Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a80aaa9e-0703-342f-b8c4-55c127b26fac.roa
File:                     a80aaa9e-0703-342f-b8c4-55c127b26fac.roa (raw, json)
Hash identifier:          avjz/flHHkACVnAk4KSrhU+ZWl4mRCP+Jpz7LaVIh1k=
Subject key identifier:   73:B1:62:86:C0:47:73:7E:99:55:47:49:8B:19:B8:33:1C:EB:0F:39
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A7A4B445325BE5162F53E39C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a80aaa9e-0703-342f-b8c4-55c127b26fac.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     3356
IP address blocks:        192.57.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:44:53:25:be:51:62:f5:3e:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=36e09c0b-6453-43e8-8f97-a49157b21bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:70:99:a2:a9:34:63:80:24:eb:46:47:a7:f4:
                    27:a9:59:5c:e4:41:a4:4a:dd:49:50:65:cb:fe:19:
                    c8:69:e2:d0:50:8d:c9:d1:21:13:10:9c:89:1b:f4:
                    db:2d:3c:1d:a2:26:22:16:3b:c0:80:73:5f:e8:bf:
                    dd:5c:d6:87:a6:96:2c:c0:30:f6:7e:f1:63:76:1b:
                    87:c9:60:a2:e8:c1:fe:f0:4f:36:41:99:e3:21:15:
                    9b:6e:33:c9:20:63:c6:67:a9:d1:ed:3c:8b:44:73:
                    44:b2:88:62:d8:1b:fc:95:bb:63:33:32:c7:59:b5:
                    d3:34:98:3d:30:b3:e5:a0:29:aa:ad:53:e6:2b:e3:
                    87:88:09:80:b8:c0:c0:0d:ec:b4:b4:6e:9f:87:79:
                    cd:1c:5c:0a:9f:aa:18:60:d7:fc:3e:e8:6d:c7:47:
                    f5:22:10:e8:16:8d:38:ec:35:e5:8d:de:bc:ac:d4:
                    45:60:35:09:c0:0d:ba:38:bf:a9:85:4b:7b:5e:3b:
                    f7:13:52:08:42:02:70:40:39:b0:a2:cd:4b:09:8d:
                    a7:45:a1:82:3f:fc:76:c8:6d:f3:b3:c8:d7:bb:a7:
                    c3:13:00:2d:a9:35:19:e7:67:04:7e:87:7b:4e:d3:
                    73:5f:3e:4b:ad:5f:9d:b5:01:73:ca:8b:64:78:55:
                    bd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B1:62:86:C0:47:73:7E:99:55:47:49:8B:19:B8:33:1C:EB:0F:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a80aaa9e-0703-342f-b8c4-55c127b26fac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:21:0a:89:29:3e:ae:43:84:9e:5e:b5:b7:f0:65:89:95:0f:
         1d:eb:e4:5f:a5:a9:12:e6:ea:14:43:e5:66:c1:4b:01:b0:5b:
         73:5c:45:b7:5e:01:3e:70:b9:3e:5f:98:f0:6b:61:9e:5e:2d:
         80:af:93:ce:a0:0d:16:91:37:ca:26:f8:3e:6c:64:ff:39:7b:
         5f:cc:27:c7:37:45:1c:a7:0c:c9:94:47:f2:d3:64:d4:db:e2:
         a7:25:77:53:99:0f:50:00:8a:01:c9:a7:36:d8:1e:2c:f5:f2:
         e2:3d:40:e6:b0:a3:e0:ed:85:d8:9e:ac:fd:d4:3e:7e:7c:49:
         8d:f1:00:3d:5c:ec:2c:1b:e9:3b:f9:69:b2:81:64:13:02:2a:
         25:b5:7c:ff:e7:8b:e2:7e:a6:34:d3:0e:a3:df:15:35:fd:e5:
         4a:4e:85:d3:ce:e3:8c:c7:ba:40:5f:f3:d2:f2:ed:5a:1b:eb:
         73:ab:b6:0a:34:8b:63:de:ec:21:7a:5e:46:a6:55:2d:4c:60:
         78:16:88:9c:03:b0:09:3b:4c:69:ff:69:e1:64:9e:a3:92:7e:
         e9:ca:93:64:98:3b:e8:68:7d:24:71:b9:bc:4f:a3:6f:2b:75:
         64:55:20:e7:b0:91:d9:1b:32:a8:54:2c:ec:9e:5b:b9:b6:eb:
         b3:16:03:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 23:42:39 2025 by rpki-client