Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fc2504bb-cd9b-32dc-ad66-e45ca45b0c2c.roa
File:                     fc2504bb-cd9b-32dc-ad66-e45ca45b0c2c.roa (raw, json)
Hash identifier:          6fVXlATvhejYAMT2bYg+YXz2kl0QhWxL61pru7EQ2As=
Subject key identifier:   54:F7:77:FD:01:00:CB:47:43:BF:46:04:CF:C0:02:08:7F:DE:20:30
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B0746C446C63E2E0137937D80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fc2504bb-cd9b-32dc-ad66-e45ca45b0c2c.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     203
IP address blocks:        168.87.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c4:46:c6:3e:2e:01:37:93:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=d18cc7e6-9d72-404b-afac-14b318137fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:08:9d:4c:a9:7f:99:7a:cf:eb:d7:d1:48:04:
                    ad:f3:32:ab:b3:77:0e:69:99:48:91:ee:6f:8b:bd:
                    0e:38:0f:f8:07:29:7b:a7:5c:83:b0:0d:7a:e6:68:
                    a3:c2:7a:af:0a:95:5a:af:13:be:1b:d2:7f:1c:57:
                    e8:8a:db:53:2d:15:b9:4c:cf:18:9e:d7:17:d0:9a:
                    9d:fd:aa:68:a3:98:7a:8c:b6:b3:5c:77:5c:03:ce:
                    82:3f:a7:a9:a9:80:21:28:a6:02:cc:99:d9:10:12:
                    51:8c:97:20:6f:12:d7:7e:12:8e:d2:cf:e9:d3:e5:
                    fb:e3:df:58:73:4c:46:ce:ca:0b:c7:b3:f9:48:fc:
                    78:10:03:99:af:a6:00:53:0a:64:ac:d4:0b:f3:75:
                    76:f4:6b:47:55:b4:44:93:c2:8d:2d:c3:b0:9c:be:
                    a1:49:00:8a:f7:b4:72:a3:fe:0c:93:63:2d:b1:ca:
                    21:68:e6:08:50:d8:70:73:fb:cf:c6:b6:f7:01:8b:
                    d0:5d:d7:db:9c:4f:12:51:46:30:24:9a:da:32:96:
                    9d:39:ec:69:c9:b0:3a:f3:56:18:1d:ab:85:a5:52:
                    23:dc:cc:2d:31:52:96:47:f2:c8:5b:39:59:5d:5e:
                    d6:49:d4:d1:d1:9c:02:ac:b3:b3:35:f8:a8:20:3b:
                    e1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F7:77:FD:01:00:CB:47:43:BF:46:04:CF:C0:02:08:7F:DE:20:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fc2504bb-cd9b-32dc-ad66-e45ca45b0c2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a5:d5:f7:02:a8:47:0a:b7:94:75:80:29:35:00:33:85:01:
         e9:e2:82:ce:a4:fc:4e:f4:a8:07:a2:4d:33:5b:e5:bc:45:0e:
         0f:01:bd:79:b7:ff:18:f8:b1:f2:44:ec:72:b8:0d:37:9b:d8:
         3a:20:e6:28:ca:12:1b:70:fd:9a:0f:74:ed:5d:ab:16:08:de:
         a9:bb:60:bb:9c:74:12:0f:07:b1:5b:ad:5c:0d:d0:b6:61:b7:
         b0:e7:4f:6f:5b:11:4f:5b:c6:b0:37:40:3f:6c:9b:68:47:ad:
         e3:08:3e:14:ac:61:30:1f:f4:f0:c6:de:4a:55:7f:75:70:da:
         69:7c:6c:b2:ca:16:da:c7:96:f5:3b:96:04:11:ea:90:fd:ed:
         0a:36:f3:98:3e:d8:4d:4d:ac:85:8f:6e:0c:23:b0:5e:3d:e1:
         b1:1d:a7:97:49:59:7f:1e:06:6b:b5:f4:da:db:db:b1:8a:67:
         1d:23:98:32:41:dc:6b:d8:bb:a0:0c:b0:6b:7c:b4:7c:6a:dd:
         32:8c:71:93:54:7f:e7:81:a0:4e:38:01:15:f4:0c:bd:b0:f1:
         e5:2e:86:f4:65:00:b5:ba:60:f8:3b:06:d3:52:d3:df:ba:b2:
         b3:3f:fe:5a:3c:db:c0:c2:85:8c:86:91:a7:38:16:65:ef:b5:
         00:07:c8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 10:00:14 2025 by rpki-client