Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0c0ab1ed-fd72-31dc-b5b7-6bf28501efb2.roa
File:                     0c0ab1ed-fd72-31dc-b5b7-6bf28501efb2.roa (raw, json)
Hash identifier:          mp+I+GgPcvXPqzgAcU2/jUe9YuTMae9akly2UU7Jq9M=
Subject key identifier:   B3:03:0C:4B:DD:65:53:F3:69:6A:E5:66:E8:26:8E:27:92:09:66:B7
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B2AFECBA21B42603C8F00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0c0ab1ed-fd72-31dc-b5b7-6bf28501efb2.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     202
IP address blocks:        204.104.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:2a:fe:cb:a2:1b:42:60:3c:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=9e778db3-2924-4e77-ba0d-085a61f4144f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:a8:97:e6:e4:ac:a6:6c:08:b0:8f:96:17:
                    b5:b6:c1:86:07:55:47:67:01:f3:cd:c3:69:71:5f:
                    b7:f6:22:e2:80:ae:c1:e2:58:80:83:b5:4b:b0:51:
                    cd:7a:4f:0a:df:74:3a:26:d7:71:3a:52:23:ca:c5:
                    47:97:e2:ce:28:27:f0:11:a0:f8:5e:a7:9b:2c:4f:
                    ab:e7:25:85:5b:06:65:99:a0:9c:52:f1:f9:52:63:
                    e4:2f:49:fc:63:1e:78:a8:c2:9e:43:40:fd:5d:3b:
                    ee:db:8b:26:02:eb:c6:70:fb:4f:de:4a:66:7b:19:
                    7f:c4:c5:ee:3f:22:4e:bd:04:46:8f:30:4d:4e:ff:
                    bb:78:12:12:50:f2:dd:82:06:a2:cb:42:7c:18:5f:
                    62:b0:e4:50:08:c0:0c:6c:ce:50:30:2d:df:3d:60:
                    f4:1a:95:7c:72:dd:a1:7c:f1:ba:99:75:87:9b:6d:
                    0b:58:c6:60:0f:8a:c6:00:83:2e:9d:7d:ce:91:67:
                    d6:9d:2a:73:63:e8:3f:2f:95:6c:6d:77:49:0a:1c:
                    e9:98:3f:9e:56:f6:cb:1b:9c:62:52:6c:9b:a9:2c:
                    21:a7:0a:06:b7:fd:5c:77:36:77:bf:e7:bf:cd:17:
                    d9:cf:ef:05:ff:33:0f:2d:96:1f:ff:7d:01:b0:5f:
                    b3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:03:0C:4B:DD:65:53:F3:69:6A:E5:66:E8:26:8E:27:92:09:66:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0c0ab1ed-fd72-31dc-b5b7-6bf28501efb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:80:f4:8f:2b:bc:0d:05:e4:12:b4:df:c0:f1:f0:e3:39:d9:
         e2:17:9c:d8:ab:4a:a9:6a:28:bb:ce:c5:ce:98:79:09:4b:43:
         7f:f6:ea:4e:ec:a5:38:27:3c:f9:6e:54:13:9c:a2:16:cc:21:
         f8:b7:45:e0:a5:c5:95:74:ce:82:9e:33:c0:8f:4e:3c:07:1e:
         88:3f:ab:0f:3f:78:e6:00:b7:d4:e6:38:9f:9c:0e:bc:ac:6c:
         f1:ab:87:69:3d:cb:ca:3d:56:e7:52:72:3a:24:39:a2:43:5f:
         cc:3b:0a:17:6b:c7:c7:4e:cc:42:99:39:ea:99:7d:c5:cd:0a:
         4d:c5:f8:8e:f4:53:16:5f:3e:b6:9a:ed:0c:04:dc:38:c6:2d:
         4e:af:4e:a1:30:91:2e:9d:9f:58:62:30:b7:35:56:ed:59:50:
         45:7c:ab:4b:61:8b:ac:8b:74:63:00:7f:d0:b0:f7:c6:7d:0f:
         8e:f1:96:db:4d:42:ec:80:08:f8:bd:13:57:d3:c6:f0:ea:9e:
         55:de:a6:97:d9:1f:84:1a:23:9f:ef:92:26:04:bd:7e:96:13:
         ce:ce:f3:97:c6:4f:41:c0:b5:28:22:c9:ff:0a:aa:58:be:03:
         86:70:b3:7b:f6:e0:5d:25:78:6a:ae:f6:83:1e:7a:62:f1:0e:
         1a:4c:6c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:03:31 2025 by rpki-client