Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dc7aa3e6-78ec-3e6a-8a50-a808fb5cd232.roa
File:                     dc7aa3e6-78ec-3e6a-8a50-a808fb5cd232.roa (raw, json)
Hash identifier:          UCDTGdjLpJazSNPi0zHpJWQWCuuqiBczLimOkxqNuv0=
Subject key identifier:   9C:D4:44:46:6B:39:82:FA:9E:87:26:41:C2:D6:71:C1:55:56:F5:04
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B4A4727B309341C37EB9E4620
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dc7aa3e6-78ec-3e6a-8a50-a808fb5cd232.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     3356
IP address blocks:        204.104.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:27:b3:09:34:1c:37:eb:9e:46:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=0ab7bd1f-05cc-49b6-9765-be18df5a126f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:02:7b:26:fd:5b:34:f7:0c:b4:68:c2:b7:cb:
                    4f:7b:48:17:ea:97:f4:b3:f6:ce:1b:92:60:0d:06:
                    96:3f:a3:f6:9c:7b:41:25:04:cc:f2:3c:64:22:f3:
                    18:80:0a:60:96:7b:44:58:30:d6:d7:81:93:0f:59:
                    36:c5:ef:5c:5f:a7:e3:ba:2b:49:94:9b:75:cc:4d:
                    98:a6:5c:c1:5b:7f:d3:be:1f:6d:1e:21:e4:93:09:
                    75:a4:ee:f3:b7:6f:a2:79:00:c8:e9:a1:c6:f2:97:
                    32:e8:c4:4e:57:e0:4c:ce:e7:b3:23:57:88:d7:dd:
                    63:d6:1e:01:7f:0f:9a:67:df:b1:45:5a:af:5c:e2:
                    b2:9b:6b:9f:cd:4e:ec:73:0e:e1:94:17:60:eb:73:
                    f1:f2:91:69:5e:92:16:61:04:8d:09:69:b5:af:a9:
                    fd:a1:96:3c:98:f8:2d:92:72:6e:83:24:3d:29:a4:
                    a6:5e:c5:9f:c1:d1:29:c4:47:c8:5f:90:43:5f:7d:
                    55:02:4e:1f:a2:df:59:89:b0:47:19:97:42:c1:19:
                    8a:65:ad:48:c6:31:ed:2d:84:51:06:80:80:69:31:
                    ed:ae:85:b8:ff:52:d4:9c:92:12:a9:13:f3:b2:d7:
                    0c:21:db:d9:60:e3:b9:70:8a:f0:67:e0:06:15:b4:
                    48:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D4:44:46:6B:39:82:FA:9E:87:26:41:C2:D6:71:C1:55:56:F5:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dc7aa3e6-78ec-3e6a-8a50-a808fb5cd232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:53:c3:36:52:32:8b:dd:2d:c8:63:30:b4:f8:61:a9:6b:ff:
         ab:25:de:58:37:48:be:03:a9:f2:95:68:7f:a3:ca:71:b2:7c:
         f5:79:14:b4:5e:99:da:fb:f2:66:4f:f3:1f:3f:b1:6f:62:d1:
         32:62:9b:e5:0a:ac:84:d8:eb:3b:02:7b:bc:d7:f6:fe:a4:53:
         73:ed:fd:d7:54:0b:dd:02:53:d2:4d:a2:1f:66:cb:d6:3b:a8:
         34:6f:bc:6b:82:a4:cd:47:1b:c0:7e:15:3b:cd:2b:dc:46:1e:
         05:db:b2:fa:be:49:e8:46:96:f9:03:34:d8:74:5e:84:fd:93:
         ce:53:df:c0:44:08:e6:2c:10:35:af:91:58:50:cc:d9:94:15:
         6f:38:63:03:42:d2:36:96:30:87:b5:a5:19:10:c9:90:4d:73:
         d9:a0:ae:ce:a3:93:ca:06:c1:dd:6a:be:38:08:83:df:c5:ec:
         9b:0d:bc:54:bc:91:c8:d2:6a:6b:54:3a:c7:2e:e6:0c:1a:44:
         e9:81:26:50:f1:46:f8:b2:16:64:20:66:b6:cc:51:60:f7:79:
         36:e4:80:03:5e:c4:f3:05:04:92:68:1b:7a:54:db:29:bf:63:
         6e:fa:6d:94:1b:a2:20:e6:0c:a9:55:10:a0:38:10:26:3e:70:
         55:c3:ad:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:25 2025 by rpki-client