Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/20826695-21c5-3801-8293-ce69728acd23.roa
File:                     20826695-21c5-3801-8293-ce69728acd23.roa (raw, json)
Hash identifier:          IAfOSTOQeprFRTQGmXVb3v7KUM7uk6KJAos0bL29wy0=
Subject key identifier:   48:CC:46:89:ED:8D:70:81:E8:ED:4B:6B:98:44:01:BE:67:02:C0:0B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B2676B27A8528E9B84780
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/20826695-21c5-3801-8293-ce69728acd23.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     3356
IP address blocks:        192.85.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:26:76:b2:7a:85:28:e9:b8:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=c1241dc3-76f0-44ff-a123-4ae26c2fbdc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:18:57:81:d2:61:ad:45:c5:65:05:1f:7a:38:
                    f1:00:0f:d9:fb:d8:b4:b0:25:ab:75:f7:db:af:fc:
                    d5:c8:43:b7:73:03:f4:e8:b5:c8:9e:c0:87:0f:c9:
                    45:07:aa:ab:e4:42:20:46:14:89:42:a1:2e:de:15:
                    5e:0c:95:52:58:a9:a1:44:df:74:a8:27:5b:6b:96:
                    dc:fc:29:1c:c4:b9:b4:c9:27:26:dd:ec:b4:ae:b6:
                    0d:63:2e:12:38:71:b0:0b:44:8c:ae:71:7e:25:10:
                    c1:5c:0e:4f:2f:9d:24:0f:f2:67:62:50:27:b2:95:
                    00:2c:a0:d9:ef:9a:54:92:72:a2:e5:83:c8:d6:13:
                    77:59:57:c7:4e:8f:dd:ee:f4:68:01:6b:6c:86:73:
                    b6:65:9d:26:c9:61:b4:5f:2d:b7:c8:e0:de:2d:f2:
                    b4:9b:7b:40:e5:1d:e6:54:fa:2e:6c:b4:f5:7a:e7:
                    f4:58:23:25:8d:67:a1:8e:8e:eb:fc:05:e6:bd:5a:
                    ee:cc:80:22:53:c9:d2:44:a0:ff:4f:1b:b0:da:cc:
                    07:f3:04:40:0d:22:5e:19:2e:b9:67:08:9c:ef:46:
                    7e:f9:87:24:33:4a:42:d3:43:91:9e:a2:47:1f:ea:
                    f5:4f:5e:43:92:f0:92:da:b6:89:72:22:24:b1:f8:
                    11:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CC:46:89:ED:8D:70:81:E8:ED:4B:6B:98:44:01:BE:67:02:C0:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/20826695-21c5-3801-8293-ce69728acd23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:e3:12:64:42:8d:0a:88:2f:b0:fb:6b:8b:d7:71:a5:1d:5d:
         d2:fe:af:c0:00:a1:15:1b:9c:19:fc:c3:8f:d9:98:ae:81:23:
         f2:e6:69:d3:a9:09:b9:b3:3b:76:8f:4d:a2:7e:38:cc:17:ef:
         23:5c:f9:2c:93:7e:2d:fa:25:7d:12:86:7c:9e:93:b5:1e:7d:
         b3:a3:69:63:08:3d:75:f5:ce:b6:b7:e2:af:38:5c:b6:80:29:
         04:58:ec:f8:0d:a1:57:8c:99:41:8c:f2:63:f5:2d:74:9d:be:
         d0:75:1d:af:8e:94:aa:17:de:75:d1:77:17:a8:dd:cb:d0:85:
         62:c1:35:3e:f6:bd:1d:6b:75:8d:4d:c9:f3:75:a7:06:b0:57:
         6b:74:48:ac:38:c7:53:75:68:d4:49:1b:4b:6e:9c:1f:12:74:
         ca:5a:d7:22:0d:b6:0e:3d:2a:89:e2:ea:ff:9a:8f:12:5b:dc:
         47:85:b3:9d:90:4b:4d:01:d5:04:e3:a7:fb:b4:37:e4:8a:c4:
         8b:5d:5f:19:fd:94:38:ad:78:38:f7:d1:33:e4:23:5a:b6:a1:
         fa:a1:2b:f6:3a:61:93:f1:c8:0b:3c:ef:ed:2b:58:91:04:e4:
         2d:59:52:6c:9c:3e:e6:28:96:5d:5e:64:5a:5a:f5:28:59:9a:
         62:50:0f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 23:48:16 2025 by rpki-client