Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5847517f-210b-3788-9466-d5cb48274a43.roa
File:                     5847517f-210b-3788-9466-d5cb48274a43.roa (raw, json)
Hash identifier:          /FcPkRNodwgyx0wDD5LukMq9BRcSsMgmc3khhK0BtG4=
Subject key identifier:   3C:6B:E9:49:D4:81:F4:5A:40:60:6E:F4:25:B4:C3:29:3A:E5:5D:37
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AAB2662C1E733FE3AE569D2C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5847517f-210b-3788-9466-d5cb48274a43.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     3356
IP address blocks:        168.87.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:62:c1:e7:33:fe:3a:e5:69:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=dcb5801d-21ff-47f7-ada1-20ae96b5d3e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e7:a3:0d:43:f9:75:79:2a:59:9f:cc:c6:bd:
                    5e:4c:3d:31:b9:35:8a:49:d2:1a:ac:4b:62:ba:7c:
                    92:77:64:44:1f:19:fa:61:a3:ae:aa:f9:0c:03:0f:
                    3b:fb:d7:ff:77:47:d8:a0:87:09:e7:2d:78:90:2b:
                    58:02:e5:66:0b:77:56:e3:39:33:59:93:c5:12:02:
                    dd:4c:5d:65:a5:ab:5a:78:17:7c:b8:50:f6:4b:d9:
                    66:59:15:8e:06:67:a7:7d:9c:b7:b2:0d:3d:c0:62:
                    ef:35:c6:f5:9c:ce:82:0f:74:9f:d6:83:36:eb:b6:
                    8a:16:cf:ed:e1:16:11:56:96:34:94:fd:31:63:1e:
                    7d:7a:92:f0:39:3d:ed:bf:78:75:b5:d7:b6:72:b2:
                    51:84:61:8c:85:6d:39:e5:e4:06:d0:71:0e:0e:6d:
                    4c:1f:17:ae:72:ab:46:08:c3:62:46:0f:dd:b2:4f:
                    1f:c1:25:d9:53:12:64:89:33:5f:d3:35:30:11:1c:
                    95:ae:c0:d7:f5:1b:55:d3:38:3f:6f:58:57:da:ca:
                    8f:f5:05:42:98:4c:c2:4d:42:08:69:cb:59:3a:29:
                    64:21:a8:cc:66:82:cb:9e:fc:18:52:6d:a5:2e:ab:
                    87:83:41:27:e0:76:04:9f:ac:39:0b:30:42:39:9a:
                    22:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6B:E9:49:D4:81:F4:5A:40:60:6E:F4:25:B4:C3:29:3A:E5:5D:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5847517f-210b-3788-9466-d5cb48274a43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f4:cd:4a:b4:5a:a3:f1:a8:eb:98:a5:11:8d:f9:d0:71:64:
         85:9e:40:df:00:ec:0b:d6:c6:bd:22:88:20:ae:16:84:dd:db:
         18:69:22:a6:48:4c:2f:f2:5d:86:73:6e:cc:ed:c5:1b:82:46:
         4e:ae:95:3f:01:37:b0:44:4b:c6:e0:e0:af:b3:6b:d8:0d:d5:
         41:b4:91:ff:ad:0d:79:ce:ca:80:4d:47:ab:ba:87:3f:e7:57:
         c2:e1:8c:43:66:4a:1b:90:56:59:31:d2:3d:47:dd:19:2d:31:
         3d:80:14:23:0e:64:ce:4e:67:d7:ff:9b:1b:3b:55:d7:b4:9c:
         ac:27:73:de:60:8b:25:7b:ec:23:6e:75:9e:08:e5:56:cd:c8:
         cc:e4:37:17:d1:db:4e:36:9a:2d:d2:48:60:67:71:18:40:9a:
         7f:a5:84:82:bd:b1:c3:cf:a0:88:35:7f:0d:f7:d6:38:25:16:
         83:78:f4:45:78:59:d7:49:b9:ce:46:24:f2:70:7a:41:1c:ba:
         cf:c4:59:7f:d0:50:3b:34:8a:53:8a:e7:e9:bb:07:5b:40:d3:
         a7:b6:03:f0:0d:96:0b:d9:4a:58:5f:87:a4:3e:e3:f2:8b:4f:
         6b:24:34:53:74:d1:fa:a7:4a:b1:0a:b0:ac:58:80:11:e0:9e:
         4d:9c:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 23:48:17 2025 by rpki-client