Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ae8a74bb-7d00-3825-9efc-6e1aa69e4b23.roa
File:                     ae8a74bb-7d00-3825-9efc-6e1aa69e4b23.roa (raw, json)
Hash identifier:          pq1y2TnyW5rzfS70A67OK/8VNfbYnYIQ0GbYuv+b1NU=
Subject key identifier:   70:A7:BF:8A:C7:13:E8:54:BD:C2:6D:69:50:AD:E5:3B:88:AB:FE:0A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B22B4FABAF5DFA9B43C08
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ae8a74bb-7d00-3825-9efc-6e1aa69e4b23.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     3356
IP address blocks:        192.57.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:22:b4:fa:ba:f5:df:a9:b4:3c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=a7c9f74d-2a78-47e8-acfd-15657717de6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0e:d6:f3:68:7b:eb:64:06:95:f7:b2:3c:95:
                    95:af:71:b4:b5:b6:45:c2:37:cb:e5:7e:ab:d8:a3:
                    5b:a7:94:11:d1:9e:19:f6:37:79:58:f8:c2:06:0f:
                    cf:95:d4:98:84:61:f5:92:2c:21:fa:7b:f9:ad:c7:
                    50:61:1d:03:17:0c:66:f5:d6:43:07:c5:4e:84:2e:
                    f1:cb:6e:d9:60:5a:4c:b1:08:43:e3:d5:34:3e:c8:
                    87:86:46:5c:54:71:a9:b3:b9:28:f5:89:8c:9b:03:
                    ec:12:aa:62:61:1c:74:7d:52:74:97:0f:c9:34:78:
                    23:d2:20:37:12:6c:50:2d:37:4f:2c:2d:ad:c5:ad:
                    fd:75:12:c0:cc:fe:42:57:fa:73:f6:64:34:61:db:
                    e3:33:cd:61:f3:9f:07:da:2d:f5:bc:82:a8:03:77:
                    aa:82:e6:8d:91:34:ac:a7:74:04:9d:52:c1:e0:02:
                    fe:dc:8c:69:7e:b5:70:4f:7a:ea:eb:c6:c3:02:b7:
                    1b:5c:3c:d1:8c:d8:52:a4:1b:ff:ca:7e:ac:dc:f9:
                    24:d7:8c:38:b7:bb:39:11:36:d2:ad:bc:33:99:10:
                    47:a1:d0:2a:53:e6:9d:66:de:b7:91:ab:d7:cd:0e:
                    a6:42:d3:44:4e:1b:da:bc:c1:5b:a4:09:f0:c0:ff:
                    a4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A7:BF:8A:C7:13:E8:54:BD:C2:6D:69:50:AD:E5:3B:88:AB:FE:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ae8a74bb-7d00-3825-9efc-6e1aa69e4b23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:bf:d8:96:c2:ff:9a:63:71:18:48:30:b9:4d:8a:8f:3f:60:
         5a:5b:da:7c:a1:1f:00:a9:bd:c0:c1:7a:5c:23:3a:e6:ae:a7:
         57:eb:2d:b8:95:2c:df:cc:5e:3c:e9:b3:e1:e9:f7:93:78:f2:
         05:17:43:88:63:39:b8:36:80:b8:15:7e:87:4a:a3:63:a6:38:
         c6:e2:a4:61:f5:de:8a:66:f5:b0:47:37:88:d3:fa:28:32:f8:
         f3:bb:26:94:42:30:fc:99:34:99:2a:a8:1c:a1:51:63:48:f9:
         8d:ea:73:3c:16:a9:ad:eb:ae:11:f8:c6:bf:3d:02:a2:13:95:
         8d:78:cf:5b:fb:e3:5b:70:74:63:7e:14:71:fa:28:88:0d:a0:
         0f:34:69:10:b0:e1:b7:d8:53:0e:2b:d6:1c:44:a8:62:aa:2b:
         98:10:75:33:fc:8d:04:77:4d:22:a7:2d:f2:d2:90:7c:b9:36:
         46:6d:72:d3:3c:9f:e3:0e:9c:da:ea:f5:5f:ae:37:ca:b3:87:
         e0:ad:f9:b4:29:f5:8d:37:93:68:27:5d:30:1a:39:f1:9d:00:
         70:5b:d4:1e:86:b6:21:26:60:d1:40:9d:bc:0f:dc:57:f9:99:
         41:1a:85:c6:63:ce:03:a5:8c:50:5c:b5:57:f7:a9:b8:42:21:
         66:8b:71:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 23:45:55 2025 by rpki-client