Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12642247-c341-3abe-abc9-33d525569e32.roa
File:                     12642247-c341-3abe-abc9-33d525569e32.roa (raw, json)
Hash identifier:          YgeY1vIdP2vVo1LDnX1K6sg4ncGk3/xVGwyglJm7a64=
Subject key identifier:   BA:32:2F:A2:16:B5:50:60:C4:D4:86:30:D4:66:2D:05:1F:EE:8B:C2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A268ABA81B8EC80EEB698B9C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12642247-c341-3abe-abc9-33d525569e32.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     3360
IP address blocks:        204.103.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:ba:81:b8:ec:80:ee:b6:98:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=1d11830f-5410-4715-9c92-50e44dd6badc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:42:1a:e6:12:b5:e9:58:4e:c5:41:ad:63:2e:
                    23:bd:b3:89:06:62:d7:c3:7a:23:34:8c:3b:39:a7:
                    79:dd:b6:f5:1c:f2:87:5d:94:7d:af:11:52:fa:a0:
                    60:25:69:5c:65:dd:24:73:74:68:c5:75:d9:7d:c8:
                    df:cd:39:86:df:e8:ec:e5:7b:57:04:cb:3a:9a:a2:
                    13:4a:08:d0:74:63:33:1a:0f:3d:8f:48:ad:9d:8f:
                    b4:f6:a8:2b:28:af:56:c9:b3:17:a9:f9:30:ff:c9:
                    00:5e:2b:42:51:b7:37:31:c2:b8:f9:f4:e6:40:38:
                    02:f7:ab:37:8d:3c:78:e1:89:61:03:34:49:c3:02:
                    68:7c:73:7e:27:79:7f:95:9f:81:1e:87:a7:7d:4f:
                    08:06:cf:1f:dd:bf:a2:3d:da:a3:9f:a5:bf:86:93:
                    bd:00:4b:a6:ca:3d:e4:4a:e9:27:39:2f:3e:9a:a4:
                    b8:07:c8:37:12:4c:6f:35:fc:2b:32:4b:e3:57:d6:
                    a1:29:9e:77:57:a0:38:d4:c5:63:70:4b:41:fd:68:
                    18:f8:fe:cc:58:ea:d3:b8:33:d1:ba:1c:d4:57:38:
                    0c:3d:a3:9e:79:81:85:8f:04:97:e9:87:81:8c:53:
                    eb:e8:6b:ae:cf:77:63:3f:af:d3:d4:52:a9:5b:fc:
                    1a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:32:2F:A2:16:B5:50:60:C4:D4:86:30:D4:66:2D:05:1F:EE:8B:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12642247-c341-3abe-abc9-33d525569e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.103.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:6b:1a:67:ef:0b:e8:76:bd:33:dd:f5:e3:22:3e:fe:c0:03:
         ae:74:1a:a5:35:88:48:90:b9:f0:09:b7:06:2e:e5:54:e4:30:
         de:8a:0f:6f:57:cd:96:90:01:c7:02:7e:f6:40:f0:47:f1:55:
         3c:8a:84:b5:08:b2:b2:1a:1d:c8:f0:89:24:a4:75:02:29:7a:
         31:53:d2:e9:5d:59:b8:62:9f:88:57:80:46:93:52:77:f3:46:
         75:24:d6:49:bf:91:d8:43:80:dc:21:a4:0c:28:c0:41:6e:2a:
         1e:12:63:45:3b:46:e1:02:ab:d8:93:ab:08:51:bc:a0:04:ad:
         99:3e:19:9d:ad:42:b0:87:ab:a8:c8:ac:7e:b8:3c:53:83:cb:
         84:75:0c:ad:57:f0:46:04:83:e6:62:06:73:9f:51:f6:b4:1d:
         d4:83:ed:53:bc:2b:02:fd:12:86:71:ed:8f:89:48:be:8d:7d:
         c5:da:7a:89:75:61:0e:35:1b:9c:48:52:9a:f1:86:2b:dd:d8:
         c2:48:ed:d2:2d:fd:8f:c5:8b:3f:18:a7:e7:1c:ac:cb:af:43:
         3d:a8:f5:68:10:2a:89:bb:c9:7b:31:b9:56:4a:fb:35:be:dc:
         c1:6e:8b:39:9b:b9:b7:78:df:c1:b0:e9:38:1a:29:35:67:99:
         18:a1:09:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:27:51 2025 by rpki-client