Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2927ec75-e0f7-3d99-8770-bf93eaad6710.roa
File:                     2927ec75-e0f7-3d99-8770-bf93eaad6710.roa (raw, json)
Hash identifier:          bHwQSxrfIPkBO5apexRWXgxxVyd91wedBIdnGaktitE=
Subject key identifier:   89:5C:E0:81:B2:B0:6D:26:6C:99:63:FE:7E:72:30:7B:C8:05:0C:00
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849CBCFA84CD896D76010A48E20
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2927ec75-e0f7-3d99-8770-bf93eaad6710.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     3356
IP address blocks:        206.164.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a8:4c:d8:96:d7:60:10:a4:8e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=cf9b6443-3f8e-4ab9-898b-ce7e51b18e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:5a:6b:a4:09:32:a1:4d:0d:60:65:f3:2f:
                    15:c4:7c:9f:25:94:91:02:3e:c0:be:39:c0:f3:04:
                    59:c4:34:bc:10:49:e1:c6:61:a1:2b:fc:72:cb:82:
                    4c:63:bf:cf:96:88:14:4a:0e:80:82:cd:95:c0:14:
                    46:83:04:1d:ff:d2:3c:2f:b5:74:70:cb:42:63:cd:
                    98:72:c3:11:a4:46:88:d3:72:f4:73:c7:ba:5c:44:
                    fb:54:8b:68:a5:b6:ba:bf:7e:16:db:56:97:3c:a1:
                    e2:53:a8:47:21:c9:6c:87:5a:38:62:18:a9:2a:84:
                    6a:c1:cd:12:bc:b3:e0:50:9b:00:32:37:5b:a2:50:
                    04:6c:ed:ed:d0:9d:e1:7e:e1:d9:f5:23:1e:0e:e8:
                    b6:53:20:22:92:42:16:28:3d:bc:ea:87:7c:ce:bc:
                    0c:23:f8:2d:f5:a9:b1:27:40:38:fb:97:e2:83:a5:
                    c9:06:b4:9b:a4:0b:4c:7b:41:ce:ae:d7:65:fd:d0:
                    51:50:69:35:84:a7:93:94:92:f1:19:b9:21:1f:88:
                    fb:5e:ef:2f:8b:8d:31:d2:75:77:27:e3:86:62:99:
                    08:76:b9:b2:75:a0:8c:14:76:4e:55:4e:c1:47:2b:
                    f9:24:1d:2a:9e:19:73:6d:c1:3b:2b:ea:16:5a:a7:
                    03:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5C:E0:81:B2:B0:6D:26:6C:99:63:FE:7E:72:30:7B:C8:05:0C:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2927ec75-e0f7-3d99-8770-bf93eaad6710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:93:dd:0a:58:ca:7d:43:c3:2b:a6:8b:65:fc:59:e4:f2:76:
         a2:11:65:4d:cf:59:03:c2:9c:ff:e6:8f:51:d3:a5:99:e4:dc:
         f0:31:2d:35:f4:9f:2c:a7:6b:81:14:88:f0:d0:8f:37:03:2f:
         74:3f:dd:46:6d:1e:b8:c2:6a:78:f6:f8:4f:7d:e4:5d:ed:70:
         46:ed:89:2f:6f:77:f4:31:39:52:8c:f4:0a:5e:a1:38:f5:ef:
         06:9a:a8:76:ed:ab:17:54:7d:5d:aa:91:be:8e:88:26:6e:a6:
         91:ba:44:5e:17:b9:78:52:0b:dc:2d:7b:4f:e3:24:dd:42:b2:
         24:c7:ca:4d:ff:13:58:80:86:15:a2:01:13:b9:dc:88:71:cf:
         e4:1d:fe:ff:5a:59:7b:19:77:8a:86:ef:c7:fe:e3:bd:c8:0c:
         25:28:24:5a:05:bb:c1:e0:78:a8:4f:45:4e:25:3d:e6:25:e3:
         06:c7:15:1b:58:4e:29:c1:6e:e3:e1:e8:41:47:30:b4:3c:b8:
         67:27:19:b0:6a:e8:45:91:fa:ed:53:df:fb:b1:d3:ab:44:d7:
         48:4b:2a:a4:92:8f:81:a6:41:38:33:e9:66:32:4c:b1:5a:d6:
         c2:11:47:d5:f5:a6:7a:4c:e7:41:e9:95:21:05:fc:8f:9f:7e:
         87:9b:5e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:06:31 2025 by rpki-client