Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa
File:                     34510429-d958-3a78-990a-f80264d9221e.roa (raw, json)
Hash identifier:          nPyqAcNX/valK9XTeoYMTyVObLyUO+TTReGUmKgZNic=
Subject key identifier:   3C:43:4A:A3:38:3B:75:7B:CF:39:F9:E9:D6:C8:C5:17:41:7A:9F:CB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B48E1C0DAB50C10FF9BE22BC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     3360
IP address blocks:        168.87.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:c0:da:b5:0c:10:ff:9b:e2:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=ddc9a4a6-5196-4c96-8d83-609937b4c1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:73:86:d1:59:d9:2a:66:fd:91:c9:e9:23:
                    29:56:0b:b2:4e:3e:f0:a2:9f:52:1b:63:0b:19:aa:
                    04:28:87:e8:f1:93:c9:2b:bf:f4:f5:81:34:98:da:
                    f5:43:64:f9:ca:8e:e4:d2:53:20:ae:89:68:c0:8f:
                    50:69:2a:45:56:51:5a:db:52:38:71:69:8a:25:ae:
                    10:4c:17:8b:fa:23:d1:f8:e1:cd:21:f1:91:46:7c:
                    01:47:3c:19:14:b9:42:c7:e6:06:e2:0b:62:35:f6:
                    ea:d9:55:5f:4f:a0:ae:ed:76:d2:5d:6b:d4:59:78:
                    50:89:ec:f2:dd:e2:a1:ac:94:1b:88:ae:75:16:eb:
                    4e:1c:00:f0:12:47:bd:e5:d3:75:d3:5c:fe:8e:01:
                    18:22:1a:18:a5:8c:09:63:fa:72:81:71:69:79:f2:
                    6c:4d:82:a4:17:38:5c:e1:26:88:99:8d:e2:7a:9e:
                    c7:92:57:ba:f9:aa:0d:9c:ec:19:db:70:e1:7e:c1:
                    85:1b:4b:3a:b8:02:13:0c:2a:83:b5:1f:8a:8e:c6:
                    7c:34:2d:c0:49:ff:e0:a0:81:7f:74:a2:0d:b1:ff:
                    f9:02:a1:fc:8b:79:46:66:8c:eb:ee:21:43:9c:de:
                    c9:0c:82:54:ab:36:48:4f:01:48:7c:6a:ad:9e:25:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:43:4A:A3:38:3B:75:7B:CF:39:F9:E9:D6:C8:C5:17:41:7A:9F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:30:32:cc:90:aa:84:49:e0:a2:63:25:c6:bb:50:a2:90:61:
         c7:f7:79:ec:d6:b2:cb:2a:cc:a9:e3:ed:d8:b2:30:2b:f6:6d:
         94:e8:ee:a6:ff:bd:d5:14:90:5c:25:5b:a9:85:0c:3b:0d:e5:
         3d:a8:d4:9d:04:7a:a5:b3:52:7e:ee:f1:41:e0:1e:bc:aa:75:
         0c:a2:ae:e0:d2:77:68:aa:5c:17:d7:3d:94:3c:e4:52:1c:05:
         ec:b2:ce:7e:b8:52:f1:50:06:82:61:61:6f:24:d8:c0:4b:09:
         0d:f2:69:6a:9f:d9:10:06:29:8a:3b:e1:42:15:a4:c9:aa:f8:
         76:0e:f4:96:33:ea:0c:2a:88:4b:09:53:43:ba:67:a9:f6:2d:
         4a:10:bd:0b:14:c9:49:41:43:d1:27:04:8b:8d:6d:04:26:37:
         3a:b6:c6:e7:1a:2f:5f:9d:47:27:52:91:e6:f8:d5:d1:f8:21:
         f8:1f:3d:b8:67:7d:1c:fe:8b:5e:f6:d5:ef:c1:f6:60:f2:7f:
         80:71:4e:39:88:43:ec:0a:a3:a8:ec:f7:5c:9c:21:05:10:e8:
         e6:84:64:a0:3f:ba:12:f9:2d:93:df:51:71:05:7e:f4:b4:78:
         78:d9:60:c2:56:4d:cd:06:17:6d:b6:d2:10:86:fc:c7:d2:60:
         12:62:7c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:35 2025 by rpki-client