Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e193e347-2915-39bd-b0d9-d66b71f020a9.roa
File:                     e193e347-2915-39bd-b0d9-d66b71f020a9.roa (raw, json)
Hash identifier:          HDOvC9gC33Xqsp5YVErKo5Q2nJyKSeHixLj9jRgajNA=
Subject key identifier:   D1:F5:70:94:14:B0:EA:D7:DB:8F:45:47:FC:B6:35:A4:FF:D2:16:B1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B270BC2CF70649B01A5C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e193e347-2915-39bd-b0d9-d66b71f020a9.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     202
IP address blocks:        192.85.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:27:0b:c2:cf:70:64:9b:01:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=afec0b1c-eaa0-4c71-9846-85157d1f6675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:ac:7e:4f:a7:cd:4a:21:6f:f2:c2:6b:a4:
                    9b:5f:10:31:ae:ed:aa:b3:9d:1e:f2:c0:cc:4d:78:
                    7a:34:46:0c:1b:30:64:85:3a:93:a6:be:f9:94:a3:
                    dd:63:36:c9:5d:b0:8b:7e:8c:56:67:f6:d0:30:7e:
                    02:2b:1c:58:80:c9:69:e8:8e:c9:8e:ba:ab:df:e2:
                    42:39:04:92:7d:f9:63:22:82:7c:75:be:ab:4a:d7:
                    86:61:ca:ff:0d:8c:f7:13:33:1c:10:3c:75:39:3e:
                    6a:cc:95:9b:d0:c6:6c:bf:72:ad:36:74:c7:34:22:
                    d6:b0:51:45:81:10:e0:9f:68:36:d2:cc:5d:44:b0:
                    79:aa:32:7d:d8:e1:9f:66:4c:7a:ed:05:20:bf:e4:
                    8a:d0:e4:9c:27:4b:13:01:4b:99:0b:96:28:77:0a:
                    23:24:b3:5c:97:c6:fa:b4:19:ac:01:1a:de:4b:b1:
                    13:c5:bd:5c:3e:4c:dd:c1:00:d3:87:5b:0c:83:cf:
                    f4:69:6a:fc:4c:14:c2:be:e7:7e:f5:d2:42:d3:92:
                    c9:c0:2f:51:fb:6e:33:65:e3:6e:8d:52:ce:fb:7d:
                    21:b3:7c:c1:19:90:6e:af:8e:59:b3:49:90:d5:fa:
                    8d:c2:14:31:36:7e:25:dc:f6:1b:b6:e2:d5:f4:d3:
                    fe:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F5:70:94:14:B0:EA:D7:DB:8F:45:47:FC:B6:35:A4:FF:D2:16:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e193e347-2915-39bd-b0d9-d66b71f020a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:0a:2f:1b:93:91:b5:7f:cb:b0:3f:4b:e4:ed:b9:9a:50:14:
         6b:dc:ba:8b:92:b6:77:5c:19:07:2a:d5:51:99:4b:05:f8:ba:
         f3:62:e3:6d:f3:d0:8b:f9:67:0d:7e:23:4c:e2:03:fa:5d:d8:
         28:4e:79:bc:cb:99:68:8c:a6:b1:dc:f6:c2:4d:fe:7d:35:06:
         9a:ec:7a:09:e0:04:ce:9e:ce:67:6d:98:b4:6e:3d:7c:53:23:
         4f:39:92:80:fe:6a:2c:8a:b4:f5:b7:2e:5f:b2:74:0c:13:d1:
         c4:81:f7:ef:48:99:3a:f9:63:60:97:ab:d5:40:d0:d1:3a:f2:
         38:01:a2:ff:e9:e3:d4:23:12:ca:78:e0:0e:ca:6b:5b:4b:39:
         cc:f0:66:7a:f0:65:11:48:cc:1f:46:08:a4:d3:cd:0f:07:06:
         02:87:fe:1c:f7:84:85:2e:6f:1a:ee:f7:f4:56:a7:56:af:46:
         09:f9:b8:56:25:44:6e:45:2a:88:a3:2f:bd:9d:03:57:03:64:
         32:8b:bc:80:d5:2e:fa:95:4a:f0:f0:4e:d5:7d:59:19:28:41:
         50:ab:c7:3a:b3:a3:ae:d8:77:f0:95:bb:4b:ad:63:34:27:3c:
         6e:fc:1c:af:3a:15:11:3b:bb:15:d0:f0:aa:02:ec:2e:78:13:
         32:db:b0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 23:46:37 2025 by rpki-client