Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6178a435-c337-3f47-b5de-1740f2e1be1d.roa
File:                     6178a435-c337-3f47-b5de-1740f2e1be1d.roa (raw, json)
Hash identifier:          405RRIZZ7Uw27LyDFnmT29MD2c9ro46qvdgJZSh3Br8=
Subject key identifier:   CB:3F:F7:CA:3B:B0:00:1C:6F:47:83:44:11:CF:F8:B3:8C:10:0A:C7
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B59A1C7953BCC078862460D50
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6178a435-c337-3f47-b5de-1740f2e1be1d.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     3356
IP address blocks:        192.85.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:c7:95:3b:cc:07:88:62:46:0d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=5dc9b2c5-536f-4f07-b7f5-5ae6415ed5d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:c9:03:5d:dc:bb:6d:ee:84:2b:7e:6e:22:
                    64:41:55:92:e0:0a:50:9c:f2:e7:43:5a:85:40:80:
                    19:9d:ad:f9:b3:4e:48:cd:b4:ee:8f:8f:c7:1a:20:
                    9c:cc:d3:a1:e6:7c:4f:22:c3:7b:b0:29:ca:58:65:
                    d1:31:8a:2b:4d:ef:05:83:2b:2c:15:b2:87:08:af:
                    f6:bf:27:69:e2:3c:13:39:7a:60:9b:7a:ba:b2:5c:
                    03:af:06:b1:53:6c:a5:87:6d:f7:8a:60:65:35:ac:
                    a7:72:7b:46:49:24:63:b4:e1:02:23:16:6d:a3:4a:
                    be:68:d5:88:0c:6c:e2:e9:bf:11:96:41:50:a5:0f:
                    23:11:ed:87:c3:71:b5:66:a6:1b:6b:71:2a:22:14:
                    c9:81:ec:9b:f4:ab:9f:25:2c:d0:bb:cf:ff:48:ab:
                    c3:a8:db:40:25:39:d4:fe:67:8d:f5:01:32:71:3d:
                    5b:4e:07:90:d6:58:95:65:7d:e6:67:af:36:e9:b0:
                    82:7d:7a:48:10:91:fa:32:16:67:6e:b9:36:e5:8b:
                    f1:04:a7:db:3c:a0:03:ec:6e:38:ab:82:fc:d3:85:
                    a6:9b:60:b9:59:d0:34:d4:6d:c7:f4:2f:76:ae:e3:
                    d5:05:08:a7:e2:8d:38:3f:e9:b8:5b:2d:c9:79:6e:
                    7a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3F:F7:CA:3B:B0:00:1C:6F:47:83:44:11:CF:F8:B3:8C:10:0A:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6178a435-c337-3f47-b5de-1740f2e1be1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b5:02:51:f4:4c:94:e6:ce:ec:c5:95:00:a0:ad:a9:3e:3e:
         91:6c:13:4c:ad:91:c5:28:7f:4b:08:1c:f8:ca:b9:2f:33:f7:
         72:1d:a4:be:0a:8d:15:a2:47:e6:15:9c:68:8f:f6:cb:df:f0:
         2e:76:b2:fd:fe:70:6d:70:5e:d2:af:1a:4b:77:ee:0f:a8:18:
         4f:69:9c:7e:77:40:93:72:65:62:41:9e:c4:21:a4:7c:33:37:
         6c:7b:94:8b:d7:82:bd:73:51:db:66:d0:71:c1:a9:53:0c:9d:
         c9:a9:ea:34:d1:04:b9:85:95:14:00:8b:36:f7:c5:8a:f7:31:
         fa:35:e6:17:70:ae:7e:40:8c:81:13:47:2d:77:eb:43:eb:1d:
         4c:0a:3c:98:ee:2e:95:92:f7:ee:6f:5e:db:72:4f:3d:e1:d6:
         5a:bb:7c:8f:66:b1:c5:93:9f:74:40:a0:ba:4d:b7:13:00:8a:
         4f:6d:61:66:d3:05:36:48:e2:06:ff:b3:e5:22:8d:bb:b4:62:
         7c:29:4f:0b:f7:01:5b:dd:2e:02:ef:87:d7:9f:dd:98:49:3e:
         cd:99:76:56:49:e6:fc:3a:63:01:10:00:15:f5:2b:77:fa:54:
         a5:cf:10:24:40:3b:a1:ef:56:c0:09:2c:47:60:11:33:2c:f3:
         2f:9b:5e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:26 2025 by rpki-client