Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5952f505-b2de-31ac-a65b-e64820ef67c9.roa
File:                     5952f505-b2de-31ac-a65b-e64820ef67c9.roa (raw, json)
Hash identifier:          e0WvkHsP4raWkiWbxzHDINq5rT039BHPc964IclNZs0=
Subject key identifier:   55:61:EE:6A:65:DB:62:89:50:A6:9F:7C:C5:86:B2:BE:77:2F:ED:31
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848BE861C356DD0430F0B4FCD60
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5952f505-b2de-31ac-a65b-e64820ef67c9.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     2159
IP address blocks:        168.87.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:1c:35:6d:d0:43:0f:0b:4f:cd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=21c49adc-7be6-4f75-b3bd-c82474bb65b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1e:7d:14:a9:cd:d6:18:b3:72:9c:4b:1f:30:
                    e5:6c:b6:20:e7:a4:16:a2:91:98:6a:02:2b:5e:27:
                    ce:b9:b2:81:41:21:2f:00:77:b6:9a:6e:09:84:fd:
                    ed:a1:c4:b9:68:fa:c4:f2:9b:5a:5b:f2:98:73:54:
                    7d:a4:f6:99:67:39:fd:f6:8f:50:85:05:db:2f:d5:
                    b7:6c:fe:2a:a6:31:93:73:0d:82:25:5b:ef:09:fd:
                    aa:22:72:e0:07:c4:a5:47:d5:c2:f2:3e:21:8e:d7:
                    5e:29:25:b0:38:89:4b:91:07:45:3c:ee:f7:9f:c5:
                    d5:bb:eb:a0:1e:4c:4e:0f:d6:e6:65:d2:3d:35:00:
                    ba:53:ea:ba:22:db:e1:16:b8:65:12:8d:a6:5b:d6:
                    5f:ab:5e:3b:8e:56:ef:3d:3f:5e:64:8b:0c:61:af:
                    a4:76:37:b6:b1:79:ea:34:08:d0:fb:5d:d3:d2:16:
                    97:06:e1:32:d2:a5:fb:3e:e9:9a:8d:b8:61:ca:88:
                    e4:74:f3:02:de:d1:3a:30:1e:ed:8d:08:2c:b7:4c:
                    14:c9:c8:7f:d2:7b:fd:af:81:3e:c3:ee:e0:0a:00:
                    76:84:db:5a:ab:8d:e8:87:36:06:2a:bc:40:ef:3f:
                    a3:d8:18:70:fa:04:3d:1a:3a:b9:fc:18:ff:e7:93:
                    a2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:61:EE:6A:65:DB:62:89:50:A6:9F:7C:C5:86:B2:BE:77:2F:ED:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5952f505-b2de-31ac-a65b-e64820ef67c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:27:d9:94:b1:dd:5d:3a:19:1a:38:cf:b3:ca:7c:ed:5f:36:
         15:7a:18:11:e6:5a:97:21:6d:0e:d0:d3:10:e3:e4:90:d1:b4:
         bd:39:b4:5d:e2:68:68:7d:63:1e:86:d7:d5:90:06:c8:b1:9f:
         69:35:0e:db:71:f3:88:42:2d:88:4a:4a:90:b7:a7:36:be:b9:
         0a:c1:e0:9d:82:d4:81:79:a0:ab:7f:a8:26:a5:dc:9d:79:2b:
         7a:13:4f:07:e8:dd:74:56:d5:03:dc:26:c8:33:24:46:be:52:
         06:82:2e:5b:bc:dd:d9:1f:59:d2:32:45:39:b5:02:15:0f:f4:
         f0:b6:a0:b3:e0:1e:cf:d4:f4:1d:2f:6d:5c:73:c8:75:69:fe:
         51:36:a8:35:fb:b9:5d:d7:40:cb:66:a6:0c:d0:3c:ae:ad:7c:
         e2:ce:11:47:f9:d9:eb:33:a5:c2:c0:8f:34:4b:74:94:c6:f1:
         98:34:1b:db:d7:45:87:1d:85:0d:f0:75:dd:4e:8e:c2:df:d5:
         3b:64:55:ed:d3:65:8f:34:58:c7:39:e8:d9:2e:24:7c:0d:86:
         30:99:5f:6a:44:f8:99:bb:c7:eb:76:32:19:c3:c9:b7:0c:6e:
         11:71:fa:27:ae:7e:f7:58:05:7c:9f:94:51:a0:02:3d:8c:f7:
         f7:c0:e2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:22:30 2025 by rpki-client