Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61928c84-e37c-3ece-9d09-31dc2613bdbc.roa
File:                     61928c84-e37c-3ece-9d09-31dc2613bdbc.roa (raw, json)
Hash identifier:          KZ/oetWUlQqMeo7tSNEXVVblt9GQNaFBIzD4/pnpIXw=
Subject key identifier:   49:73:AD:B6:2F:03:3D:F7:1A:FD:A3:B8:D8:E4:AD:A7:D9:3C:60:62
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BD6395081C705DC3A3CC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61928c84-e37c-3ece-9d09-31dc2613bdbc.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     3356
IP address blocks:        168.87.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:d6:39:50:81:c7:05:dc:3a:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=020774fe-1423-443d-a5b8-239ca9b1f656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:18:8b:0e:8b:2c:ce:06:dd:56:0a:d7:ac:f1:
                    94:b9:62:d8:59:c5:28:2c:bf:76:6b:56:09:e8:82:
                    0d:92:99:a8:dd:90:2c:03:a8:c2:5f:f8:c5:bb:6b:
                    a4:fd:1b:3c:a9:29:b4:41:18:2a:b8:bc:89:91:b1:
                    a5:ea:f7:d7:17:55:cc:14:d2:a2:25:bb:05:07:5e:
                    dc:fc:42:3f:a5:20:66:df:89:fb:06:e5:7e:5e:3a:
                    32:4b:33:9c:d4:92:b3:e5:99:cd:fd:07:ad:4f:95:
                    ab:2a:2a:1d:5e:30:c4:dc:88:c0:6d:26:66:ce:6f:
                    28:9c:74:f8:5c:60:7c:e9:ca:44:14:47:c0:b5:35:
                    64:8b:3f:96:38:7f:2e:d5:01:78:6a:d2:fe:7b:29:
                    1f:76:b4:85:cc:0e:80:11:51:1c:72:27:6d:0c:4c:
                    e3:3d:45:dd:7f:61:14:6c:b9:6a:f9:51:cd:d2:c2:
                    37:a7:e3:8b:54:51:9c:92:8a:cd:9d:57:ec:06:f2:
                    eb:82:1b:4b:8b:a0:17:25:9e:11:e9:01:cf:55:2a:
                    81:8e:dd:aa:7c:a7:22:09:cd:e1:f0:a0:ee:6b:39:
                    95:2c:0d:1c:4e:d8:81:7c:2e:90:d1:c5:82:3c:64:
                    72:d3:5c:5b:fe:37:f7:45:c9:d3:62:cb:93:4d:5a:
                    7b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:73:AD:B6:2F:03:3D:F7:1A:FD:A3:B8:D8:E4:AD:A7:D9:3C:60:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61928c84-e37c-3ece-9d09-31dc2613bdbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:27:ff:19:5a:ac:6f:1e:0e:00:d7:b9:13:3b:72:f4:03:2d:
         9a:21:6c:ee:39:db:a1:09:6d:b3:d1:95:73:19:bd:cb:a8:1f:
         c0:31:64:b7:d1:fb:ed:9e:35:fd:47:91:d1:99:8c:06:7f:64:
         22:45:41:d8:52:ba:74:8c:60:ac:1d:84:6a:4e:59:92:24:4c:
         cd:21:cc:85:2b:41:33:89:79:14:0a:f6:ac:dd:f4:e8:28:a6:
         5e:65:7b:1e:73:85:67:a1:63:09:6a:b8:00:af:50:27:b6:95:
         27:39:73:1f:21:2d:a3:31:f7:eb:79:35:18:63:d5:87:88:63:
         54:9c:16:53:20:7e:c3:dc:f7:57:60:38:35:3e:a5:50:09:3a:
         d1:e2:d9:fa:58:ef:83:78:a6:6d:1e:f5:f4:51:4a:16:26:2b:
         bd:7e:29:73:49:ed:ba:99:e7:13:0b:07:90:7b:77:1a:31:12:
         5b:7e:c3:97:c6:83:9f:5d:77:99:2b:62:59:cc:0c:32:cb:90:
         9c:10:a0:9a:7f:16:d3:79:af:20:36:78:03:05:68:0b:ed:28:
         b2:13:e9:4f:b3:f0:f5:9d:16:e6:23:ae:54:a2:f2:44:4e:d3:
         22:e5:0f:d2:61:ba:9e:9a:e7:78:6d:9b:9c:ef:ba:34:a2:d7:
         1b:5f:f7:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9Y5UIHHBdw6PMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
MDIwNzc0ZmUtMTQyMy00NDNkLWE1YjgtMjM5Y2E5YjFmNjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhiLDosszgbdVgrXrPGUuWLYWcUoLL92a1YJ
6IINkpmo3ZAsA6jCX/jFu2uk/Rs8qSm0QRgquLyJkbGl6vfXF1XMFNKiJbsFB17c
/EI/pSBm34n7BuV+XjoySzOc1JKz5ZnN/QetT5WrKiodXjDE3IjAbSZmzm8onHT4
XGB86cpEFEfAtTVkiz+WOH8u1QF4atL+eykfdrSFzA6AEVEccidtDEzjPUXdf2EU
bLlq+VHN0sI3p+OLVFGckorNnVfsBvLrghtLi6AXJZ4R6QHPVSqBjt2qfKciCc3h
8KDuazmVLA0cTtiBfC6Q0cWCPGRy01xb/jf3RcnTYsuTTVp78QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFElzrbYvAz33Gv2juNjkrafZPGBiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjE5MjhjODQtZTM3Yy0z
ZWNlLTlkMDktMzFkYzI2MTNiZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4n/xlarG8eDgDXuRM7cvQDLZohbO4526EJbbPRlXMZvcuoH8AxZLfR
++2eNf1HkdGZjAZ/ZCJFQdhSunSMYKwdhGpOWZIkTM0hzIUrQTOJeRQK9qzd9Ogo
pl5lex5zhWehYwlquACvUCe2lSc5cx8hLaMx9+t5NRhj1YeIY1ScFlMgfsPc91dg
ODU+pVAJOtHi2fpY74N4pm0e9fRRShYmK71+KXNJ7bqZ5xMLB5B7dxoxElt+w5fG
g59dd5krYlnMDDLLkJwQoJp/FtN5ryA2eAMFaAvtKLIT6U+z8PWdFuYjrlSi8kRO
0yLlD9Jhup6a53htm5zvujSi1xtf96A=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:56:20 2025 by rpki-client