Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c0098bce-cd3c-3f38-8c58-aacbb44cbd97.roa
File:                     c0098bce-cd3c-3f38-8c58-aacbb44cbd97.roa (raw, json)
Hash identifier:          a1vXsUX0TfJgGrtcoz2+AzD1uTXyGophvvjQX/0cmm4=
Subject key identifier:   34:A4:D1:8D:D6:BD:BE:DF:8C:28:7C:B3:7D:84:34:A0:A1:24:3B:4D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B2612EF6AB0DC690CA480
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c0098bce-cd3c-3f38-8c58-aacbb44cbd97.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     203
IP address blocks:        192.85.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:26:12:ef:6a:b0:dc:69:0c:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=98748329-9c4d-49dc-b51a-19a6f8453a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:78:bc:95:6c:c3:7d:8b:7b:a1:18:cf:7c:d1:
                    16:70:d0:e4:b6:ff:87:1e:21:a5:a4:3d:86:b2:63:
                    be:bc:c3:cb:a8:5c:e5:fe:07:21:e7:d7:cf:46:8e:
                    d1:cf:80:be:ce:65:bc:2e:f7:32:95:2f:ec:86:d7:
                    1b:a8:7b:f6:91:75:0c:9e:43:61:b2:9f:6a:ab:19:
                    a7:78:05:80:29:91:f6:43:4c:df:28:43:6e:02:9d:
                    02:39:2b:50:16:ce:18:a8:a0:e0:92:5c:f9:0b:99:
                    3d:71:46:16:28:f6:36:3f:d1:f7:59:cc:93:76:00:
                    70:fb:60:46:29:62:90:82:15:7e:75:06:b2:49:5a:
                    3c:b5:58:bc:5b:d8:2d:33:19:07:73:eb:ca:e9:a9:
                    82:0f:6d:1a:84:08:63:83:eb:d5:ac:89:0a:b5:1a:
                    f9:17:9e:9b:e2:f3:7e:d2:6e:99:c2:51:ec:28:43:
                    ba:bc:4b:ce:d2:d4:d5:d5:d2:f6:84:ca:30:18:47:
                    46:c6:90:e1:ea:16:e6:1f:9f:43:46:33:85:87:79:
                    d5:89:10:1c:41:bd:90:63:a9:4b:98:46:e1:fa:35:
                    05:4d:c3:cb:f0:06:6d:99:54:24:0c:ba:19:c3:46:
                    54:6b:84:28:b1:67:ab:dc:7d:81:ac:7e:51:04:a6:
                    99:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A4:D1:8D:D6:BD:BE:DF:8C:28:7C:B3:7D:84:34:A0:A1:24:3B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c0098bce-cd3c-3f38-8c58-aacbb44cbd97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ec:7a:d7:8c:71:56:15:bc:0a:db:c5:38:4d:f9:7b:82:70:
         8f:43:0c:99:ae:e4:29:d3:9d:0f:fc:d3:f7:e6:18:3a:8d:16:
         bb:4c:41:7e:8a:39:af:46:ba:0d:44:8d:74:d0:65:aa:7a:b3:
         a9:53:18:73:d3:8d:a9:0d:6f:64:4b:40:36:5d:e3:46:50:06:
         18:e5:8c:01:0d:5c:e1:87:d2:ec:c8:cd:d1:01:0f:a6:cd:18:
         d5:5d:56:a3:3a:56:9f:a9:9d:39:3a:fa:1b:93:ea:2d:d4:24:
         c8:b0:b6:07:bf:e8:9a:bb:63:32:15:a6:31:c3:37:36:ff:1e:
         dd:0f:94:d2:42:01:1b:d9:0f:19:e7:2c:cd:e4:dc:c2:d1:79:
         0b:cb:7d:d3:b6:85:3b:09:65:6e:c0:89:ef:b8:e3:8c:8f:b3:
         bf:38:5f:05:6a:c4:a4:81:6f:ba:bb:c9:76:d8:2a:69:73:d2:
         ba:b7:ea:92:2f:34:a4:fc:e2:b8:d9:5e:b3:f0:92:04:78:b0:
         83:94:ee:fb:17:e2:30:51:63:b6:c3:ea:79:9f:02:0e:54:c6:
         e6:3b:28:f8:10:a2:fe:ff:09:4a:32:79:39:3d:2a:1e:9a:56:
         60:00:ea:70:d7:01:18:a5:9f:6c:f9:c1:a9:41:4a:54:d7:f1:
         d3:fe:65:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 23:42:21 2025 by rpki-client