Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7cf9f36-fb6d-3179-8e2b-949bddd3edc2.roa
File:                     a7cf9f36-fb6d-3179-8e2b-949bddd3edc2.roa (raw, json)
Hash identifier:          UJexFJgjolekjmvzQeLEV2HNr81VBGH2dMZlRT3rrHg=
Subject key identifier:   61:86:B7:ED:14:4C:37:CB:76:EE:77:D5:23:B7:7B:0B:5E:BD:28:A6
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB58DDB36411BB3EFD6100
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7cf9f36-fb6d-3179-8e2b-949bddd3edc2.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     202
IP address blocks:        192.85.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:58:dd:b3:64:11:bb:3e:fd:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=f51151ac-992b-4867-9def-2675b2977ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8b:d1:da:41:98:73:b4:61:3b:02:16:d0:ef:
                    00:53:b9:44:31:6b:f2:97:92:a3:9c:70:ed:74:f2:
                    55:24:08:e5:37:25:1f:f0:07:ae:0e:cb:e0:a0:33:
                    12:aa:1b:a0:12:90:bf:4c:b9:f2:f4:2c:9f:d0:fb:
                    39:fc:95:2e:84:1f:06:1f:c8:8f:b5:e8:3d:af:39:
                    6e:9e:67:44:ef:42:5e:7e:d4:f0:cf:91:bd:c2:1d:
                    bd:d3:bf:1b:a0:95:95:df:b6:28:45:cb:36:f7:be:
                    e0:1c:97:28:52:ce:91:47:f5:52:77:8a:00:92:4d:
                    85:dc:c7:1e:78:d1:4c:e7:2d:cf:08:51:19:d1:4f:
                    04:c1:68:c4:9c:a9:b5:a6:27:97:06:62:f4:5f:28:
                    a5:a2:96:86:93:bf:22:ff:09:f9:86:30:9d:1f:82:
                    eb:47:c1:ae:b7:41:85:7d:b7:f5:a8:e5:52:cc:5b:
                    1f:6d:a0:0e:93:d6:4b:8f:9d:6e:a6:46:db:6e:ae:
                    55:d2:f8:b6:3c:06:f1:89:c1:2d:12:84:e7:41:cd:
                    b1:43:ca:9a:ca:c7:c8:91:1e:98:84:57:70:52:a9:
                    d9:fe:64:58:77:f4:cc:bf:8d:fe:0a:9d:34:c6:f0:
                    e9:a1:10:db:99:ab:51:83:6b:56:68:04:33:82:82:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:86:B7:ED:14:4C:37:CB:76:EE:77:D5:23:B7:7B:0B:5E:BD:28:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7cf9f36-fb6d-3179-8e2b-949bddd3edc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:d7:df:47:0f:a1:e1:af:cc:7c:3b:3f:b3:f0:07:52:d3:b0:
         3f:94:af:80:ad:77:c0:5f:85:8e:75:18:bf:d7:12:f3:9e:c8:
         5d:ef:d0:28:ca:95:b9:fe:60:be:3b:6c:16:ce:43:a3:e7:e5:
         7e:b8:25:0e:02:13:2a:6a:f1:7c:de:97:70:bd:69:f5:59:82:
         84:7a:38:79:de:76:32:c7:ac:2e:fd:0c:9b:5f:50:f0:0d:e8:
         22:b6:ee:62:ab:37:69:54:cf:38:d5:21:13:b4:59:11:c9:de:
         e2:24:26:59:4b:ac:20:b6:25:5f:f8:92:c8:1b:7e:2e:78:83:
         9f:ab:0d:af:f2:67:d5:54:cd:36:36:66:bf:43:60:de:a5:2e:
         40:7f:84:9c:02:10:6a:c6:52:cb:ae:5e:0e:4a:b7:54:05:61:
         e5:cb:89:04:be:b5:19:70:77:8d:d8:49:ae:2c:ce:6f:5a:a6:
         16:30:fe:45:d4:ef:42:0f:8b:1e:2f:8e:50:a0:a6:52:f4:ce:
         5f:8b:64:23:e9:6a:56:53:1f:e2:08:02:d1:0b:78:26:72:a9:
         57:21:d2:2c:5b:e5:48:80:6a:b5:b6:ac:b0:b0:09:c8:c2:5a:
         ea:4a:93:3b:7e:a4:c5:75:41:60:39:66:53:3e:68:93:b4:d1:
         8d:8a:ce:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:16:54 2025 by rpki-client