Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f91def5-8fb2-3eca-b2b6-f02c311b1869.roa
File:                     4f91def5-8fb2-3eca-b2b6-f02c311b1869.roa (raw, json)
Hash identifier:          OV7TPy9xqWa0BBgwkArn6W1NyHciAnS1Osq9GzGPWek=
Subject key identifier:   53:4F:BA:C9:42:2A:1D:8B:19:9F:49:B5:8B:B9:9A:70:03:49:75:9E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FD4BA41CA2D80EC7AEF60
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f91def5-8fb2-3eca-b2b6-f02c311b1869.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     202
IP address blocks:        204.105.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d4:ba:41:ca:2d:80:ec:7a:ef:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=b2a239dc-d8f8-41e7-9f21-3e035f1ed7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:33:56:10:c5:76:3e:f3:3f:1a:eb:b3:f5:0c:
                    56:f2:cb:55:8e:65:62:82:81:de:a8:26:4f:4e:2f:
                    ea:b5:43:5b:b4:88:10:e4:1c:8d:e4:2b:42:39:2b:
                    17:f7:08:e1:2a:31:91:c1:41:48:5c:f4:44:9f:0a:
                    50:19:e3:53:d1:de:0f:7e:24:f5:6c:4c:e4:a2:9d:
                    af:3d:38:22:f1:a5:3f:90:97:d4:80:5e:d7:59:c2:
                    0d:78:72:47:c1:ce:c4:f1:f5:35:ad:78:1f:94:ba:
                    19:dd:f8:bf:36:78:87:79:9f:f9:ae:e4:5d:7b:26:
                    46:21:49:69:81:0c:a7:c0:d0:97:5b:1c:86:3a:53:
                    4c:4a:a9:ff:19:e4:df:d2:ce:a8:c8:24:89:c1:60:
                    29:f1:ac:d7:28:e4:74:39:df:ed:95:9f:53:3e:3d:
                    55:d0:36:ea:df:36:d3:4d:b3:5d:da:6e:16:25:1d:
                    cf:f6:90:7e:af:6d:7a:51:60:14:7f:53:e3:c7:ce:
                    63:4b:b2:da:c3:7a:20:02:9e:c9:36:4a:8c:f1:15:
                    ab:27:8e:a3:68:83:f0:35:69:6b:5a:4c:e4:93:f7:
                    c4:c6:04:24:f5:c7:2c:ff:4f:8e:0d:76:eb:9a:bd:
                    31:52:4e:37:32:23:68:53:58:c8:b5:6a:a9:0f:30:
                    32:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4F:BA:C9:42:2A:1D:8B:19:9F:49:B5:8B:B9:9A:70:03:49:75:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f91def5-8fb2-3eca-b2b6-f02c311b1869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:c2:fb:ec:b7:99:e3:5a:59:55:99:c4:4b:ca:58:28:2b:94:
         e5:1a:6b:4a:3d:00:59:da:5f:c3:16:06:5c:f7:b6:2b:00:d3:
         9b:fd:b7:b5:6c:e3:0e:da:f6:90:4a:ed:65:f3:c2:ce:dc:3d:
         01:9d:8e:bb:e1:50:d0:62:6b:1e:2b:6b:fd:73:84:5e:8e:85:
         d5:4e:b6:39:59:53:a6:b6:9c:6c:57:50:6c:b5:73:46:da:fb:
         e5:ce:c4:96:3d:82:ce:f8:06:67:03:ba:f3:1c:d2:78:73:1e:
         41:34:ed:91:b6:41:a2:4d:d9:65:04:d2:d8:51:93:53:f6:28:
         9e:ab:19:04:ae:9c:2e:1e:12:2e:4c:22:cd:25:34:8e:b3:f1:
         94:06:2c:4b:9b:be:e3:30:82:5a:a3:8d:34:37:f2:08:24:8d:
         ce:6a:7a:65:f2:e5:21:0d:b1:6a:7d:ea:d1:29:da:9c:1e:64:
         b3:3a:94:64:e6:4d:6f:6b:96:9f:7e:f2:f4:de:b8:40:bc:87:
         6a:dc:30:57:a4:f7:3b:44:a3:f7:5b:1f:46:72:dd:3f:cf:f9:
         03:91:a1:57:f7:9b:12:c6:5a:78:a7:7a:e3:ab:5a:f6:48:74:
         61:11:2f:1d:4a:4f:1b:54:fa:04:97:6c:4d:64:f8:c7:96:d0:
         13:d2:c2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:27:34 2025 by rpki-client