Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c20c48b1-b76d-39b9-b3da-65577051581a.roa
File:                     c20c48b1-b76d-39b9-b3da-65577051581a.roa (raw, json)
Hash identifier:          ccoFArj7ksrDN6LTVHGvCccvF7anwPF0ieRIDJpw3SU=
Subject key identifier:   18:59:AA:4E:7F:48:4C:0E:FA:09:B1:32:85:49:35:69:7A:9B:78:7E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A78E5F8BF769608FDAC347F80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c20c48b1-b76d-39b9-b3da-65577051581a.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     3356
IP address blocks:        170.30.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e5:f8:bf:76:96:08:fd:ac:34:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=b76494b1-51d3-4992-8aca-de6115919640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:49:2f:02:09:05:06:1f:9b:7d:3c:e2:0f:c9:
                    98:59:25:df:d3:41:cf:58:52:00:73:df:c4:34:f9:
                    4e:f5:68:d4:f3:8e:63:18:20:95:b4:01:45:ff:cd:
                    6a:2d:03:4c:ce:d0:0f:f9:56:4e:cf:55:e5:aa:74:
                    75:36:9f:44:ac:0e:d8:fb:b1:96:12:24:2b:18:12:
                    18:1e:ee:53:9d:e0:6d:eb:12:d3:81:7d:7f:47:e6:
                    11:b9:97:c5:01:5a:29:b0:e4:7d:e2:81:b6:80:4f:
                    26:96:ac:8d:9e:c7:c2:d8:bf:56:da:05:e9:2d:63:
                    e5:ea:d7:64:d4:a9:61:5d:5a:34:c8:ab:15:34:77:
                    ae:48:da:00:2e:42:b1:cc:0b:96:a0:62:e4:e3:d6:
                    45:f7:fc:23:2a:5c:a5:df:4c:f4:6f:ee:e7:e3:e8:
                    9d:4b:11:e0:2f:31:5e:e2:ce:4e:29:38:de:4b:56:
                    b0:3d:bb:87:ba:2a:f6:c8:e5:c4:94:3d:bc:bf:3f:
                    91:bd:d0:b2:d5:b5:de:6e:9b:32:a1:83:e7:29:41:
                    b3:b4:2e:07:30:bc:3b:ee:ed:8a:d4:7e:f4:09:97:
                    f8:42:f6:86:7a:3c:1d:9d:77:69:73:cc:ea:bb:28:
                    c4:a1:92:8e:5f:57:29:f4:71:79:fe:d2:f3:94:25:
                    b8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:59:AA:4E:7F:48:4C:0E:FA:09:B1:32:85:49:35:69:7A:9B:78:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c20c48b1-b76d-39b9-b3da-65577051581a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e8:98:c6:72:ba:60:0b:e0:bb:bc:b2:98:54:e7:21:a7:a2:
         5c:e9:1f:8f:0f:42:83:a8:76:8d:cd:c2:15:b2:e3:fd:f9:de:
         a2:86:cc:f2:5a:f3:41:ab:08:26:63:7c:f7:70:40:b4:07:11:
         e4:0c:c6:be:f3:ed:c4:c0:74:78:57:99:77:d3:5e:75:5a:38:
         af:f8:54:3d:b0:31:4c:48:5a:cd:8f:e6:00:d4:e8:32:a0:25:
         f0:19:0e:d7:24:f3:41:e1:c3:d7:ee:56:8c:64:c7:bf:64:b0:
         d3:db:74:34:a2:11:29:3f:53:3b:40:35:e4:98:e8:a9:55:91:
         3a:cc:95:a3:0c:aa:89:f1:46:58:0b:90:27:18:72:37:ce:c8:
         d3:db:1b:bb:7a:a8:62:53:ec:80:4e:d0:a4:09:19:60:2d:b1:
         06:d7:ea:0d:68:69:ea:8f:ef:47:85:4a:75:97:cf:c8:b7:24:
         21:60:24:ee:26:3f:e5:b9:4c:30:97:ba:ff:c2:fd:45:66:bf:
         e9:1e:a9:ec:7c:e0:eb:cc:6d:4b:bb:fe:ff:e1:67:9c:4a:bd:
         86:c1:27:79:7c:25:fa:97:29:54:75:19:f1:f6:b4:97:14:5b:
         cb:0d:ad:d4:c6:8e:c8:7d:31:90:93:76:40:45:84:50:e5:49:
         43:16:14:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 23:39:30 2025 by rpki-client