Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ad704ea-9eb0-32cf-91a5-f28d7fddab46.roa
File:                     1ad704ea-9eb0-32cf-91a5-f28d7fddab46.roa (raw, json)
Hash identifier:          HpAqoQcTR1jIM+4wpRylmXq2jA/igqTiMNHqdsIqChM=
Subject key identifier:   58:B0:08:55:AE:19:E1:20:7A:47:70:59:31:86:D1:56:E2:38:CA:72
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A3462780B015B64AB240A00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ad704ea-9eb0-32cf-91a5-f28d7fddab46.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     5714
IP address blocks:        192.85.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:62:78:0b:01:5b:64:ab:24:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=4543ebaa-270d-44e6-a1c6-0073737cd391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:dd:7d:fb:02:11:fe:72:2c:93:70:dd:1b:
                    33:ba:41:92:a5:28:14:4e:57:9d:97:1e:29:9a:ab:
                    fc:21:14:fe:e6:25:c2:b0:0d:eb:5f:df:d2:a6:c1:
                    c5:b0:6d:d1:e3:11:72:4b:1e:5f:e9:a9:fd:73:b7:
                    8a:66:0b:79:c9:5e:f3:0f:59:83:03:2b:4d:34:a2:
                    ef:a0:ef:6c:df:f7:9a:3d:8b:8d:9a:27:86:b5:38:
                    70:92:a3:ce:83:5f:5e:64:ad:3b:fe:16:0b:13:9a:
                    4c:a6:04:0d:d0:93:43:51:a5:e6:36:b9:b1:27:f3:
                    14:d7:12:d9:75:5a:00:c6:35:9c:cd:e5:82:fb:8f:
                    fd:41:b9:6b:53:c3:52:aa:e7:d3:18:f8:6a:63:e7:
                    f3:69:ac:32:3f:ca:c3:50:a6:97:5c:24:57:31:6b:
                    32:c9:99:b0:60:0e:78:2c:a1:ba:20:33:65:dd:95:
                    82:b1:6d:da:ca:a7:96:ef:dc:0a:53:9d:9b:0f:0c:
                    09:65:50:7b:49:4f:69:9c:21:8b:2d:ea:73:10:30:
                    d5:48:4b:bf:85:f4:ae:1a:7c:3a:e9:8a:6e:6d:6c:
                    d0:4e:83:1c:2d:08:79:6d:d5:dd:76:48:4b:2f:ac:
                    50:96:69:5f:82:fc:64:e1:6b:75:bd:b9:c9:d4:8b:
                    12:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B0:08:55:AE:19:E1:20:7A:47:70:59:31:86:D1:56:E2:38:CA:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ad704ea-9eb0-32cf-91a5-f28d7fddab46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a3:00:fc:85:5f:f6:04:06:80:d8:7a:d8:b9:23:a2:09:04:
         5a:8a:0d:73:00:77:04:47:39:7a:3b:7b:af:c3:98:e6:d7:23:
         cf:4e:67:0b:06:f6:25:63:db:8f:55:88:80:75:c7:35:97:38:
         1b:5f:29:a6:7b:cd:c0:75:34:34:20:cf:85:04:ad:06:72:56:
         6c:b5:5d:43:39:0f:00:5a:b0:83:60:01:f7:7b:d8:e0:d0:9f:
         c2:68:db:ba:15:c8:19:ff:26:9c:24:5c:0e:3b:e7:5b:37:d4:
         d3:ac:18:62:e3:e1:d5:ae:03:f1:f1:ed:cd:55:38:de:31:87:
         d1:f3:6a:12:e9:18:3f:b8:b9:bd:18:42:9a:b6:dd:e4:75:95:
         f0:0c:a3:00:df:f5:d8:62:40:2d:ed:12:f9:6d:04:2f:30:f9:
         76:61:0c:e7:eb:62:0d:3e:11:c9:d8:69:6f:e0:fd:86:ca:5c:
         87:0a:d3:0f:be:6e:c3:0d:13:8d:5b:56:81:f4:48:f7:c4:58:
         78:f4:80:78:ca:7c:f5:39:ae:b3:98:56:74:6b:9c:b9:e4:ab:
         e7:83:5d:a6:f7:4c:65:21:ae:6f:7c:e8:68:d1:2b:c7:44:c9:
         d9:04:ad:6c:6b:c3:5c:93:39:3b:2e:0b:a2:29:83:8d:9b:dd:
         73:d8:a0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:11:42 2025 by rpki-client