Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eb8aa76e-7d88-310f-a8ab-eda0f9fe0a8d.roa
File:                     eb8aa76e-7d88-310f-a8ab-eda0f9fe0a8d.roa (raw, json)
Hash identifier:          TiHOU5TLTjScvXg6Wz93D+wwNb5CWuTSdIKqkdAwyP0=
Subject key identifier:   33:E6:E4:F8:03:4A:D8:C6:0F:F5:78:17:C9:73:A7:C3:67:69:BE:84
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A8C70D1F4F445CF846588E800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eb8aa76e-7d88-310f-a8ab-eda0f9fe0a8d.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        168.87.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:d1:f4:f4:45:cf:84:65:88:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=196c7d35-1937-4c50-8f61-a640af38c6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9f:63:f1:03:21:ad:74:86:24:78:a2:54:f2:
                    ef:b6:23:8e:e1:fa:7f:db:82:6f:6b:1e:aa:db:98:
                    28:0d:1b:28:70:fc:41:4c:93:b5:dc:d7:c8:8c:a4:
                    d2:52:15:0a:5f:61:18:e7:db:27:3e:3c:31:13:52:
                    20:32:8f:26:d7:c9:58:aa:4b:49:8d:5d:61:da:90:
                    87:93:5b:cd:9e:57:3d:53:4f:ce:e3:2a:7f:36:fa:
                    f3:6c:2e:fb:df:0e:ec:42:ec:d2:45:22:9c:f0:83:
                    e9:66:ca:d0:31:2e:ee:48:31:5a:91:5a:ef:7d:80:
                    8d:28:b7:9b:3d:f0:e7:7e:57:0d:d6:21:27:9a:38:
                    1c:9d:02:e7:24:13:9f:09:66:1d:13:5d:dc:c7:c9:
                    ff:87:06:29:fc:83:89:3f:9f:06:d7:b5:f0:58:01:
                    54:79:58:8d:7f:c9:b1:66:a9:73:07:14:9e:35:3a:
                    40:46:3c:6a:eb:e7:03:a4:bd:72:db:7c:cb:4c:ff:
                    fe:93:fb:66:d7:5a:42:a0:45:e4:33:65:67:37:cd:
                    f9:22:48:55:a7:ab:63:ea:1e:e8:65:25:79:ae:46:
                    bb:6f:b7:22:dd:5f:41:8f:a5:7d:a4:ef:7a:b8:7a:
                    7a:0c:16:71:5d:f5:f3:47:fc:cf:72:7e:09:02:f0:
                    4d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E6:E4:F8:03:4A:D8:C6:0F:F5:78:17:C9:73:A7:C3:67:69:BE:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eb8aa76e-7d88-310f-a8ab-eda0f9fe0a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:b9:a9:eb:3d:1b:47:2e:23:48:8d:4b:35:b5:ab:22:2f:b3:
         d7:e2:9a:84:48:3c:24:cc:e6:73:a9:b3:a2:3d:08:d6:ae:de:
         c9:16:38:f3:1b:92:d7:01:8b:c7:a0:f3:7d:1f:66:64:18:8e:
         2a:8b:6e:cb:30:59:f6:6f:b6:91:2d:9a:3f:29:07:ad:f9:7a:
         7c:93:1f:4b:9b:85:22:49:2b:ea:b5:ef:5f:33:b4:26:55:ee:
         8f:95:2e:75:80:af:09:9e:5f:5e:2a:50:0c:93:33:a0:af:b2:
         37:c3:2f:3c:a9:42:ee:e2:5d:cb:7f:cd:8c:d7:a4:13:59:5c:
         c3:a9:13:3d:2f:b8:d8:5b:aa:cf:07:7f:83:ad:cb:6f:c0:71:
         59:bd:89:e3:61:f4:c1:bd:1f:d9:40:6f:0d:56:82:1b:02:85:
         a5:f6:19:a5:ab:6f:15:ee:20:60:7c:11:f9:da:d2:f4:60:76:
         2c:42:ce:fb:c9:6c:90:52:ea:0f:b1:a4:a6:d3:3c:5e:cc:44:
         22:d5:ec:f2:8e:b3:80:82:f8:81:58:e7:99:4e:67:b2:03:89:
         c6:4f:d3:6d:d7:de:70:74:ee:33:a5:ca:43:61:7d:87:09:6e:
         d2:73:1e:8f:e2:b7:ec:4a:48:5b:94:ad:46:08:7c:db:ae:06:
         9a:46:c7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 23:40:31 2025 by rpki-client