e7:
         51:a8:61:e5:75:f5:df:7f:dc:95:44:38:4d:89:78:c1:1b:ee:
         69:e9:d0:88:af:2f:10:4e:af:60:da:40:1e:03:ba:7c:da:94:
         dc:88:cf:61:70:03:3d:fc:f3:a2:5f:37:31:38:9d:04:cb:7f:
         76:b6:8b:e3:e4:2e:38:bc:8b:78:2c:1a:3c:7d:d1:e9:7d:86:
         10:52:14:9f:0b:ac:31:68:53:e3:42:be:25:04:1e:c0:84:88:
         f7:f7:e8:89:cb:ca:14:25:f0:5f:c4:e1:f3:2a:71:8c:cd:c8:
         ad:b3:e1:cc:ec:6a:97:66:27:89:ab:b5:02:86:9c:f4:5b:f3:
         69:b7:c8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:41:29 2025 by rpki-client