Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c878950d-c225-3a0d-ba25-6b682a17c8e8.roa
File:                     c878950d-c225-3a0d-ba25-6b682a17c8e8.roa (raw, json)
Hash identifier:          aenVBF6Qgy9zjoeMVSEwe/CHZ2YGgEhtbOKbAwWqweg=
Subject key identifier:   08:7E:83:A8:73:BF:24:2C:3B:56:F9:DB:8C:E2:09:6B:9F:E4:4D:92
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B227B02FDC54C4EFA4C00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c878950d-c225-3a0d-ba25-6b682a17c8e8.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     3356
IP address blocks:        192.57.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:22:7b:02:fd:c5:4c:4e:fa:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=8cd2dde7-1213-4105-8cb7-6ecce7016ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0b:05:09:cc:d9:b7:72:ee:17:30:ff:70:5c:
                    ac:d8:aa:2d:07:da:e7:37:c0:e9:4a:7d:28:bc:ff:
                    08:d2:01:bc:f8:96:31:8a:d7:d5:9c:23:fa:3c:37:
                    11:26:88:72:e7:ce:7f:9a:00:1a:a3:ab:fb:4f:01:
                    74:28:fe:99:4e:4b:a7:92:73:92:fb:0d:6a:51:8b:
                    5f:2e:fe:4d:97:e7:9d:75:14:3a:4e:7b:b1:ac:f3:
                    44:61:bb:f6:5b:73:59:6c:f6:17:27:1e:b1:4c:a3:
                    01:3b:64:24:34:7e:e5:d9:5c:4a:3b:f2:05:c0:26:
                    ac:b8:ac:05:21:a6:e6:6c:3c:d6:6a:48:b9:0e:64:
                    05:3a:53:ae:8c:af:66:30:51:04:b7:7b:43:d9:c4:
                    1d:ca:f7:07:2f:4d:65:86:1e:3d:42:e2:db:22:df:
                    80:06:c2:a4:b4:61:bf:74:f8:d9:97:90:c9:e0:54:
                    3b:2d:c6:cd:c1:13:8c:f9:0a:e1:88:90:12:1d:e9:
                    58:8a:ca:e0:5f:be:00:bb:40:4d:89:39:67:82:13:
                    21:b0:76:bc:d2:28:b4:e0:25:74:21:a4:1d:1b:51:
                    1e:10:4f:26:68:f9:c9:7a:56:85:14:7b:2f:bc:33:
                    aa:e5:f8:90:ae:ff:9d:53:2d:de:6c:23:23:70:13:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7E:83:A8:73:BF:24:2C:3B:56:F9:DB:8C:E2:09:6B:9F:E4:4D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c878950d-c225-3a0d-ba25-6b682a17c8e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:30:49:35:ad:c0:07:fe:6d:09:4a:c9:1c:64:99:2b:50:7c:
         2b:df:60:5d:a2:e2:2e:c4:e8:4b:6f:85:af:19:e4:75:57:dc:
         0d:e2:7d:5a:92:a0:64:c6:06:a9:cf:12:de:61:e9:d4:89:94:
         61:26:ea:2f:46:fc:59:10:11:d5:3a:11:66:a9:ee:24:4d:a1:
         60:af:93:8d:96:b3:c6:63:5d:f3:fa:f8:e7:44:92:ee:e6:26:
         d9:ea:17:f5:af:4b:97:dd:2a:f7:28:77:9c:b4:0b:8d:a4:e5:
         e9:2e:ee:24:4d:c7:13:0f:13:bc:fd:7c:b4:dd:ad:e9:be:17:
         86:b2:d5:4b:1c:5d:68:39:32:91:35:14:00:1a:56:5f:ad:83:
         c9:1a:5b:5a:94:68:c6:f2:1b:32:fc:73:91:8d:53:c7:e9:89:
         bd:43:dc:57:30:22:9e:6c:f2:e6:db:fe:e7:00:c0:16:63:39:
         27:e2:ef:41:0d:fc:f5:20:15:4a:1e:03:74:57:51:d3:97:32:
         01:45:e1:26:94:0e:79:bd:37:44:0b:a8:83:c4:ce:55:58:67:
         24:af:fc:62:4f:fd:7e:d3:dc:69:b9:54:a7:31:17:74:16:f8:
         1f:71:c8:8f:47:2c:72:dc:7b:c3:b3:71:81:8d:00:16:54:72:
         81:01:5f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 23:45:55 2025 by rpki-client