Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0eaecb2e-8237-316b-9b23-197dca7f9369.roa
File:                     0eaecb2e-8237-316b-9b23-197dca7f9369.roa (raw, json)
Hash identifier:          wIJdR3I3wGBfBoCSSXIiW+jZaF/IdwRwWEK3Vxqvrg8=
Subject key identifier:   AF:05:8A:3A:90:A2:D6:6A:6D:A0:0C:8D:FB:6C:06:F6:1C:29:33:66
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B4A471EA9E3184E7A3CDF0580
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0eaecb2e-8237-316b-9b23-197dca7f9369.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     203
IP address blocks:        192.85.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:1e:a9:e3:18:4e:7a:3c:df:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=507e8954-4a93-467c-867d-d783d430a043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:61:c9:3f:53:86:14:f0:7e:dd:d6:67:97:
                    15:86:81:45:77:88:a7:21:21:f8:4e:f3:a6:c9:6a:
                    0b:e7:c7:49:f2:0a:d0:79:d0:77:c7:1a:30:1a:56:
                    64:a8:b9:fc:9f:57:b8:a0:ef:d1:ca:d4:28:26:75:
                    b5:fc:35:3d:11:ed:1a:29:8c:d1:19:b5:6b:29:31:
                    00:6c:98:df:67:b1:0c:5f:b9:e6:e6:ab:70:88:05:
                    e1:38:f1:6c:f6:5f:36:f6:be:67:2f:22:9e:97:f6:
                    78:0a:37:64:65:7c:ce:8d:d9:79:bf:fa:10:c5:b0:
                    39:48:a7:d8:72:09:6e:f2:70:26:bc:26:7c:54:a8:
                    cb:87:a7:62:a3:73:17:0e:74:75:18:3d:db:03:4a:
                    33:c4:30:9b:6d:bf:37:7b:84:32:07:66:86:10:7d:
                    20:97:0f:31:cb:01:a1:3d:8b:16:f7:c5:b9:1c:66:
                    1f:ce:27:cf:dd:d4:3a:a7:b9:43:ef:05:e3:2a:87:
                    8e:d2:31:cb:48:41:4e:d6:91:23:eb:54:22:5c:bf:
                    f1:11:6e:07:d5:4a:45:92:36:26:cb:94:a1:a5:4a:
                    f7:5b:51:f2:fd:8d:19:33:46:bb:ff:12:8a:fc:89:
                    7f:7c:16:31:52:27:14:78:fd:58:0c:8b:50:46:7d:
                    d5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:05:8A:3A:90:A2:D6:6A:6D:A0:0C:8D:FB:6C:06:F6:1C:29:33:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0eaecb2e-8237-316b-9b23-197dca7f9369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:29:9d:5d:f0:77:f8:fe:d9:9e:cc:82:88:78:87:27:3f:f0:
         db:aa:f0:c2:e5:e2:d1:de:ba:90:90:d3:38:9a:53:19:a3:37:
         18:8a:fc:4b:f6:30:f3:28:d3:ea:a3:db:b3:00:60:ec:3c:26:
         b4:7f:20:f4:0f:2c:4e:4b:76:fe:d4:4e:39:9d:f2:dd:ba:fd:
         9f:9d:79:63:9a:4f:13:d1:d1:ed:d8:91:f9:c5:dd:83:d5:4c:
         dc:7b:7c:12:5f:88:c5:d2:c8:f6:75:92:58:4d:f6:07:b6:d9:
         5a:d0:b9:e1:87:86:c8:f9:a8:b9:b2:aa:f4:4a:3d:f5:39:33:
         78:63:a1:d0:47:d2:8e:35:2b:90:77:77:1f:b0:9f:a1:21:36:
         c0:f0:5c:0a:df:67:34:f6:d7:56:be:fe:5f:52:00:a0:df:43:
         b5:e0:1f:20:25:de:24:22:ab:82:be:0e:5b:bc:84:1e:8e:8c:
         fa:7f:6d:6b:fd:fa:bd:19:2f:1e:37:1b:50:97:0a:87:ee:d5:
         b6:4a:67:22:7f:fa:99:69:53:db:ca:d4:7a:f1:0b:68:11:a1:
         47:f2:ed:a9:e5:4c:e7:c6:f8:61:59:cd:e3:e2:e7:bb:2a:bf:
         b2:26:6e:50:69:8d:a9:40:cf:ae:2c:d4:bf:13:0d:73:b4:57:
         9c:95:70:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:27 2025 by rpki-client