Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e2c1e9f4-c567-3426-a050-b1f2b9d6ed1e.roa
File:                     e2c1e9f4-c567-3426-a050-b1f2b9d6ed1e.roa (raw, json)
Hash identifier:          W4arABr4rr1el+7iDqR0w+hyZGaBOCN0/MT1UyMtQD4=
Subject key identifier:   71:C0:1C:97:26:0D:E0:0A:69:F3:0C:A9:8E:9A:73:BC:02:5C:EF:BB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AEE15A87055F171D0EBDEFCC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e2c1e9f4-c567-3426-a050-b1f2b9d6ed1e.roa
Signing time:             Thu 21 Aug 2025 12:26:47 +0000
ROA not before:           Thu 21 Aug 2025 12:26:47 +0000
ROA not after:            Wed 19 Nov 2025 13:26:47 +0000
asID:                     3360
IP address blocks:        168.87.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:15:a8:70:55:f1:71:d0:eb:de:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 21 12:26:47 2025 GMT
            Not After : Nov 19 13:26:47 2025 GMT
        Subject: CN=a6231e15-6370-4232-8abd-039cbf823dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a8:57:e5:99:0d:09:be:19:12:e2:00:bc:5a:
                    aa:d5:63:11:51:5e:d3:fe:f1:01:77:b1:17:a9:a2:
                    d4:fe:20:c7:c2:45:1d:d7:2c:ca:4a:de:f2:9d:96:
                    d8:03:58:cc:72:d9:9b:92:9d:47:79:da:e7:9f:ff:
                    64:52:fe:d3:02:f2:88:84:ff:25:a7:8f:c4:17:89:
                    ff:4b:8f:bf:d8:fe:b6:65:db:18:4a:89:60:3b:11:
                    b3:f2:13:76:64:11:17:59:c3:fd:0a:d9:a6:ab:c4:
                    ec:c7:f1:f7:14:02:e4:b4:65:f3:2f:5a:ee:c6:ea:
                    45:d0:74:f6:10:48:42:f1:fc:d4:8f:85:7c:9d:5a:
                    78:06:3c:21:cb:d9:83:77:2c:eb:ed:04:45:0d:c8:
                    41:62:25:74:bd:32:cb:70:90:ae:40:0f:f9:a6:c3:
                    4c:55:4d:52:26:c5:f9:51:47:6c:9b:57:7e:54:15:
                    2c:58:d8:e7:bc:4e:e2:5d:b2:f2:36:11:4e:b8:50:
                    66:a9:a0:82:2a:53:06:8b:53:95:d9:69:d7:8d:fa:
                    eb:d0:bb:22:bb:4c:1d:f5:db:09:16:90:3f:fa:fc:
                    44:88:45:35:41:b5:9a:b6:97:5a:31:57:9d:ce:da:
                    2d:9a:39:6e:f7:9f:af:1b:93:54:1b:93:e1:4e:bc:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C0:1C:97:26:0D:E0:0A:69:F3:0C:A9:8E:9A:73:BC:02:5C:EF:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e2c1e9f4-c567-3426-a050-b1f2b9d6ed1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:52:77:d1:96:56:b9:84:7f:ab:22:e1:40:a7:a9:53:03:51:
         89:46:e9:3e:5e:1d:45:eb:f3:63:41:d7:b2:4f:5e:de:95:00:
         fe:2e:03:20:5d:0f:fc:a7:ca:d9:cf:34:d6:ad:70:c4:03:a8:
         e3:ff:e8:84:41:cf:7a:23:1f:52:83:ba:b7:c9:e5:b0:5a:b5:
         3f:4a:d5:97:f8:da:03:14:c8:8c:1c:16:ef:5a:fd:1b:52:cb:
         53:df:5b:68:4e:e4:94:97:1d:5f:b7:12:96:82:38:c0:51:39:
         d5:de:5e:7d:77:07:07:37:aa:dd:dd:b9:02:1a:ff:2b:e7:26:
         8f:8a:b7:31:4c:54:57:d0:a1:b2:ab:30:e6:f0:d1:80:1b:db:
         cd:e0:a9:d4:cc:a1:53:f6:94:d4:e2:19:03:25:06:1f:d0:55:
         cc:87:b6:a3:81:73:76:b5:31:16:82:99:7e:58:a6:c2:c8:ef:
         8d:0d:f5:93:39:f0:67:12:0b:97:29:7b:13:04:ab:cb:a8:28:
         77:11:41:87:d6:13:4a:46:96:b5:38:ea:60:87:49:41:83:b9:
         d8:02:cc:68:5d:b4:4f:72:55:7c:2e:24:3d:5b:60:9e:e8:14:
         6e:d3:64:84:8c:a2:7c:30:61:1e:7e:f0:e4:6d:0c:32:f5:8b:
         7d:d7:f3:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruFahwVfFx0Ove/MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDgyMTEyMjY0N1oXDTI1MTExOTEzMjY0N1owLzEtMCsGA1UEAxMk
YTYyMzFlMTUtNjM3MC00MjMyLThhYmQtMDM5Y2JmODIzZGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKhX5ZkNCb4ZEuIAvFqq1WMRUV7T/vEBd7EX
qaLU/iDHwkUd1yzKSt7ynZbYA1jMctmbkp1Hedrnn/9kUv7TAvKIhP8lp4/EF4n/
S4+/2P62ZdsYSolgOxGz8hN2ZBEXWcP9Ctmmq8Tsx/H3FALktGXzL1ruxupF0HT2
EEhC8fzUj4V8nVp4Bjwhy9mDdyzr7QRFDchBYiV0vTLLcJCuQA/5psNMVU1SJsX5
UUdsm1d+VBUsWNjnvE7iXbLyNhFOuFBmqaCCKlMGi1OV2WnXjfrr0Lsiu0wd9dsJ
FpA/+vxEiEU1QbWatpdaMVedztotmjlu95+vG5NUG5PhTrwceQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHHAHJcmDeAKafMMqY6ac7wCXO+7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTJjMWU5ZjQtYzU2Ny0z
NDI2LWEwNTAtYjFmMmI5ZDZlZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJpSd9GWVrmEf6si4UCnqVMDUYlG6T5eHUXr82NB17JPXt6VAP4uAyBd
D/ynytnPNNatcMQDqOP/6IRBz3ojH1KDurfJ5bBatT9K1Zf42gMUyIwcFu9a/RtS
y1PfW2hO5JSXHV+3EpaCOMBROdXeXn13Bwc3qt3duQIa/yvnJo+KtzFMVFfQobKr
MObw0YAb283gqdTMoVP2lNTiGQMlBh/QVcyHtqOBc3a1MRaCmX5YpsLI740N9ZM5
8GcSC5cpexMEq8uoKHcRQYfWE0pGlrU46mCHSUGDudgCzGhdtE9yVXwuJD1bYJ7o
FG7TZISMonwwYR5+8ORtDDL1i33X88I=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:59:35 2025 by rpki-client