Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ec92c3f6-4237-3be3-841a-2ea34dae9af7.roa
File:                     ec92c3f6-4237-3be3-841a-2ea34dae9af7.roa (raw, json)
Hash identifier:          +cxMPNOfnLUjjewJtQV48eCdOiMDxpDP7ep4l7VXD/o=
Subject key identifier:   D1:00:86:67:6D:29:F1:76:2E:1E:9D:E1:A3:35:59:02:64:CA:9F:38
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B004BE2E60BBAA8AB2CA0D7C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ec92c3f6-4237-3be3-841a-2ea34dae9af7.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        168.87.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:e2:e6:0b:ba:a8:ab:2c:a0:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=64320b94-cd14-4aae-83be-8f7d9bfda2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:f4:b9:fd:89:ba:81:8e:d0:0f:38:6c:25:
                    0f:f6:54:f3:22:52:55:b7:78:20:6a:cf:1c:a0:e8:
                    f1:23:d3:1a:22:a7:97:73:8c:2c:03:81:8a:01:48:
                    69:05:6b:a1:72:19:44:ec:9f:77:22:33:f4:c2:e4:
                    67:3c:c3:28:23:1b:47:b3:ca:7b:98:9c:5d:2e:07:
                    18:65:b6:86:d3:f7:ba:56:5d:9f:32:3d:a4:8d:b7:
                    4a:e2:b7:a2:f8:4b:40:3f:b1:61:40:e9:63:41:59:
                    f4:88:f1:e6:5c:4c:4a:43:55:38:06:20:50:0e:cc:
                    6d:11:62:9d:11:22:59:76:09:b0:cc:be:07:29:c8:
                    24:f1:45:e6:9c:ee:c3:4e:55:85:1d:08:e4:d1:0d:
                    c0:75:13:19:aa:ca:db:cc:cf:34:af:56:82:b6:80:
                    c1:75:93:ee:bb:b7:0e:db:db:db:c6:83:43:18:2e:
                    dc:b3:b4:ad:52:a7:2b:5e:ac:ee:80:ea:67:9c:d3:
                    6e:11:9c:83:41:7f:4a:88:b1:84:80:ba:0f:ce:9e:
                    e4:db:8a:11:0c:07:df:0b:39:a8:b9:68:b4:b4:fc:
                    94:30:a0:83:fc:00:c2:13:76:ad:ef:b2:c6:74:c6:
                    50:7d:36:fc:6b:37:01:28:7c:51:cd:19:b2:2b:b0:
                    e6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:00:86:67:6D:29:F1:76:2E:1E:9D:E1:A3:35:59:02:64:CA:9F:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ec92c3f6-4237-3be3-841a-2ea34dae9af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:75:b8:01:38:d4:99:4d:1e:1f:16:35:31:cc:e9:9c:c8:87:
         df:5d:8c:d4:4d:36:8a:35:7f:44:63:ef:e0:39:3c:03:41:de:
         f3:20:44:df:ac:dc:c9:01:f3:89:63:d5:98:db:2f:88:38:d2:
         9f:6c:87:c5:08:dd:55:9c:58:25:6b:6e:5d:74:12:c3:e0:c0:
         f1:94:80:6c:28:3a:62:dd:84:35:51:d9:2a:69:98:7b:89:7a:
         a6:8d:94:16:e9:cb:ce:84:1f:ec:a1:88:c7:fe:e5:b0:6e:96:
         20:23:e7:6b:df:35:3b:de:25:df:04:6b:ff:00:f2:ac:fa:93:
         f2:91:9d:97:9f:61:cc:3e:80:55:d5:70:9b:df:b3:82:bf:64:
         5a:94:75:28:ef:d6:e3:7f:86:2c:5a:a2:cf:8c:02:fc:38:a4:
         48:f6:0c:67:a8:e8:1a:d7:f0:8a:db:de:72:b8:4c:17:9f:11:
         5f:64:16:28:6b:b0:5c:62:1a:c3:46:36:71:15:25:64:20:c2:
         20:9e:f4:ca:0c:b9:32:31:21:8c:03:c0:db:c3:58:e7:17:fa:
         31:a8:c0:8c:fd:fc:1f:6f:15:04:86:f8:10:45:9e:3e:d4:ce:
         ab:4c:f4:fb:c4:c4:fa:5c:2c:d7:a5:e3:34:7c:ed:d4:06:3f:
         98:15:db:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:24:08 2025 by rpki-client