Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/81271b48-f4fe-3ca3-9c8b-057c15ff6eda.roa
File:                     81271b48-f4fe-3ca3-9c8b-057c15ff6eda.roa (raw, json)
Hash identifier:          /LRs7cXK78qbTZN4yF+g3ua2UgewV1cV9b8CyemyHAQ=
Subject key identifier:   AD:84:21:1B:01:5B:FE:8E:D6:D6:36:B3:E5:7F:DF:4A:53:F4:24:35
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B4A472193DB77FA85A2FFA700
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/81271b48-f4fe-3ca3-9c8b-057c15ff6eda.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     202
IP address blocks:        192.85.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:21:93:db:77:fa:85:a2:ff:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=2b085663-1077-4495-b6af-fd1c4c001604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:55:e2:f2:d1:80:36:e1:df:4c:04:af:90:8a:
                    3a:0d:e4:b8:69:54:f8:0c:7e:ed:51:f0:a5:c5:1b:
                    65:95:a2:53:4d:50:e7:b3:d6:59:1a:ca:85:38:3d:
                    c9:e8:89:de:44:3d:2f:d6:b4:1f:23:af:e4:16:e9:
                    31:a3:66:31:d9:c8:a8:cf:99:f2:4d:22:4f:aa:3d:
                    10:16:0b:22:b0:a1:b5:70:f3:51:e6:a1:77:2b:14:
                    76:0f:77:1d:33:53:20:94:e6:81:e7:68:0f:11:80:
                    b0:5c:05:bc:60:d3:d1:f4:c1:bd:86:61:84:05:c0:
                    48:43:13:0d:fa:cd:6e:b0:84:c9:f5:d5:64:96:2a:
                    eb:14:8a:39:da:20:e6:cc:b7:bf:73:df:7d:45:e3:
                    ae:a5:65:b8:6f:85:b1:f5:88:86:5b:c9:17:32:fb:
                    22:b7:eb:b0:05:07:be:9d:89:98:12:f4:7e:94:20:
                    0b:ea:ae:f2:3d:f6:f0:65:bc:05:a3:df:12:f1:c1:
                    cd:10:5e:79:02:15:74:a4:1d:cb:2f:65:8a:23:9f:
                    08:a7:32:3a:61:ec:4d:a0:00:3b:1b:53:86:45:14:
                    da:18:bf:ce:70:89:76:e5:88:49:c2:67:9f:69:b0:
                    23:cc:26:35:56:9c:79:8f:3a:d1:71:94:74:95:c5:
                    47:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:84:21:1B:01:5B:FE:8E:D6:D6:36:B3:E5:7F:DF:4A:53:F4:24:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/81271b48-f4fe-3ca3-9c8b-057c15ff6eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:45:83:3e:cb:c2:1a:c7:aa:f3:08:23:1a:a2:8d:9b:5c:f6:
         cd:3c:6a:3b:0e:40:2d:94:27:22:7a:26:24:e1:b1:f8:9d:9c:
         73:31:5e:34:ec:bf:fe:aa:4b:64:82:86:1f:25:8b:44:2c:bc:
         36:31:b7:be:c8:a2:42:89:f0:f8:52:cb:f1:26:94:01:ba:55:
         7d:58:7b:67:7c:2a:df:86:1b:f9:31:07:a1:3d:01:8a:37:dc:
         ea:ef:fb:eb:de:41:4d:21:a8:99:10:44:40:06:0d:a8:23:b5:
         42:dd:4f:d7:68:df:69:e6:36:74:2e:76:42:7c:98:c5:78:f8:
         ef:1d:3f:3e:b7:6a:8b:fc:32:b2:92:c3:a1:f5:b2:37:7a:2e:
         c3:cb:f4:a4:ec:ae:f7:58:89:d3:42:29:52:f7:6d:94:f0:fa:
         4d:93:47:72:cc:3d:65:f8:ac:82:dd:32:f4:e4:83:54:1f:8b:
         93:56:2b:88:2a:10:ea:03:65:98:77:e2:2b:ec:a4:80:1f:08:
         83:5f:de:24:65:ee:96:c2:00:30:7b:73:16:82:ab:40:e6:36:
         0b:e9:a8:ef:ad:69:f5:0b:12:b3:ca:78:e5:1d:d0:8f:97:5d:
         b2:e1:11:67:e9:92:8f:4c:c4:29:1d:ca:35:fd:d7:25:06:18:
         ca:b7:84:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:00:01 2025 by rpki-client