Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/84415864-d94f-3a70-bd0f-ed91c30c6b0a.roa
File:                     84415864-d94f-3a70-bd0f-ed91c30c6b0a.roa (raw, json)
Hash identifier:          k9pglmohkodFVzlKh9Kg5bLabRWAdLwcs9OpLJuYouM=
Subject key identifier:   8B:5B:16:29:E7:F7:4D:DF:9C:5D:89:20:9A:0E:B9:6D:FD:92:D5:91
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AAB266A2C5F1CCB58F1269200
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/84415864-d94f-3a70-bd0f-ed91c30c6b0a.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     3356
IP address blocks:        206.164.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:6a:2c:5f:1c:cb:58:f1:26:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=34e7bdf6-38a0-4ab7-90bf-06856875121f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:6a:27:b0:37:40:11:f0:7c:b6:61:7c:09:
                    53:3c:c1:fd:dc:bf:72:6d:2a:4a:b0:42:14:05:b0:
                    ba:63:3f:81:92:ba:3c:ca:19:32:dc:e7:76:8e:eb:
                    9d:63:07:57:e1:50:a0:06:fe:35:6f:c1:c3:2f:cc:
                    53:fc:33:18:96:11:e9:8a:99:f8:39:29:03:59:b5:
                    b8:85:6c:0a:97:7d:7e:ad:10:de:88:34:b4:af:05:
                    93:39:e8:5f:9f:9a:a4:d1:ee:00:ad:98:53:81:b7:
                    86:b7:91:b6:f5:fa:41:cc:71:2b:e3:c3:48:38:e8:
                    db:c6:84:38:0e:69:45:97:e8:7c:b8:40:3f:79:05:
                    45:4b:00:47:95:4e:e9:85:8e:6c:4a:2d:21:72:7a:
                    ed:fe:58:11:c3:a3:76:39:84:22:83:68:5e:2c:17:
                    f6:a7:72:cc:9a:50:16:63:2d:82:63:04:17:67:df:
                    b5:74:4e:e8:ab:36:11:97:55:bc:73:39:9a:22:7d:
                    d1:c3:6d:b6:3e:74:1a:8b:84:23:41:c2:9e:e1:cd:
                    7d:89:ec:f4:0f:c6:50:27:aa:fa:2c:bf:da:28:e9:
                    50:5c:48:c7:5f:77:a0:38:63:1c:f0:25:60:2f:b4:
                    69:57:1c:82:fc:29:fb:1c:cd:ce:5d:1d:f8:b4:47:
                    40:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5B:16:29:E7:F7:4D:DF:9C:5D:89:20:9A:0E:B9:6D:FD:92:D5:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/84415864-d94f-3a70-bd0f-ed91c30c6b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:2a:8b:23:d3:a6:64:a1:e4:57:f6:17:72:49:18:bf:7c:5e:
         44:af:14:11:67:71:1c:9f:8c:c8:9d:bc:a7:2e:0b:48:9d:24:
         04:48:fd:30:dd:e5:f0:3e:61:ad:be:4b:9d:10:74:c6:a7:15:
         0b:8e:27:4a:b0:ef:b3:37:df:f3:ac:fb:db:e3:2d:50:4e:da:
         b2:f1:e0:1d:59:4f:fc:f3:79:fe:db:ff:79:df:48:0a:e8:b0:
         22:06:e5:de:16:81:6c:f3:19:4c:d5:d2:dc:83:e5:52:5c:b5:
         d7:e0:16:d5:0c:ab:ee:34:e5:d6:84:fc:ba:06:d4:99:e5:fc:
         7f:05:4a:a9:79:5b:1a:7c:05:0f:4c:da:2c:54:3d:87:89:9b:
         7a:0f:5e:f1:67:78:80:07:ca:8d:c1:97:9d:23:3b:5e:5f:0a:
         58:1a:f7:11:c4:0d:95:8c:0d:f2:1d:c8:fa:6d:74:0b:a3:1c:
         3e:18:dc:4d:36:0f:ad:c7:21:8b:71:ad:3c:18:c1:85:95:fe:
         a0:79:24:f0:68:6e:86:e5:41:55:45:eb:58:dd:e6:80:a3:15:
         03:60:7e:85:29:45:b1:23:58:55:41:b9:43:be:1d:05:67:0d:
         32:19:60:54:85:7a:bc:17:b5:f5:21:d8:3c:18:c9:06:76:37:
         7f:ca:1a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 23:39:33 2025 by rpki-client