Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd80d460-d29c-3c32-b652-8e0b9d9100d0.roa
File:                     bd80d460-d29c-3c32-b652-8e0b9d9100d0.roa (raw, json)
Hash identifier:          /X/h4mQZrQyuxPApoua5YJVn8znbk45Q2JuKUX/4zmI=
Subject key identifier:   4D:EE:50:2D:11:62:0D:25:4D:B0:E9:0E:9A:D5:DE:24:6A:CC:8D:1E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B26B59046447A9E2BDA00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd80d460-d29c-3c32-b652-8e0b9d9100d0.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     3356
IP address blocks:        192.85.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:26:b5:90:46:44:7a:9e:2b:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=57d93024-9b48-4dcd-aded-2f62116e636d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bb:52:f7:9c:4a:fe:e5:f1:3f:19:76:e2:71:
                    56:6e:6a:ac:f1:1a:a7:62:5a:4b:7d:33:31:68:65:
                    ee:87:a1:81:78:3d:fe:f6:85:a2:34:38:bf:57:cb:
                    4d:af:9f:f3:1e:01:29:9f:f8:eb:ea:a4:0d:a0:6f:
                    3e:3b:f4:dd:ac:ea:f6:21:91:72:9a:c5:61:60:31:
                    54:52:a8:b8:c7:6d:f2:76:4e:b2:50:de:3b:17:6d:
                    36:92:2d:97:fd:d0:af:64:c3:f0:93:b6:f5:8d:cb:
                    72:da:47:13:15:16:42:74:68:2b:57:be:75:da:26:
                    8b:12:ae:02:07:60:56:d1:67:9b:77:f9:f7:1e:7a:
                    42:58:e0:a5:27:76:ce:82:dd:59:12:8d:93:c1:e9:
                    78:41:da:75:55:af:ab:ea:43:ae:36:57:98:d8:fb:
                    17:29:cc:08:92:bc:3e:dc:ad:f5:cf:4b:ff:43:02:
                    95:e9:3d:1f:ae:c6:d5:46:79:0d:c6:c9:d1:6c:59:
                    41:b2:f5:8b:05:22:fb:75:75:55:1e:da:6c:d6:a2:
                    20:70:62:cc:fd:32:77:57:9d:c5:09:00:fe:4e:2c:
                    7f:dd:c9:3e:c2:d0:eb:75:ed:ef:19:a0:ba:ed:b8:
                    4c:c7:51:96:17:b4:26:78:29:19:d6:c1:af:29:d9:
                    08:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EE:50:2D:11:62:0D:25:4D:B0:E9:0E:9A:D5:DE:24:6A:CC:8D:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd80d460-d29c-3c32-b652-8e0b9d9100d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b9:e8:47:14:8d:ee:27:a5:6a:f9:07:30:c0:68:cf:b7:e6:
         9b:b8:93:4e:7c:5e:66:83:bc:a2:e2:44:64:ed:ea:69:1c:9d:
         bb:a5:64:82:4b:3d:00:b6:d8:02:05:af:0f:49:d1:75:b9:5d:
         e4:73:7f:5a:cb:1b:be:79:9e:48:05:e5:57:13:4d:e6:0f:c0:
         e2:20:e4:30:1d:4e:f7:5e:8c:6a:7b:11:5a:51:6d:d3:b1:b1:
         b8:36:fc:a7:51:95:b7:b4:10:ed:aa:6b:1f:f1:bf:bb:22:f2:
         fa:c9:bb:d0:f7:99:3b:4a:84:08:7e:c0:b7:e3:fe:9b:8e:c3:
         dc:28:ab:1d:e3:fc:56:4a:e9:75:29:9a:6e:05:0f:62:f1:94:
         ef:09:14:82:d4:80:e2:ab:b3:07:4b:c5:d3:0b:07:29:0d:bb:
         4a:a6:c8:9a:bd:e7:ab:b0:13:95:fc:f7:2c:fe:ef:9c:b7:25:
         05:f5:d5:4f:67:07:e7:3a:f7:f1:6d:27:5b:8f:16:da:bd:80:
         1b:76:23:9a:aa:c8:e4:06:93:1a:c0:6d:97:58:64:c9:80:d0:
         be:9d:dd:59:c7:6d:7d:51:32:21:42:4a:f9:a5:0f:ed:50:20:
         66:69:c4:82:b1:19:96:21:b9:c8:22:37:d3:38:79:2b:7d:ff:
         fa:a7:08:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 23:42:20 2025 by rpki-client