Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9ff402d8-dbec-34b8-8214-b0105f9109e4.roa
File:                     9ff402d8-dbec-34b8-8214-b0105f9109e4.roa (raw, json)
Hash identifier:          HzXfZ1AyTuqV1nnAprnRYyp59L2b+3w2nmHUgkHzfZU=
Subject key identifier:   86:9B:92:F7:E9:ED:48:A0:6F:54:57:C3:14:32:C7:16:EE:32:D9:13
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849CBCFA9145BD8C226C16A1940
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9ff402d8-dbec-34b8-8214-b0105f9109e4.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     202
IP address blocks:        206.164.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a9:14:5b:d8:c2:26:c1:6a:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=e31ad494-9255-4773-8d1d-a1d2f58e43bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:26:1b:00:d5:88:92:8b:9a:16:60:67:08:86:
                    42:2a:59:ad:c0:a2:57:56:01:12:69:f0:fd:3c:8f:
                    be:ac:f4:7f:0f:94:46:c9:3f:f4:3e:d4:94:2b:b7:
                    c7:86:1c:98:82:3a:85:06:2f:64:b0:3a:c5:25:f5:
                    9c:be:a0:2a:e9:10:5e:5f:96:0f:0c:cf:1f:87:21:
                    a6:51:dd:d8:b5:e5:cd:2c:35:ef:c8:f6:7d:c5:a5:
                    38:5f:2e:56:1c:ed:91:60:21:da:49:4f:0f:f3:fa:
                    f7:fd:e8:dc:ac:1a:fe:cf:1f:2f:81:dc:f9:a8:83:
                    5b:56:5e:08:45:2b:f4:38:63:d5:0c:15:25:14:d0:
                    e4:75:de:7a:7f:a2:bf:95:da:c5:be:ef:28:77:2b:
                    f2:dd:d8:99:ca:2a:e8:c2:26:f9:e3:7b:8c:5b:fe:
                    09:4b:1b:a9:8c:01:2c:bd:2c:ab:26:9e:69:87:da:
                    6b:d0:c0:a5:7f:a8:db:12:f2:3b:14:41:2c:4d:db:
                    6a:a9:2b:ab:c6:b0:7d:9e:f5:34:36:05:d4:6b:8c:
                    34:f5:21:5e:fb:f6:ff:e9:c5:4f:96:00:e7:60:5b:
                    19:34:0f:31:1a:78:fe:9b:1a:b6:f9:be:87:0f:03:
                    65:9a:14:e0:7f:ef:48:f1:8d:bb:67:92:79:15:9d:
                    28:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9B:92:F7:E9:ED:48:A0:6F:54:57:C3:14:32:C7:16:EE:32:D9:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9ff402d8-dbec-34b8-8214-b0105f9109e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:cb:d5:71:57:f6:17:00:61:69:cc:08:e9:a0:3d:63:b7:b6:
         b5:ab:20:aa:2e:db:00:65:5e:a6:18:e6:27:ad:43:5b:01:5a:
         fd:c9:9f:b0:63:ed:6f:de:a3:54:d3:ff:f9:f0:70:8c:77:59:
         df:24:fa:79:bf:53:23:0d:05:90:89:f3:a3:70:72:b3:ed:12:
         9a:42:43:6f:3c:5f:c7:ab:b6:4b:62:86:9e:cc:b2:af:81:56:
         5a:4e:fb:ef:ee:01:6d:bb:83:b8:56:a2:82:8d:29:72:27:a9:
         d2:8a:f0:99:e8:85:db:bb:8f:a5:bc:19:ff:cc:18:61:c9:5b:
         70:df:ed:73:7e:11:30:65:a5:8b:69:35:38:02:fb:c0:3f:09:
         35:f8:bc:04:a0:07:7d:b3:ae:0b:f7:34:02:21:16:bb:7a:e2:
         f7:01:f1:fe:04:69:e1:8c:8c:2b:11:a0:ce:6e:76:a2:d4:89:
         7a:1e:5e:3d:51:d7:b3:53:b6:44:53:25:46:ec:be:e9:c3:7a:
         61:f5:bf:bb:ee:03:62:29:59:58:19:bb:46:3d:29:9e:f6:a3:
         94:cd:ca:09:ed:29:91:a1:c0:ad:a5:c0:da:1f:85:00:31:cd:
         ca:4f:fd:53:1f:0a:a5:39:59:8b:a1:c7:cc:22:c0:b8:b0:01:
         3c:ef:9e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:08:07 2025 by rpki-client