Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5137c870-e08c-3a80-a088-9b0d048ea259.roa
File:                     5137c870-e08c-3a80-a088-9b0d048ea259.roa (raw, json)
Hash identifier:          326Lq7G98EcLOOjYH7eJt/zhwDqsgoAmxQcykryUcT4=
Subject key identifier:   D3:97:84:26:E7:BB:AD:00:72:8B:DD:C5:65:24:5D:72:77:DA:83:45
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B8BE233062F3E2A3EADDA9BC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5137c870-e08c-3a80-a088-9b0d048ea259.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     3360
IP address blocks:        206.164.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:33:06:2f:3e:2a:3e:ad:da:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=659e3488-0e04-40c5-8425-2b89fae99510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:57:a8:39:53:74:a6:96:43:a3:59:0c:23:
                    03:1e:8b:45:64:58:9a:5b:59:87:cd:9d:17:3a:f2:
                    c5:a7:59:72:32:a8:f9:16:c7:1b:ac:7c:88:35:b7:
                    ef:a9:14:37:bb:28:60:d6:b2:c7:c2:0f:5d:e9:94:
                    e1:2c:20:95:42:21:d0:98:7e:25:68:b4:b0:fb:32:
                    67:82:00:cc:88:76:87:9f:ff:96:eb:c4:65:b6:f6:
                    67:d7:b1:67:7b:05:13:00:9c:26:aa:3f:84:95:5e:
                    e3:f4:3b:3a:cb:68:2d:0e:c6:dd:76:51:f2:5d:43:
                    9a:79:3b:2d:cf:13:ac:d2:2a:24:70:20:d6:94:ef:
                    99:c5:d8:77:c7:7a:aa:3d:0b:d4:52:62:ec:07:08:
                    10:5d:04:a8:4a:6e:d1:a4:2e:b4:df:5a:0c:5c:a3:
                    b4:8c:cd:c4:5d:10:1e:19:a3:87:78:fb:ab:b1:8a:
                    e2:70:b2:bd:98:b2:c9:26:c8:17:8b:74:8b:b1:72:
                    3e:4e:cb:f8:5d:86:32:e5:72:57:2e:83:9e:7d:b8:
                    47:31:e6:bc:b0:de:60:3e:d8:ce:cc:c0:56:9c:2d:
                    8a:4d:bc:40:57:3b:32:1b:55:39:6e:77:47:1f:c3:
                    82:85:5b:48:53:7e:3c:66:89:5b:06:67:87:46:e9:
                    6b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:97:84:26:E7:BB:AD:00:72:8B:DD:C5:65:24:5D:72:77:DA:83:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5137c870-e08c-3a80-a088-9b0d048ea259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a8:80:a2:59:f9:d0:c0:42:b7:5a:17:e7:47:45:35:ba:4b:
         0f:22:e0:9f:bb:47:18:18:5d:c6:c4:fa:28:41:3f:2c:df:12:
         26:79:0f:d1:95:0b:b6:ab:4e:b5:5d:bb:9b:35:38:3b:a3:33:
         7a:ff:63:57:b0:7f:bf:b8:ce:f6:12:a4:2c:8b:8d:ed:e6:e4:
         1c:f2:76:8d:cb:e3:b0:79:26:3f:73:84:83:ea:34:92:03:c8:
         98:25:ec:ab:d1:b0:03:4e:c4:16:65:a6:ed:ce:05:0e:c7:b8:
         f6:3e:8a:9c:a9:ad:c1:89:a8:3d:99:cf:02:93:a5:1c:7b:68:
         dc:4a:63:6a:0e:39:6a:31:c4:34:83:93:c0:8d:f7:c4:3e:e8:
         71:1c:03:55:e3:a3:20:ee:c5:62:b8:e3:06:ad:0e:d2:72:20:
         ea:3a:c5:d0:93:6c:b9:17:fe:8a:e4:c5:32:14:12:a1:c7:e6:
         4b:f1:a8:e8:4c:b9:d8:af:9d:95:af:59:55:b9:0b:ea:d1:cd:
         17:0e:04:4a:92:c0:d5:3f:00:fb:f3:a1:33:48:2a:95:72:6f:
         17:01:a7:f9:4a:91:e4:a8:20:db:11:07:e1:31:d6:27:ae:00:
         db:db:08:3f:64:c4:ca:0d:21:a2:e2:be:19:70:ab:d8:2a:99:
         ee:83:2b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:24 2025 by rpki-client