Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8be98fc4-20fb-3861-94fd-3b257e485727.roa
File:                     8be98fc4-20fb-3861-94fd-3b257e485727.roa (raw, json)
Hash identifier:          9D56WeIRxWNR8cfnepCvSMPA8X8fMorY+5jfc3CaPjE=
Subject key identifier:   F8:90:ED:FB:0D:5D:31:7D:3D:0A:FC:D7:92:8C:07:99:67:CF:A9:6E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B59A1C9489146AB8D6C8C7940
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8be98fc4-20fb-3861-94fd-3b257e485727.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     202
IP address blocks:        170.30.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:c9:48:91:46:ab:8d:6c:8c:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=546626d0-bcf1-45a2-a632-06f6bfd4aae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3a:30:9e:44:c9:a1:1c:17:f4:d8:6b:74:bc:
                    59:7e:f0:5a:09:ac:43:05:06:f5:63:7b:90:e0:0f:
                    ee:df:df:9f:b8:33:90:00:ff:34:9a:46:8c:5f:45:
                    23:d0:c7:90:6c:cd:80:98:58:df:3e:09:e8:ea:4d:
                    45:d0:62:d9:9e:5f:f7:02:53:dc:07:ad:3d:42:0e:
                    7a:fd:ae:c1:e2:bd:c2:8d:44:d1:19:a4:14:4d:eb:
                    67:32:bd:30:f5:80:93:3c:7a:c2:58:a7:51:d5:45:
                    c0:b6:ee:bb:5f:72:8d:6a:cb:9c:be:25:b4:09:24:
                    d8:4f:d0:11:da:d0:91:f5:d1:0a:46:f8:90:03:a5:
                    7b:db:11:88:d3:ab:6d:da:2f:eb:6a:9b:09:9a:a4:
                    23:0f:64:db:98:dd:ed:e9:cd:96:dc:1e:54:81:35:
                    c7:09:a2:a8:f9:d6:ec:e9:cc:eb:67:7b:cb:0a:3a:
                    10:2b:85:6e:e9:49:95:79:80:7d:e7:a4:ee:f6:c0:
                    8e:6a:07:64:75:fc:a8:2f:25:e7:ff:a3:27:d9:3f:
                    be:1e:a2:a8:34:9b:2f:81:8d:1e:70:53:51:78:81:
                    0a:73:47:87:17:73:7c:a5:0b:8e:28:08:ec:64:82:
                    13:a9:6d:ca:9f:ec:5e:26:aa:2a:14:17:e5:0c:24:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:90:ED:FB:0D:5D:31:7D:3D:0A:FC:D7:92:8C:07:99:67:CF:A9:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8be98fc4-20fb-3861-94fd-3b257e485727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:5b:b0:96:d2:c3:bb:e3:a3:99:73:9a:c4:3a:19:85:d5:09:
         69:45:a2:ed:89:9a:28:76:54:4e:b5:91:0a:f8:c0:05:49:e5:
         fa:2f:06:58:33:12:4a:9a:97:cb:04:98:61:fa:b9:04:1f:33:
         e2:ff:2c:f6:a1:ed:2d:8d:29:9f:16:2d:aa:f9:15:df:30:3d:
         9d:b3:f8:99:f3:3c:cd:b8:0f:f1:4a:eb:02:52:2d:e7:3a:92:
         1b:47:79:76:a3:c4:af:f9:6c:96:18:be:00:48:1c:5b:1c:39:
         b6:16:4d:8b:da:5e:86:9b:65:d6:47:c8:7b:3b:57:26:35:d6:
         d7:3c:19:99:36:2f:b5:f4:0a:14:33:d5:b0:80:59:45:d2:b7:
         a4:f6:90:1e:d3:00:35:58:f7:18:01:1a:d8:83:92:33:30:dc:
         40:30:74:8f:41:aa:8c:52:5a:08:fb:c9:4b:47:12:c9:de:73:
         0b:55:63:a1:f8:c4:07:94:70:4a:8c:ae:1f:1a:e1:0d:6a:56:
         bb:06:df:83:5a:5c:ac:19:8a:c6:02:1f:63:5a:2e:0d:ad:8a:
         4a:6b:6a:d7:71:4f:45:25:12:57:4b:f9:28:e0:f1:26:f1:c5:
         a7:89:6c:fb:5d:35:44:d4:40:cd:e9:ab:25:6e:36:4e:21:01:
         3f:78:23:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:24 2025 by rpki-client