Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3376a0dd-d61c-3647-a3c2-d25f29ea2c61.roa
File:                     3376a0dd-d61c-3647-a3c2-d25f29ea2c61.roa (raw, json)
Hash identifier:          4jIUZ/TenRVLSn55emxghb2BcDH7Vwuvg7028m1S+io=
Subject key identifier:   01:6D:70:7B:42:83:AB:6E:93:92:CE:D5:59:D0:4E:24:6C:6D:88:0F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498CFF13AD7D6239866D331E00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3376a0dd-d61c-3647-a3c2-d25f29ea2c61.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     3360
IP address blocks:        204.104.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:13:ad:7d:62:39:86:6d:33:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=dce8cd06-5279-4c44-a778-430a71c69612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c2:3b:e1:5f:54:8c:c8:05:27:4a:38:c6:84:
                    72:c3:af:ed:a2:16:c0:91:43:a7:e8:4f:7d:91:ca:
                    ad:c2:53:69:9b:b2:fd:88:24:55:99:73:b4:fb:cf:
                    c0:91:fc:97:8e:11:8b:5d:42:db:f3:21:f5:18:91:
                    71:9c:d9:4d:e1:82:4e:28:97:39:03:54:7a:46:13:
                    ab:fb:67:a3:68:02:0c:51:c9:b7:c9:c7:b0:09:e1:
                    36:59:cf:db:86:d5:5a:a8:e6:a5:ac:80:56:63:43:
                    d2:dc:c6:89:6b:41:89:61:65:ef:c2:75:ff:d3:13:
                    da:a4:55:eb:5c:de:21:c1:d3:72:e5:63:ba:ed:4c:
                    be:40:fc:15:77:68:57:9e:fe:04:97:67:ab:85:68:
                    43:75:04:ca:00:54:48:50:ca:1b:23:c9:17:d5:03:
                    de:57:f8:79:0a:7d:70:34:f2:35:8e:85:2d:36:60:
                    b0:54:fb:c0:ca:ee:48:ce:e6:43:62:2f:fa:db:db:
                    5f:d0:68:70:9a:52:50:8b:2e:0e:25:1b:25:89:86:
                    b9:5b:f7:fa:8c:d7:62:9e:af:fc:8a:cc:5b:10:b8:
                    7b:90:c6:a0:9f:35:bc:57:95:5b:1e:3f:83:1b:28:
                    2c:87:67:b8:13:7b:45:5e:05:81:b2:2c:bb:e4:b3:
                    ab:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6D:70:7B:42:83:AB:6E:93:92:CE:D5:59:D0:4E:24:6C:6D:88:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3376a0dd-d61c-3647-a3c2-d25f29ea2c61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ba:71:55:38:48:a6:6b:98:ae:37:06:cf:94:b9:8e:d9:b2:
         83:a2:d4:6d:95:48:f9:66:8a:50:6a:d2:09:f2:60:ae:80:11:
         86:5e:4f:60:a9:13:48:16:2b:79:22:0a:bf:41:0e:4e:65:29:
         c2:63:b8:04:6e:0f:62:51:13:ae:e0:dd:e7:d4:b5:9f:03:07:
         ee:6f:22:19:eb:7f:d3:47:09:ab:ec:f5:75:60:18:a1:46:c1:
         f3:f6:49:68:bf:2f:58:e3:d6:03:25:3c:99:c1:64:54:59:b7:
         c7:c2:4f:36:b9:72:31:d4:58:a9:9c:9c:73:19:2c:ac:47:6f:
         e3:3a:c9:84:b1:d6:a3:7b:0e:f0:8b:79:fe:ae:85:2c:60:32:
         51:1d:4d:24:5c:cc:2f:0b:d6:45:ba:ca:01:86:41:3a:48:f8:
         fa:12:48:c5:19:df:40:f1:d2:f4:77:26:2b:72:5d:83:73:db:
         52:78:eb:79:63:a8:af:7e:eb:0c:e7:8e:5d:d7:2c:66:cf:8c:
         29:a6:5b:b3:e4:27:10:e8:76:6a:bd:bb:a5:2f:e5:c8:97:59:
         f3:db:92:80:be:09:36:4e:4c:be:46:9e:77:3f:4b:04:cf:31:
         c0:45:7f:23:16:7e:14:d3:8d:ff:60:93:f5:7f:57:52:8a:54:
         ce:59:4c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:12:52 2025 by rpki-client