Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a70c49a1-801c-322d-8053-52745b4af6cf.roa
File:                     a70c49a1-801c-322d-8053-52745b4af6cf.roa (raw, json)
Hash identifier:          sKKhzIoe/HRoyQetsy7HI4EHNOeK5wWifeWarElV7RI=
Subject key identifier:   79:A2:47:E9:2C:72:E2:01:64:65:C6:6A:FD:5C:38:2A:E4:F3:2A:1D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A3470082AAE14D6EA9A9340
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a70c49a1-801c-322d-8053-52745b4af6cf.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     3360
IP address blocks:        204.105.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:70:08:2a:ae:14:d6:ea:9a:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=c6f80e7e-c4e1-43f1-848b-d35813ddf46a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8a:be:bc:6f:8d:9a:b6:b2:79:be:53:49:9e:
                    25:1a:79:8b:0e:0c:ff:f2:88:03:2a:ec:a3:d5:48:
                    2b:ac:c9:56:54:39:00:da:cf:c6:60:fe:30:00:29:
                    48:fa:bc:66:44:8d:02:32:f4:a4:a6:27:6c:ac:d3:
                    32:1e:2e:55:c1:b4:2d:2f:4b:44:3d:24:b2:18:9a:
                    21:84:b9:cf:b2:ef:9e:db:d0:10:cf:50:e7:6a:49:
                    11:05:1d:c7:db:33:88:7d:69:da:61:e1:a1:d0:60:
                    42:92:62:42:09:c8:22:1f:ee:c4:ee:c4:26:0b:36:
                    4d:4d:44:c8:a1:98:44:c2:bf:51:22:62:8d:94:ff:
                    18:49:b6:bf:d3:54:f4:fe:c1:50:be:dd:d8:9a:1d:
                    c5:28:be:19:83:a6:f8:5d:1a:f5:47:71:b3:9a:83:
                    76:42:97:8b:29:ec:4d:3d:fc:9e:23:a9:f4:ff:00:
                    07:d2:74:4c:2f:66:d0:f2:3f:a7:fe:ec:6c:cf:9a:
                    57:75:94:1f:25:d4:bc:0c:12:b1:cd:6b:c6:74:dc:
                    18:3a:7d:17:79:9a:98:9c:41:92:db:fc:2f:85:27:
                    c1:11:b4:68:39:08:39:1a:bb:98:1d:0a:28:35:f6:
                    48:d0:4b:cc:d7:45:0f:4e:24:d2:1d:1c:86:7b:83:
                    34:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A2:47:E9:2C:72:E2:01:64:65:C6:6A:FD:5C:38:2A:E4:F3:2A:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a70c49a1-801c-322d-8053-52745b4af6cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d7:97:40:99:aa:c9:aa:f7:2b:0c:f6:4c:3d:5c:24:e3:0e:
         87:cd:c5:4e:95:b0:b3:e6:f2:7f:f2:db:d6:0e:14:67:5f:76:
         15:7a:55:21:6b:80:7a:e1:e0:03:ac:5e:91:cb:bc:f2:13:3e:
         fc:b0:f7:d7:36:3a:67:27:bc:f1:65:60:29:a2:8e:97:c0:ca:
         7f:16:1e:c8:83:e1:3b:f2:7d:0c:09:3c:e6:08:13:4e:cd:c1:
         21:66:a7:9b:47:20:a3:46:cc:77:d8:03:fc:cd:bb:58:d8:67:
         12:de:98:54:a4:ce:09:4f:66:84:6f:70:78:53:62:1e:39:b4:
         27:b8:9d:9b:33:45:5c:33:d5:8d:87:d1:55:70:a7:51:0e:21:
         28:b0:fe:9b:40:88:b7:db:c5:4c:2a:00:ae:df:01:0d:4f:ad:
         6f:c6:a7:f7:ec:50:ae:64:59:62:49:f8:f0:22:29:c4:38:42:
         e8:46:3c:33:a9:29:c4:cf:06:f4:28:23:e9:6e:26:61:d3:32:
         a7:e1:d3:59:73:da:f4:f6:69:62:b3:30:b1:77:ec:76:d9:88:
         33:9c:9b:40:07:e5:cb:c8:96:db:2e:9f:96:cf:7a:c1:e0:9f:
         05:06:16:bb:a6:9a:6d:09:87:a5:d1:51:e6:2b:5a:7c:e3:d7:
         23:7d:d7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:55:13 2025 by rpki-client