Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/73ed8c92-99e2-3570-aeb9-c8fb6944f891.roa
File:                     73ed8c92-99e2-3570-aeb9-c8fb6944f891.roa (raw, json)
Hash identifier:          ir5ntxXKnG2QJWGD3trHP4cIHaLIQ6TBTi498hjErKM=
Subject key identifier:   3B:E2:68:36:27:0D:AE:2F:A5:F4:14:62:68:C8:0D:17:89:4C:8C:73
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848BE861C8A94E429832EA49500
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/73ed8c92-99e2-3570-aeb9-c8fb6944f891.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     203
IP address blocks:        168.87.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:1c:8a:94:e4:29:83:2e:a4:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=920c3a94-8cea-47d8-b6b5-20bcb800bd90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4e:8d:bb:10:fb:58:35:b9:48:41:d7:74:ec:
                    00:67:45:fc:da:98:51:3f:c7:47:58:31:bd:89:c4:
                    64:4d:77:db:c4:45:54:9d:2f:63:3b:c3:3c:fb:c6:
                    52:83:0e:76:89:8a:5d:57:8c:02:57:c0:8e:a4:70:
                    0c:a6:af:9b:9d:90:2a:38:88:8c:1d:ba:87:f7:dd:
                    87:98:1e:c5:2c:9a:d0:2a:b1:8f:8c:03:ad:30:4c:
                    cb:ea:f9:b5:f4:90:3e:ac:7f:04:86:56:7b:4c:ab:
                    cc:39:99:93:8e:4e:56:bf:07:65:16:1d:b1:2f:1e:
                    e4:ec:ff:13:1c:8b:22:55:0a:9a:30:d3:2f:b2:3f:
                    b3:c8:64:22:77:14:da:dc:cd:07:d2:46:33:1d:be:
                    b4:d5:05:ed:d4:ae:c1:d2:a2:5a:8f:c8:21:44:3b:
                    1e:4a:4c:4d:bb:2b:ad:7a:bd:77:75:a4:ec:ea:03:
                    b5:d8:15:1a:e1:06:b9:22:7f:e3:5f:3b:4c:e3:7d:
                    07:e7:bf:b2:9f:23:dd:a4:7c:5d:1a:2d:f9:81:ce:
                    e9:81:54:32:24:79:e0:46:dc:e4:b8:75:0b:86:a2:
                    84:dd:58:5f:b7:a9:60:00:af:b6:ea:e5:bc:4c:cc:
                    d4:2a:32:e3:60:33:6b:fc:5f:6e:a3:a9:6e:47:5e:
                    d0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E2:68:36:27:0D:AE:2F:A5:F4:14:62:68:C8:0D:17:89:4C:8C:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/73ed8c92-99e2-3570-aeb9-c8fb6944f891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:86:16:48:92:a7:bd:ba:e4:68:23:f4:d7:29:8f:d4:1d:17:
         b0:54:87:ea:77:e6:a8:93:e2:41:e2:aa:2f:fc:8c:81:7a:fa:
         95:ae:fe:d2:b8:52:1d:9b:d8:02:fa:00:b6:cd:42:ae:e2:54:
         67:6c:06:28:ca:62:e3:4e:b9:b7:28:1c:24:d3:0b:48:e5:d1:
         13:a7:31:82:5a:22:69:f2:dc:eb:9f:ee:1b:8c:d9:01:a5:83:
         86:30:67:02:a4:9d:29:05:62:e6:30:a7:78:96:e4:46:ac:34:
         62:bf:de:20:85:9a:26:08:56:b8:b2:6c:a9:74:9c:de:13:a6:
         2f:66:11:3a:12:dd:84:df:74:5f:c1:ab:81:07:09:e7:79:24:
         78:75:49:52:1e:e0:a7:09:da:3f:7c:e1:e1:c7:76:a2:f8:9b:
         a6:0d:d9:54:f4:4c:62:6a:4c:bc:bd:9f:60:da:6f:65:64:bf:
         64:14:db:ad:bb:29:14:37:a9:a4:66:c4:2e:48:37:a3:82:c4:
         18:68:9e:55:9f:f2:53:ca:f9:2c:08:d9:84:95:c2:ae:93:66:
         f1:cb:93:f9:33:da:50:d9:71:b8:17:18:5c:d2:b1:43:f1:5e:
         b7:56:3f:3e:2e:b8:f8:2f:21:e7:ac:91:e3:d6:5f:70:18:78:
         79:0a:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:49 2025 by rpki-client