Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/73ed8c92-99e2-3570-aeb9-c8fb6944f891.roa
File:                     73ed8c92-99e2-3570-aeb9-c8fb6944f891.roa (raw, json)
Hash identifier:          JdNs9FUWcU7CyZaQMtprKHISH5sLOn2nCc2IKDuZpeY=
Subject key identifier:   E6:95:D4:A1:84:53:4C:2A:D7:D1:41:8D:34:58:BE:AD:C7:CA:1F:A5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B5DD1EEFA97A7FEF4ABE1A300
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/73ed8c92-99e2-3570-aeb9-c8fb6944f891.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     203
IP address blocks:        168.87.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:ee:fa:97:a7:fe:f4:ab:e1:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=6e35bfcf-6ad4-49bd-843d-482f93cfeac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:86:f9:75:d2:d4:a4:2e:0c:f5:83:b2:c7:
                    3b:93:e7:21:36:da:35:77:b2:19:92:7f:61:8b:04:
                    7e:67:55:aa:34:21:f3:73:2d:de:25:90:7c:9e:3a:
                    eb:83:69:a4:a4:86:31:2a:44:ae:f1:13:5f:57:92:
                    b5:4b:74:5d:0b:4e:c7:cb:7c:d2:01:c3:b4:ec:6a:
                    35:a3:14:06:ed:c0:9c:ef:a5:c3:be:29:ca:11:4f:
                    43:7a:66:88:97:51:63:b9:a2:2f:16:17:43:ff:e6:
                    9b:67:97:7a:ce:7b:cc:47:1a:5b:20:a7:a9:f5:88:
                    fd:92:f4:18:92:e1:14:4f:29:12:f6:17:a8:f6:1f:
                    21:84:c2:d1:3e:6b:20:9b:da:fd:a6:7d:ad:b2:1a:
                    33:9c:84:65:b0:5a:d9:be:63:a6:6d:0c:ae:94:f3:
                    39:1c:e2:3a:87:ff:fc:d8:8e:e3:d7:51:fd:8e:c9:
                    fe:ff:00:ba:5e:2f:b0:b6:f8:f6:d9:c3:7b:55:10:
                    f0:fd:f1:1e:7c:fa:30:59:70:4d:cc:e5:13:8d:89:
                    8a:9d:7c:5c:6c:b4:ab:c6:0b:c1:b2:fb:7f:ed:c2:
                    91:99:94:21:af:35:c1:f7:f1:65:7a:29:de:50:d7:
                    02:35:5a:24:e0:5f:cb:8e:2e:d1:dd:d6:f9:09:6f:
                    08:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:95:D4:A1:84:53:4C:2A:D7:D1:41:8D:34:58:BE:AD:C7:CA:1F:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/73ed8c92-99e2-3570-aeb9-c8fb6944f891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:2f:4a:91:58:5c:f9:d2:e6:8a:ef:dd:e0:60:bd:e5:49:c9:
         30:c5:12:f4:33:cb:2d:87:4f:05:ce:58:7e:f6:b7:71:c2:b1:
         17:6f:82:2c:e4:8c:71:d0:de:54:2b:56:55:ae:82:19:ba:f9:
         5b:0f:09:05:c8:ff:89:03:95:59:d4:41:2d:10:f8:24:5f:ce:
         cf:e0:e8:ac:08:50:4d:da:be:b4:3f:1e:50:2b:b2:67:d2:99:
         f0:0c:51:ff:98:09:2d:a2:a9:f0:a2:63:be:6d:d3:bf:da:17:
         4f:74:97:f7:f1:16:73:f2:fb:69:c4:57:ae:db:ad:8c:1e:be:
         cf:dc:e9:5a:f0:f5:46:b4:13:ee:9f:d1:49:ae:fa:a4:64:93:
         a2:56:ae:38:d6:7e:e5:d8:2b:cb:94:75:47:9e:d6:eb:a8:da:
         3d:d8:cb:fd:67:e1:80:7d:fc:97:b2:f4:fc:d9:76:40:31:ee:
         1d:af:24:52:82:c9:77:29:4a:d4:a4:e7:ee:5a:08:89:52:78:
         7b:88:d8:6a:e5:00:09:6c:84:9a:21:f3:b8:19:a9:17:63:99:
         47:1b:52:39:82:f2:23:de:a5:a4:77:3a:e4:2d:8a:10:11:d4:
         44:37:99:04:cf:fa:c5:06:16:44:45:db:c2:dc:af:43:a3:26:
         87:42:5c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:30:58 2025 by rpki-client