Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1062e199-c865-3678-88df-57ac085e77c8.roa
File:                     1062e199-c865-3678-88df-57ac085e77c8.roa (raw, json)
Hash identifier:          XO8kmf1N1z5Nhpr5eV8biDwXzY27/RLYmKmNwbfviVM=
Subject key identifier:   5E:58:BD:49:C8:91:44:0C:93:8A:AF:63:65:11:97:58:AF:DF:4C:14
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BD64C480C79161252CB00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1062e199-c865-3678-88df-57ac085e77c8.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     3360
IP address blocks:        168.87.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:d6:4c:48:0c:79:16:12:52:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=6c5df8e7-f23e-46a5-a0aa-e2116caf19d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cd:b9:ea:c1:3b:f8:45:1c:df:11:ab:08:50:
                    24:5d:9c:3d:e4:4d:3f:a3:7b:d9:29:a3:c4:5f:3c:
                    8d:1a:d2:2b:bf:40:cd:20:2f:15:6b:28:e0:07:2d:
                    24:d0:c5:78:ac:e8:ec:72:57:a0:8e:56:d9:96:00:
                    a9:2b:10:5f:9f:a9:0d:16:be:9f:6d:35:d4:34:79:
                    d6:48:17:50:b9:a3:3f:e6:44:35:58:b3:76:23:36:
                    d2:c7:a0:41:e5:ea:62:88:20:51:b7:32:0f:b0:2f:
                    a3:37:c3:ca:75:3f:05:84:4b:5c:86:d1:76:26:5b:
                    f8:98:ea:2e:0d:dd:30:a6:02:c4:d0:fe:dd:0f:d6:
                    58:08:b1:c4:a7:81:8c:90:d4:d8:c7:ec:e7:74:13:
                    80:5f:ba:d4:3c:b1:2d:05:b6:d6:74:f0:b1:f2:d7:
                    e7:ff:a1:68:b5:19:50:c6:28:85:9c:aa:19:34:2a:
                    92:58:56:09:85:22:a6:ce:50:fa:f9:18:7b:fc:73:
                    8f:b1:de:b8:52:de:ee:64:7c:3b:6d:38:58:d9:b3:
                    3e:12:d2:cf:0c:e5:a0:6d:88:d3:52:30:c8:25:54:
                    a8:53:26:97:ae:36:71:98:f5:cc:79:e6:5c:f2:ae:
                    e3:5a:fb:b9:98:72:92:9c:27:3d:db:32:87:25:69:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:58:BD:49:C8:91:44:0C:93:8A:AF:63:65:11:97:58:AF:DF:4C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1062e199-c865-3678-88df-57ac085e77c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:9f:2b:7b:7c:e7:66:4f:7f:6b:4c:3c:cd:6d:77:0b:91:46:
         00:fe:4e:b3:a6:0c:0a:67:9c:51:b9:fc:86:0a:57:5c:11:74:
         05:42:ca:1c:93:42:1c:61:d1:01:ea:9a:fb:d8:f1:61:e5:5d:
         ec:52:36:56:9d:84:e5:b9:20:27:f1:a3:08:b9:76:16:f2:9b:
         4a:e7:4e:42:1b:14:b1:ac:03:10:2b:ba:ae:03:36:9a:b2:a5:
         21:38:aa:9e:90:f4:8f:f0:25:09:78:d7:34:5e:df:6f:9f:d5:
         26:5a:b6:c5:4c:b4:1b:6b:e1:ef:51:e8:86:ca:c2:12:fd:34:
         1d:38:ca:06:c6:98:fb:a5:3d:56:fe:25:57:a9:c9:43:54:04:
         0c:1f:93:24:0e:12:05:f7:e7:95:91:cb:8e:6f:92:cf:36:03:
         04:72:fd:20:9d:7a:cd:47:28:b0:9c:0b:c3:62:d0:0b:ac:4f:
         e1:06:16:84:e3:6f:d6:af:29:bd:a0:36:80:b9:a3:81:1a:c5:
         cc:7d:3f:9c:80:ac:e0:b9:dc:af:99:05:6e:c2:c4:b2:f5:48:
         fa:bf:a7:de:b3:63:e2:5f:0b:2d:3f:11:30:6b:c7:f8:b5:53:
         12:30:5e:2e:16:a5:7e:f5:15:76:cf:2d:14:5c:72:30:d2:44:
         ea:d0:36:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:33:38 2025 by rpki-client