Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/17b9223b-958c-3121-90bd-3c36d93a1080.roa
File:                     17b9223b-958c-3121-90bd-3c36d93a1080.roa (raw, json)
Hash identifier:          bvdcwQrrwi0U6R1oO/b0b/noeZzzmG0EBqfRgxjX6l0=
Subject key identifier:   EE:55:EE:C2:3B:A7:D0:5A:E4:F8:B9:28:31:95:1C:52:61:6B:F3:6A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B2FA7F5E6593FB3A9FF00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/17b9223b-958c-3121-90bd-3c36d93a1080.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     203
IP address blocks:        205.141.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:2f:a7:f5:e6:59:3f:b3:a9:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=833edd67-99d1-489b-9836-14c5ce5665b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cc:6d:7d:80:26:0d:c4:90:dc:e8:0d:d1:56:
                    30:9a:a4:23:13:a2:1c:b6:ec:4e:4c:4f:92:2c:33:
                    41:b5:c2:2e:2b:5f:be:d0:90:1b:2a:06:d5:19:ba:
                    76:a8:42:75:c0:92:be:c0:ec:7a:86:05:3a:5a:0b:
                    f0:d3:61:41:e0:ae:b9:91:64:d3:29:55:77:ab:b1:
                    b4:f5:50:03:dd:a2:e6:0a:b4:39:21:30:eb:2b:50:
                    03:ed:03:17:85:b9:48:c9:8f:12:85:a1:54:66:8a:
                    9a:b0:a5:8b:6d:f5:86:f7:99:c0:63:13:30:60:62:
                    f1:55:99:e4:a1:bb:5f:82:01:d7:1f:54:82:93:58:
                    52:25:1f:58:d0:db:36:e0:03:98:b5:f4:fc:44:79:
                    5b:e2:89:b2:f4:9c:38:0f:4e:8b:7d:e1:5f:6c:c7:
                    f4:bc:82:46:d5:22:23:81:35:14:50:61:19:4a:be:
                    13:96:a0:20:fc:08:1f:a2:9d:4a:43:ed:ea:51:2a:
                    fe:69:64:d8:14:58:df:4e:c4:4e:2d:72:2c:e4:0e:
                    fb:5b:ae:d2:7f:02:c0:ad:87:1c:2e:ee:18:37:a0:
                    43:d6:dc:91:ad:93:b9:08:92:42:f2:35:fd:51:eb:
                    9f:57:1d:b3:0a:81:4a:a6:ef:fb:0b:71:d5:d4:5c:
                    62:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:55:EE:C2:3B:A7:D0:5A:E4:F8:B9:28:31:95:1C:52:61:6B:F3:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/17b9223b-958c-3121-90bd-3c36d93a1080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e6:b7:b0:a4:0e:93:63:38:76:3e:18:e8:89:23:9e:2a:31:
         b0:3e:08:d0:ca:19:63:38:0e:2d:68:72:07:45:20:83:d2:cd:
         1a:1e:d1:1a:ad:d0:ab:64:74:9b:6e:86:6f:d0:9b:e9:5b:35:
         fa:c4:64:8c:50:28:b9:cf:06:38:b2:cc:7f:e1:53:3f:63:53:
         72:e7:56:54:19:46:ad:1e:8e:c5:7a:b2:64:38:b0:3a:72:ee:
         10:7c:8d:e4:bc:0e:25:92:77:9e:76:de:fa:e8:cd:3e:ad:2b:
         57:e5:e8:55:12:7e:df:43:de:8d:5f:1f:0d:c2:26:65:76:0c:
         ac:9b:c4:d7:dc:d8:88:73:e5:72:7b:ac:2a:8c:04:f8:ea:8f:
         85:21:bd:6d:a9:f7:bb:85:ec:92:4a:82:86:ed:bb:32:2f:22:
         64:a5:92:be:69:a9:fc:95:3c:86:3a:55:e2:7a:fc:89:40:ae:
         10:73:d9:20:f7:0f:52:31:5c:0d:8d:28:ac:97:fc:16:c0:db:
         c8:07:bf:fe:24:10:cd:45:e2:0d:cb:2f:c0:3f:45:42:e6:75:
         2b:85:d0:12:4c:d3:7d:ad:55:a5:43:44:c5:f6:c1:a7:cb:0f:
         bb:66:93:8d:57:1f:06:90:78:ba:aa:b0:04:5e:d9:5b:db:9d:
         8a:d4:e2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:30:25 2025 by rpki-client