Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/82d9ffc6-8251-3778-bfcc-671c7bbffbb7.roa
File:                     82d9ffc6-8251-3778-bfcc-671c7bbffbb7.roa (raw, json)
Hash identifier:          eAv9cklPsR+DiybWHug/zBsabM5snvcM/0rDd5xMdfE=
Subject key identifier:   08:EC:BC:4E:85:25:54:AA:43:75:2E:58:E7:82:8D:6E:94:62:FE:5B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BD45AA643EE164F975B00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/82d9ffc6-8251-3778-bfcc-671c7bbffbb7.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     3356
IP address blocks:        192.85.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:d4:5a:a6:43:ee:16:4f:97:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=c2ab03f1-8937-4009-aa93-592cb840b709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:22:03:d8:86:a4:43:28:ee:a1:6e:54:f2:17:
                    39:a3:c5:7f:4c:1b:09:2b:b5:99:a8:2b:72:6b:8a:
                    a1:6f:6a:f0:ee:7f:fb:55:c5:92:3e:50:ca:83:0a:
                    30:46:44:da:c3:d6:99:4e:c0:30:7b:cf:41:2e:ee:
                    d3:7b:14:7f:ee:e8:de:39:02:50:72:09:38:ea:8a:
                    69:ac:45:c5:74:77:7c:92:82:c5:9f:b5:0a:78:d5:
                    ea:f7:a0:e9:b1:f6:4e:1b:d9:de:7b:01:ea:48:12:
                    dd:e9:27:52:5c:bb:b9:a4:af:58:98:67:57:a8:9b:
                    0d:ad:05:9f:93:1e:ac:33:59:7d:85:40:f5:da:51:
                    2c:0e:91:b6:2d:c1:f6:e7:b3:a1:37:1b:26:10:92:
                    e1:ce:4f:0f:d4:fc:18:52:19:59:18:7c:27:57:7b:
                    01:91:f8:fa:bb:56:b6:20:bc:19:de:0f:f5:d0:39:
                    2f:94:84:63:1f:f1:0d:5c:5a:d6:b8:2d:77:35:cb:
                    78:c9:a4:67:02:62:e2:66:78:d5:c1:e3:6b:e9:52:
                    d6:c0:cf:48:52:90:b7:c6:65:56:d9:3d:69:69:ee:
                    3d:dd:02:df:96:a1:e7:c2:7d:3c:1d:69:46:b2:18:
                    fd:c9:9f:d3:62:96:62:58:ff:af:80:4f:d3:d8:33:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EC:BC:4E:85:25:54:AA:43:75:2E:58:E7:82:8D:6E:94:62:FE:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/82d9ffc6-8251-3778-bfcc-671c7bbffbb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b0:01:75:47:05:a3:af:0c:73:3a:43:56:e7:0c:dc:b9:65:
         43:32:e1:f9:2f:df:21:75:d6:fc:74:d4:42:02:21:e6:27:51:
         05:e7:2e:9c:1f:1d:9a:46:35:6d:cd:55:3d:27:56:9f:94:1a:
         b3:56:ca:24:e2:38:aa:08:79:5a:a8:20:b7:b4:63:d6:96:3d:
         40:f5:f7:f6:3c:5b:8d:b8:13:0f:49:56:b8:76:b4:2f:66:63:
         dc:17:f6:c3:3c:6d:9a:57:92:12:3a:2c:3e:33:02:98:04:f7:
         94:62:5e:35:44:31:25:1d:f6:fb:ac:c6:d1:18:83:f0:dd:51:
         de:62:95:11:19:ed:4f:9c:7b:cc:a3:83:1d:8c:62:52:61:fc:
         91:7d:ff:87:25:ca:0d:cf:f2:d4:0e:04:d6:a4:32:5d:36:96:
         43:8c:42:aa:04:37:76:1a:b7:a3:fd:a6:9a:66:c2:a1:24:0d:
         9d:80:67:7a:64:cc:9a:9d:f8:03:b7:71:c8:dd:bf:8e:a6:28:
         17:d7:8a:7e:b6:14:3e:dc:2b:16:b3:59:a7:3b:ae:73:14:bf:
         03:3e:ab:47:7e:6b:6b:85:3a:fc:b8:99:92:31:81:9d:5f:78:
         c5:ca:19:b3:71:06:34:fd:aa:ab:58:fd:ac:32:d5:37:11:6e:
         eb:ec:60:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:09:30 2025 by rpki-client