Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/527a6323-d80e-34e3-847e-763dc7c34e8d.roa
File:                     527a6323-d80e-34e3-847e-763dc7c34e8d.roa (raw, json)
Hash identifier:          y1Xtg8/zf2vys9rY6YCk+2d2l9ec9YvzWC4SL9Xu90I=
Subject key identifier:   AF:FB:C5:D1:D5:04:DF:EB:24:0E:A9:22:68:41:3C:5C:16:D9:2E:87
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B4A471CB02563785591B87000
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/527a6323-d80e-34e3-847e-763dc7c34e8d.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     3356
IP address blocks:        168.87.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:1c:b0:25:63:78:55:91:b8:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=9825e353-9fd8-4cd8-bca7-e1e44af2849f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:33:62:bc:1a:4b:69:7e:e2:bb:92:37:81:8f:
                    c4:3a:56:a0:00:8d:d0:63:3c:89:b4:10:8c:7e:72:
                    da:25:14:35:f1:29:ab:83:59:83:64:76:cc:46:ee:
                    bf:20:3c:3d:62:cc:c4:5e:e3:65:96:78:89:4e:70:
                    43:ab:f1:2c:21:80:b5:5a:b2:8a:c1:bd:a6:40:b3:
                    47:b0:9d:6d:16:76:ea:62:99:b0:48:06:aa:3a:3c:
                    3f:77:17:3c:8f:92:ab:1b:d8:a8:58:c1:a0:cf:09:
                    73:13:0c:02:83:7d:e6:65:3a:ae:9c:8b:25:73:70:
                    a4:cc:39:46:f1:be:65:00:5b:d2:f0:d5:40:cc:ca:
                    f6:58:bc:19:51:ca:5c:52:98:98:8f:2c:2a:57:5e:
                    ee:d1:ae:e8:7c:2b:c2:05:f9:9d:0e:2c:05:a1:85:
                    79:3d:73:4b:79:c7:87:73:88:c3:06:51:32:d0:c5:
                    cd:c7:93:cc:a9:fd:60:e8:01:c1:5a:9e:ae:f1:d5:
                    d3:1e:ea:ab:81:3f:e0:66:52:a8:ad:5c:06:3e:ee:
                    b3:09:05:f6:52:c2:ff:b6:b5:de:7c:fa:54:6b:6d:
                    f3:0c:f3:f9:b8:43:a2:bb:49:0a:f2:75:07:a5:6b:
                    ab:3d:6e:d7:9b:42:e3:2a:ce:e8:17:ce:3b:01:e9:
                    6b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FB:C5:D1:D5:04:DF:EB:24:0E:A9:22:68:41:3C:5C:16:D9:2E:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/527a6323-d80e-34e3-847e-763dc7c34e8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c3:be:04:09:ab:7a:3a:50:98:02:c3:a6:2b:0a:5d:13:6d:
         a4:6d:06:f0:ce:65:a0:fe:4b:f6:79:8f:10:ee:5c:37:fa:56:
         6c:8f:62:dc:11:87:11:1b:bc:2c:73:c1:81:cf:9d:03:d8:9a:
         5a:d6:ef:4e:85:0c:aa:95:8b:47:be:a3:a7:06:4f:61:c5:f4:
         6e:1c:84:9a:0e:25:1e:47:31:10:cc:1d:37:be:eb:08:b4:40:
         a5:00:5e:79:06:de:88:4c:86:64:0e:ea:33:68:ba:75:24:3d:
         85:63:2a:4e:72:11:1c:6e:b2:02:d5:40:b3:51:ed:16:dd:c7:
         56:d7:bf:00:c0:65:fe:ab:ba:3e:9e:af:54:fc:17:5d:53:c7:
         f8:43:45:78:58:6c:85:0a:cb:03:cb:fe:11:78:24:5e:7b:dd:
         85:e6:6d:85:d7:68:68:5c:44:7e:5f:14:6e:1f:5f:23:22:d8:
         eb:77:63:bb:2d:10:c9:c7:a3:a9:f0:4b:c8:43:d7:06:65:d0:
         64:36:d3:45:05:17:24:cd:33:22:fb:00:1b:09:6f:72:9c:bb:
         53:c7:43:8d:38:f5:81:c9:6e:9b:1b:21:80:8e:3d:b3:ea:12:
         4a:07:d6:41:d1:b8:b0:3b:45:71:df:76:74:07:4d:0c:c3:32:
         83:19:91:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:20:26 2025 by rpki-client