Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1fa7be5c-670f-3c4e-a027-d363f21c89c8.roa
File:                     1fa7be5c-670f-3c4e-a027-d363f21c89c8.roa (raw, json)
Hash identifier:          8rssz25tW6yjJFBDe+v8Ivo5NQlzFB5cYQhwi1dx/mI=
Subject key identifier:   BC:33:50:5B:E3:95:73:62:23:0F:60:80:69:42:33:A1:0A:20:63:04
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B4D11D70C8B249D17F3AF95C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1fa7be5c-670f-3c4e-a027-d363f21c89c8.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     3360
IP address blocks:        204.104.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:d7:0c:8b:24:9d:17:f3:af:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=30940dfa-ebb5-4c33-9c28-a70c98d08de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:04:25:7e:c6:71:f2:99:69:70:70:8f:b8:de:
                    d1:02:6b:50:2a:67:49:c4:0e:64:20:7a:b3:99:bf:
                    2a:ed:fc:09:01:1f:20:7b:f4:37:f4:65:b3:c8:e5:
                    3c:84:0a:cc:8d:cd:ad:d3:3d:13:aa:74:4a:27:d8:
                    ae:87:d7:b0:f6:6a:5b:35:54:0f:22:e3:37:a5:f3:
                    d6:28:b9:19:cd:ed:39:c4:c6:1e:56:10:0e:13:e7:
                    b5:1a:30:97:40:c0:67:c4:dc:f2:e0:ab:1c:d3:b2:
                    18:93:ff:57:9e:31:d7:b0:26:68:26:3e:3a:7d:67:
                    ba:57:e6:97:99:5d:2c:ec:bb:40:1f:b0:d5:28:dd:
                    3b:40:ff:28:f8:0b:1b:e8:ec:0e:7a:50:87:5f:c8:
                    9c:a4:3d:80:2f:24:72:3a:00:d4:d7:25:01:23:24:
                    00:7e:4c:ff:9f:dc:a4:a7:9d:ae:42:cf:93:d9:6f:
                    1e:30:d4:b5:c4:8e:c7:63:db:a7:a3:d9:e6:8d:52:
                    a8:0c:e3:ef:52:c1:81:bb:0f:51:1f:e3:22:91:ad:
                    0e:4e:8f:f8:fc:f9:cb:1f:17:7e:9a:32:3e:31:d4:
                    7d:a8:3e:ef:47:e0:82:2d:f1:31:33:c2:99:00:3b:
                    95:f2:2a:fe:42:f7:11:91:33:7c:23:43:e3:62:2e:
                    13:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:33:50:5B:E3:95:73:62:23:0F:60:80:69:42:33:A1:0A:20:63:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1fa7be5c-670f-3c4e-a027-d363f21c89c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:26:41:75:bc:04:ba:9c:08:0f:26:11:4d:56:2d:ee:7a:d8:
         55:9d:82:98:c1:fd:a0:dd:e0:d9:97:c1:b2:6d:0e:fe:12:50:
         12:e6:cd:a1:89:eb:2c:4f:05:f6:41:a6:3e:42:fb:bc:24:d4:
         ad:99:05:19:a6:6c:54:aa:32:ff:54:8d:50:f5:8a:a1:b3:89:
         73:b6:08:24:79:7a:84:a6:e7:3a:b4:83:72:ba:f2:58:6b:d4:
         b6:35:97:d7:09:d1:ad:8c:3b:79:a0:03:8f:3d:e4:2b:79:63:
         78:cb:fb:48:fe:3b:ae:e2:55:d8:03:f4:ea:62:79:9a:00:b9:
         86:5b:e8:a8:9e:f4:a6:cc:13:5d:0d:b8:36:d4:6f:24:68:61:
         b8:5d:29:e3:54:b5:83:85:26:31:0f:f6:17:1c:6b:2e:01:44:
         2f:0b:01:09:2b:bf:92:f9:51:fa:2c:5e:95:79:39:b2:70:b3:
         85:f4:1b:4d:5c:87:7c:2d:b6:ef:92:af:60:54:e0:2b:3d:7f:
         fa:96:d4:ae:26:bd:57:0a:02:0b:96:e3:86:8f:f9:e6:39:3f:
         fd:fa:f2:bc:59:09:ad:92:8d:26:c9:60:a8:64:b5:20:1d:cb:
         33:59:9b:c4:72:69:b0:b6:fb:0d:85:af:bb:f7:39:3f:98:a7:
         22:06:96:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:58:02 2025 by rpki-client