Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8d17fbe1-0d1e-3079-9a7f-649932bf9c3f.roa
File:                     8d17fbe1-0d1e-3079-9a7f-649932bf9c3f.roa (raw, json)
Hash identifier:          AoKWBH35quq2EeOt0Zt3jyME2V/j9A40sSXY98diEPU=
Subject key identifier:   C0:62:17:39:56:5C:7D:68:25:6D:62:1B:41:DC:E4:34:9B:62:24:96
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A42758886E5550BDA56CFF320
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8d17fbe1-0d1e-3079-9a7f-649932bf9c3f.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     203
IP address blocks:        170.30.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:88:86:e5:55:0b:da:56:cf:f3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=2a929ea9-4ac4-45e6-84de-386031c2afe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:31:4d:97:91:65:d3:d5:a5:e1:7c:f7:67:26:
                    ba:50:5e:02:a7:c5:13:b1:88:24:85:4a:f6:0f:e9:
                    ed:0d:5a:ac:b9:02:59:4c:3b:51:e5:e8:7b:16:70:
                    be:8f:0e:40:b0:41:b9:fa:3b:94:c6:de:ad:ab:ef:
                    88:6b:05:35:53:d2:d4:44:73:1e:a8:f2:58:2a:f5:
                    a9:b2:e4:f8:3f:9d:77:ab:bc:d1:57:8c:96:31:a1:
                    65:73:fb:44:c9:91:c6:be:91:66:3a:28:bf:d8:3b:
                    1c:85:e3:8e:28:bd:84:f4:80:95:d9:f1:5c:f6:7b:
                    5c:30:54:a4:5e:cc:00:59:16:6c:52:66:ff:f4:a1:
                    14:0a:c7:ef:4d:f3:d3:f2:9d:6b:b2:02:81:15:ec:
                    d1:84:12:36:07:53:33:51:6c:60:52:24:3f:57:9c:
                    56:95:02:cb:c7:4e:7f:24:b4:60:d1:d8:fa:c6:80:
                    34:70:a5:a2:d5:88:1a:91:19:48:68:4f:79:52:2b:
                    6e:eb:d4:5d:ee:e7:64:8f:48:cd:47:5c:a5:18:89:
                    50:67:d2:3f:7f:5c:c7:96:40:a2:27:26:33:ae:43:
                    42:60:5d:52:23:a6:ca:c9:a0:0a:27:12:05:1f:17:
                    f3:47:4a:d9:4e:dc:10:b9:33:14:3e:da:65:0a:f3:
                    37:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:62:17:39:56:5C:7D:68:25:6D:62:1B:41:DC:E4:34:9B:62:24:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8d17fbe1-0d1e-3079-9a7f-649932bf9c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:4d:3f:3b:6c:12:6e:5c:29:cd:5e:65:2d:09:7a:22:b3:53:
         8b:1b:3a:91:f3:02:2a:62:1d:05:07:fd:ee:c8:bf:0b:fb:8d:
         38:ab:8a:48:79:c7:60:bc:69:e0:25:ef:8b:d7:fa:b2:77:3d:
         fe:e0:6a:00:20:86:31:14:22:6d:2f:60:70:f0:08:33:f1:08:
         d0:e4:dc:b2:12:84:2f:2b:47:26:ba:b2:ba:2b:61:63:80:2f:
         f5:f8:46:3b:6a:0e:f6:4d:dc:78:72:cc:f6:ed:d9:48:f4:dd:
         ca:e1:e1:d1:16:50:93:04:3f:4e:9c:7c:bf:94:5f:8a:d1:98:
         c6:a2:7d:e4:d5:86:b9:2c:67:cf:15:3a:8f:54:d7:15:f9:5b:
         11:55:e0:91:b9:c9:e8:b3:be:e2:75:9b:bb:22:5d:d2:d7:b1:
         e0:69:11:3a:1f:99:e3:36:0d:26:31:dd:ff:e7:ae:85:d8:d6:
         cc:a8:31:0b:89:ef:88:65:84:cb:0f:c5:bc:5c:e6:72:84:d3:
         7d:de:26:67:61:95:34:95:3b:e3:c6:da:87:a3:ab:4a:1c:e6:
         db:01:c1:2f:4f:0d:2d:de:80:e9:41:a0:7c:cf:0c:3d:a8:2b:
         cf:c0:5a:46:1f:ec:b2:2a:96:98:14:f2:84:5a:d5:2c:ca:71:
         00:8d:23:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:49:15 2025 by rpki-client