Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d1ee24b-0660-396f-99a4-2e009e6a52fc.roa
File:                     3d1ee24b-0660-396f-99a4-2e009e6a52fc.roa (raw, json)
Hash identifier:          /8qDL0yRVvKjbFDhexQGGtK3XNZJCCLK0zpPIC43U7U=
Subject key identifier:   CC:02:27:A1:13:79:49:95:9B:CF:A6:B8:AE:39:50:E1:FE:89:B6:A4
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B59A1C923B47F65C90421A880
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d1ee24b-0660-396f-99a4-2e009e6a52fc.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     3360
IP address blocks:        170.30.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:c9:23:b4:7f:65:c9:04:21:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=319a6b5d-ae68-49d9-946c-c5ad9f221dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:10:23:cb:5c:93:a9:03:25:db:9f:2e:c6:11:
                    8a:3c:03:e4:a4:ed:21:a5:ad:7d:d1:ff:8e:d9:ac:
                    fb:15:30:fd:bf:2f:b4:8b:3c:63:1a:09:f8:39:74:
                    79:44:34:c2:00:3a:b5:ad:95:79:da:a3:45:d2:67:
                    3d:22:09:9d:64:74:91:bb:d2:8c:db:b9:ea:05:73:
                    f0:66:cf:cf:a0:47:dc:74:c4:69:ab:8e:29:50:fd:
                    e4:d9:0b:92:a2:9d:b9:a4:ee:96:e5:59:2b:42:ba:
                    55:4e:a8:9a:ed:91:1f:a1:3d:d3:71:60:2d:59:64:
                    93:53:96:ce:9f:94:d3:ab:90:9f:93:2f:d9:53:2c:
                    66:8b:72:d4:4a:02:0d:33:b5:5f:5b:f7:6d:94:22:
                    da:7a:ef:18:d3:8b:24:3c:7c:f1:cf:9a:be:ec:86:
                    a9:75:5a:d2:6c:3d:3f:d2:e9:69:b1:53:f9:da:ca:
                    3e:c3:5e:26:4c:53:b1:b4:53:f5:7d:52:fd:7d:aa:
                    6d:e6:c7:43:5b:70:3f:f9:b0:38:78:53:50:bb:b1:
                    63:f5:bb:76:f8:61:22:81:6a:f3:7c:68:79:e6:2b:
                    67:88:09:de:5d:8d:0b:69:40:8f:30:0f:f3:53:00:
                    c1:f1:46:e4:84:c8:1a:11:a4:b9:36:81:05:32:ca:
                    e9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:02:27:A1:13:79:49:95:9B:CF:A6:B8:AE:39:50:E1:FE:89:B6:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d1ee24b-0660-396f-99a4-2e009e6a52fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:32:29:d2:c5:09:ba:c0:68:cd:91:4e:a3:a9:b4:65:cb:5d:
         b7:ff:89:b3:99:24:65:eb:d4:4a:67:3d:87:fa:ce:50:26:d6:
         2f:59:ef:4b:fc:01:c5:71:89:4e:2a:8f:29:94:10:d4:08:a4:
         44:fa:42:76:a3:8d:bd:da:90:47:25:7b:10:6f:c5:b4:98:f9:
         82:5e:77:54:a2:11:29:1a:f1:fd:d6:23:3c:b2:a0:ed:ad:2f:
         73:7a:a6:27:0e:c8:d7:e6:39:02:58:a8:7c:66:0a:0a:b3:57:
         6c:bd:5f:51:6b:1a:78:b5:a7:c0:4d:14:4e:a7:a7:99:d5:84:
         13:99:1c:5a:ef:94:b4:9a:1e:c9:8b:04:41:5f:bd:79:5b:eb:
         b4:12:c0:7b:11:65:04:89:7f:5e:02:e1:81:fc:97:e4:42:7d:
         a8:34:a6:d9:d0:ae:27:51:31:88:21:2e:23:bc:22:fd:55:5a:
         73:6b:7f:45:63:3b:58:62:58:00:ab:c7:0e:fd:f0:5b:94:69:
         3d:08:3c:87:a4:7a:da:14:31:ae:4b:c7:cb:7e:d3:4a:7c:97:
         f1:38:25:62:0b:06:73:9e:9e:d2:ff:55:4f:d2:98:18:2c:40:
         2a:17:90:5b:ad:2e:4f:4f:c6:b7:51:f3:b9:06:7f:80:07:c5:
         b1:06:3d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:54:16 2025 by rpki-client