Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/620b5565-3e1d-374f-993f-56e5a13bc7bf.roa
File:                     620b5565-3e1d-374f-993f-56e5a13bc7bf.roa (raw, json)
Hash identifier:          mSvpZTXkpkYWlACYqc31uYmJ979blunYPUzoTq3lyhg=
Subject key identifier:   D5:2D:CA:0D:D1:B3:D1:10:B8:F9:C7:6E:51:89:23:C7:5C:E9:1B:AC
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BD65F3CCC5A774B310E78
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/620b5565-3e1d-374f-993f-56e5a13bc7bf.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     202
IP address blocks:        168.87.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:d6:5f:3c:cc:5a:77:4b:31:0e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=4e10fe2d-5960-428f-86dc-8c4550c8e985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4a:cd:6f:16:bd:da:25:66:8b:6f:72:12:04:
                    37:21:d1:94:60:94:e5:f8:cb:88:19:a1:77:93:71:
                    ab:86:33:62:7f:d0:d2:27:78:2f:2d:75:de:d9:ca:
                    4b:df:86:10:09:71:1f:51:ac:a2:39:f4:cc:93:c0:
                    be:5f:6f:3f:99:81:70:bd:af:83:4e:e1:56:be:a5:
                    20:d0:82:ef:c9:f9:16:9f:42:e9:25:7b:8c:03:f1:
                    65:ba:de:c5:91:b0:94:97:9f:b5:9f:fc:a6:97:5e:
                    63:bd:c3:72:72:88:14:c0:f5:e3:30:3f:21:bc:9e:
                    10:48:4f:59:be:a1:bf:4c:a1:ef:7c:3f:96:f5:5e:
                    58:22:4f:3b:68:45:c0:ef:9d:b6:41:c3:b5:4c:e1:
                    3f:b5:1a:c3:a1:70:ab:8a:00:28:1f:59:5a:2a:d5:
                    0b:66:9b:f8:81:f3:f3:ab:ce:3f:7a:36:e8:6f:30:
                    12:c4:c8:96:d0:62:a4:a5:30:18:ad:62:78:91:04:
                    9c:13:e6:de:e3:a8:71:cd:01:be:06:30:e1:a4:79:
                    8d:7e:fa:0c:8b:d3:8d:a2:e0:8e:8d:bd:bd:bf:18:
                    b7:47:2b:2e:29:89:10:fd:57:f6:d6:1f:0a:0e:67:
                    c5:70:8a:07:28:e1:e2:a5:1a:5e:0c:40:36:02:89:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2D:CA:0D:D1:B3:D1:10:B8:F9:C7:6E:51:89:23:C7:5C:E9:1B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/620b5565-3e1d-374f-993f-56e5a13bc7bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:ef:90:3c:a7:8c:2e:67:9b:ba:9e:02:73:c9:42:0b:eb:74:
         d5:57:ed:1d:89:e0:d6:71:fd:82:4a:cf:64:72:50:5b:d4:7a:
         e2:38:b3:7b:67:25:58:b2:2f:45:3e:5f:77:e4:a9:34:11:57:
         e3:7d:bc:55:6a:ff:86:e9:4c:ad:e9:ed:4f:9c:2f:32:7b:51:
         f9:95:8f:9f:54:08:3e:bc:0f:b5:17:b3:d8:ce:94:4e:7c:e0:
         00:fa:41:d1:10:b7:a0:ce:9f:49:ec:a7:c6:a4:07:86:6e:0c:
         d0:9a:6c:27:31:4a:6e:03:c7:b9:5d:d7:89:96:cd:4e:74:d9:
         0c:2d:cc:e2:39:82:78:9d:4c:7d:c2:be:0e:81:ea:c8:88:da:
         98:58:b3:97:1f:c5:85:fb:b9:fd:14:89:ec:61:db:99:b6:e0:
         c6:11:75:e0:ea:ac:61:84:d9:9a:a3:88:02:34:02:71:ae:fe:
         07:94:d2:19:92:c7:d7:f5:78:61:75:06:4f:2f:3d:20:bf:02:
         09:66:1b:d5:02:2a:5b:30:a4:70:a4:df:42:08:ad:30:82:47:
         67:c0:eb:93:d6:82:bd:e6:51:fb:f2:5c:85:e0:57:65:df:24:
         64:fa:7e:f2:79:ba:07:5c:6b:ce:86:26:de:2b:ae:77:a6:7d:
         af:c2:d0:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9ZfPMxad0sxDngwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
NGUxMGZlMmQtNTk2MC00MjhmLTg2ZGMtOGM0NTUwYzhlOTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkrNbxa92iVmi29yEgQ3IdGUYJTl+MuIGaF3
k3GrhjNif9DSJ3gvLXXe2cpL34YQCXEfUayiOfTMk8C+X28/mYFwva+DTuFWvqUg
0ILvyfkWn0LpJXuMA/Flut7FkbCUl5+1n/yml15jvcNycogUwPXjMD8hvJ4QSE9Z
vqG/TKHvfD+W9V5YIk87aEXA7522QcO1TOE/tRrDoXCrigAoH1laKtULZpv4gfPz
q84/ejbobzASxMiW0GKkpTAYrWJ4kQScE+be46hxzQG+BjDhpHmNfvoMi9ONouCO
jb29vxi3RysuKYkQ/Vf21h8KDmfFcIoHKOHipRpeDEA2AolgZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNUtyg3Rs9EQuPnHblGJI8dc6RusMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjIwYjU1NjUtM2UxZC0z
NzRmLTk5M2YtNTZlNWExM2JjN2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJXvkDynjC5nm7qeAnPJQgvrdNVX7R2J4NZx/YJKz2RyUFvUeuI4s3tn
JViyL0U+X3fkqTQRV+N9vFVq/4bpTK3p7U+cLzJ7UfmVj59UCD68D7UXs9jOlE58
4AD6QdEQt6DOn0nsp8akB4ZuDNCabCcxSm4Dx7ld14mWzU502QwtzOI5gnidTH3C
vg6B6siI2phYs5cfxYX7uf0Uiexh25m24MYRdeDqrGGE2ZqjiAI0AnGu/geU0hmS
x9f1eGF1Bk8vPSC/AglmG9UCKlswpHCk30IIrTCCR2fA65PWgr3mUfvyXIXgV2Xf
JGT6fvJ5ugdca86GJt4rrnemfa/C0NI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:12:45 2025 by rpki-client