Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7273b142-8d71-3ca3-9dc7-09643387244d.roa
File:                     7273b142-8d71-3ca3-9dc7-09643387244d.roa (raw, json)
Hash identifier:          +w/6X2uesSGuQEhpwBvtFZyIr6FAyr5NopnD0SUQpbA=
Subject key identifier:   A8:3F:73:CE:9C:3F:8F:17:87:13:C7:21:3E:8E:00:28:9A:6B:B6:6D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BC05D2E9EDA1A86280310
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7273b142-8d71-3ca3-9dc7-09643387244d.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     3356
IP address blocks:        168.87.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:c0:5d:2e:9e:da:1a:86:28:03:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=9b4f7ea3-e151-4ca1-9e49-f31186e48e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:75:50:62:c0:d6:4c:1f:b5:f0:4c:fd:b9:84:
                    c2:bb:12:0f:7b:cb:f8:dc:d2:c8:e9:7d:cb:67:b5:
                    e0:5e:a3:97:ba:ff:5b:e7:7d:88:82:24:19:30:62:
                    15:29:59:98:d8:2b:6e:e5:a6:a7:ec:2d:7f:ac:c7:
                    3b:20:44:46:03:e6:0e:87:d7:fd:f1:65:4d:b3:4c:
                    a4:18:d8:a9:1f:0b:cb:f2:9d:47:7b:52:85:36:8f:
                    b3:ea:a7:b0:f5:9c:54:6e:a3:08:57:85:1a:77:82:
                    73:45:1e:bd:83:04:a8:32:63:4c:94:2b:5d:b3:e7:
                    4e:7b:3a:35:8c:a7:84:fa:7f:7d:b8:36:78:94:84:
                    77:e4:b5:fd:97:8a:85:8e:29:ba:01:f0:0b:66:b9:
                    66:5b:a9:b2:f0:1a:7b:75:2c:bf:04:49:9e:5f:51:
                    cf:60:cd:9c:70:ab:4d:42:3f:7e:87:64:9c:d1:7f:
                    e6:39:4f:00:a3:ee:88:19:de:03:9e:51:2b:44:c1:
                    f3:9b:81:d8:95:80:a3:40:8e:fd:20:7a:df:46:5c:
                    f5:e6:d8:ea:3b:40:ec:46:71:33:d8:b3:e9:49:ff:
                    dd:2b:72:d4:b5:bc:ae:1d:ec:0e:63:82:a3:a4:cb:
                    31:cd:22:7b:8b:34:13:89:3a:d4:89:58:d8:44:f6:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3F:73:CE:9C:3F:8F:17:87:13:C7:21:3E:8E:00:28:9A:6B:B6:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7273b142-8d71-3ca3-9dc7-09643387244d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:47:93:d8:90:b4:bf:c4:25:17:2e:66:55:3d:3b:80:89:aa:
         bb:14:d0:d6:20:ea:a9:27:e9:93:01:86:59:b2:ff:ea:37:b8:
         e8:e9:a0:ad:5a:b2:e8:61:6a:b0:c4:06:c5:fd:77:96:5a:e0:
         d2:68:72:5b:51:c7:45:fb:57:15:69:75:2d:21:f1:12:14:ad:
         79:ee:12:56:01:65:eb:39:7a:a6:ac:d1:f9:05:e3:56:33:e0:
         25:7c:91:32:1c:6c:ea:ff:66:b2:14:7e:ae:46:42:ad:70:da:
         6a:b7:0a:42:e4:ea:a4:ea:98:b7:90:b8:53:f0:75:e3:4c:bf:
         0f:a4:74:bf:48:bb:35:2d:c5:74:2a:f5:db:91:22:35:e2:50:
         00:4b:ab:61:00:95:83:66:e3:db:2d:5b:7d:3e:8f:3a:98:8e:
         c9:90:aa:ad:97:d7:8b:2c:35:ed:2c:cd:c4:46:db:4c:81:b7:
         a1:5a:78:87:34:15:1e:75:a0:70:ae:83:b8:40:e1:ff:7c:f8:
         d3:98:12:50:21:97:3d:79:82:a3:60:7b:c1:ab:df:6c:c5:35:
         d8:ee:f4:8c:50:bf:c9:7a:d7:36:56:54:11:83:cb:ab:ee:c2:
         93:a0:9c:ee:b9:19:a4:9e:fc:e8:b4:8e:a4:ed:44:17:85:86:
         3e:ac:67:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:17:04 2025 by rpki-client