Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/272d1f02-6a95-3ca3-9a83-9f3475287dfd.roa
File:                     272d1f02-6a95-3ca3-9a83-9f3475287dfd.roa (raw, json)
Hash identifier:          79kWchCyY8/jW+p97n0mbCROR9hGJ/56iUgBLWm4dE4=
Subject key identifier:   6A:BC:09:EB:96:80:29:40:CF:19:2F:F7:20:11:94:5C:8D:6F:C2:0D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B4A4720FEC38D146EF74DA0C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/272d1f02-6a95-3ca3-9a83-9f3475287dfd.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     203
IP address blocks:        192.85.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:20:fe:c3:8d:14:6e:f7:4d:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=d32e2ade-dcd1-4687-8cec-d6760ab3459d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c0:13:b4:81:cb:c7:ef:29:f1:cb:5e:a0:30:
                    44:d1:16:c7:7b:5d:1e:f4:a4:7f:f0:f3:31:17:31:
                    90:32:0a:31:bf:e2:73:e9:22:43:ac:0b:b4:8e:89:
                    54:54:a7:2b:36:9d:3b:bb:bf:df:c2:97:80:51:a3:
                    63:df:fa:40:ab:9a:f7:70:3e:0f:cb:04:67:47:66:
                    d1:55:a8:75:d0:8a:ed:3f:4e:ba:7d:dd:1c:67:57:
                    16:b8:4a:45:9f:53:14:c3:80:d8:66:d5:01:9c:51:
                    c7:36:d9:dc:50:99:81:cd:da:cd:e4:f0:88:9f:d1:
                    70:ce:d2:67:df:29:b6:a1:fa:94:27:9e:63:4e:ce:
                    16:89:45:3e:f1:71:4e:b9:1d:b1:55:7c:54:84:f5:
                    bc:18:61:55:9f:32:41:d8:8d:59:38:91:69:49:56:
                    be:b5:82:bc:d9:1c:1a:6c:1b:36:68:90:41:d4:a5:
                    3d:c6:12:f1:86:43:5b:8f:d5:7b:10:b6:f3:57:c5:
                    93:5b:1e:b2:0d:a9:15:97:e6:a1:a6:c7:0b:57:c8:
                    17:26:b8:a2:1e:fd:fe:50:cc:75:b4:aa:27:c6:94:
                    11:bf:9a:2f:0c:cc:e4:c6:cf:0f:e5:65:3c:53:67:
                    5a:6d:31:1c:41:80:40:18:8e:55:e4:69:3c:e9:07:
                    52:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BC:09:EB:96:80:29:40:CF:19:2F:F7:20:11:94:5C:8D:6F:C2:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/272d1f02-6a95-3ca3-9a83-9f3475287dfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:05:06:15:66:27:8c:33:70:54:85:d0:a3:4e:ae:d2:80:01:
         2f:51:5b:97:ff:6f:e6:10:33:cf:a8:cc:b5:df:b6:d9:18:65:
         cf:44:7a:d1:d4:a6:f3:d1:57:c4:27:71:3f:ba:1f:2e:81:77:
         d7:b3:3f:54:14:e8:08:b0:02:28:d9:1e:cb:88:2e:59:81:50:
         0f:49:c2:c4:6e:74:db:4c:2b:32:48:a2:00:44:4d:bf:0b:8a:
         14:cb:32:09:2a:c8:8f:19:35:37:41:27:94:80:64:1e:0d:ca:
         40:0d:a1:3f:d4:4e:05:0b:b8:1e:91:9d:8d:6e:20:6a:43:7f:
         a3:64:d7:e6:cc:96:f9:33:8d:97:fd:99:0c:57:ce:b5:d5:13:
         4b:86:24:81:00:46:ae:d3:6c:6e:d7:7f:a4:05:32:e0:70:8f:
         13:ea:cc:98:53:35:c4:92:4c:d6:57:6b:50:e8:84:ea:77:d9:
         11:b8:63:45:e7:db:e6:69:93:46:df:df:04:93:da:fd:03:a0:
         98:6a:5d:2a:31:c3:39:4a:e5:ff:bb:27:57:50:08:4c:c7:5e:
         0a:ec:4e:e3:ae:0e:dd:91:42:eb:94:35:d1:c0:31:7d:45:96:
         1a:9b:79:09:ce:cd:f5:be:9d:2e:45:f8:e8:f9:c8:22:df:2b:
         f9:c7:56:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:28 2025 by rpki-client