Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a72c3134-21a1-398b-a377-6fdc6ca88997.roa
File:                     a72c3134-21a1-398b-a377-6fdc6ca88997.roa (raw, json)
Hash identifier:          8pRULJu3BznBOhcW1J8TIMnXa34YqF7jghyyUkx3pIY=
Subject key identifier:   30:C6:6F:4D:94:0E:A4:C0:E3:1C:35:40:0E:59:99:24:EF:EF:C2:E5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B2F1E3B5D07832650114C
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a72c3134-21a1-398b-a377-6fdc6ca88997.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     202
IP address blocks:        205.141.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:2f:1e:3b:5d:07:83:26:50:11:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=13acf6a6-6cb7-4da5-9cf5-ac6624c0c3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:30:9e:34:b9:15:2e:db:8d:d9:84:7d:f9:bb:
                    44:fa:ee:f0:b0:0f:f8:7c:2d:f1:c5:15:88:19:58:
                    fc:76:9a:39:55:50:54:b8:92:1f:24:fd:95:52:df:
                    4a:f6:40:8a:9e:17:8e:38:05:10:62:0b:68:95:c1:
                    0f:82:f9:90:05:12:82:42:b6:53:07:b8:88:47:6c:
                    35:c9:b7:19:59:5c:80:ff:e5:fc:89:9a:3d:61:41:
                    90:4a:79:9a:d6:0d:8f:8d:28:9e:c5:4f:cd:04:78:
                    ca:2a:b1:ab:8d:21:0a:c3:2a:9f:e9:72:47:20:6a:
                    81:01:1a:4f:c6:42:8d:a6:65:4c:bd:3c:76:23:98:
                    b1:35:78:e7:50:81:01:fa:8f:40:a3:07:62:7a:69:
                    9a:26:fb:3f:40:6c:5b:04:ec:e2:b3:3e:45:4d:95:
                    e0:a0:38:36:1a:e3:72:c2:06:fa:82:45:c2:64:b6:
                    20:a1:0d:17:9e:94:29:53:00:e8:f0:ac:e2:40:9c:
                    a5:3f:ed:46:2a:b7:e7:26:c7:36:3e:fc:c8:61:a5:
                    3c:0d:dd:4d:99:97:17:1e:05:f1:bb:8d:12:cd:03:
                    03:d5:50:95:18:20:44:42:54:6b:8d:fd:a6:69:df:
                    bc:41:48:43:3d:5a:bd:8f:c7:8a:a0:a7:f7:3b:a2:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C6:6F:4D:94:0E:A4:C0:E3:1C:35:40:0E:59:99:24:EF:EF:C2:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a72c3134-21a1-398b-a377-6fdc6ca88997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c1:c3:72:ab:74:a7:93:9f:de:01:78:52:d8:e0:8a:35:3c:
         61:60:13:af:62:26:03:38:40:70:8f:08:2b:99:a1:47:86:36:
         b8:62:af:90:d7:2b:7d:55:84:a2:f5:1e:72:c7:ad:ea:c3:3a:
         32:8b:c7:d4:36:10:ec:f8:27:53:c8:7c:df:49:93:5c:15:6d:
         6a:62:34:a7:0d:12:0e:9e:0c:88:8e:5f:f6:d6:08:b6:43:d3:
         5c:f1:e9:76:57:26:eb:6b:b2:68:59:09:fc:c1:84:5c:85:e0:
         59:d4:e0:b8:b9:a6:f3:eb:e5:02:d3:d0:4c:be:64:ce:4a:06:
         13:02:c2:1c:15:4f:d5:f7:75:d3:c0:83:90:bc:1c:55:7b:cf:
         9e:f3:97:63:50:f4:0b:0b:43:c7:91:03:ac:73:a8:bc:9a:2c:
         cc:2d:cc:bb:46:68:39:d7:15:b6:d6:82:b9:1d:7f:68:7b:df:
         0a:79:aa:fd:36:29:4e:59:d3:80:d9:bd:fb:42:57:94:45:d7:
         62:7a:e1:4f:3b:97:6b:35:07:fc:75:86:a8:b8:e0:88:a8:d7:
         15:f2:88:56:51:61:5b:32:7f:68:8a:ba:97:6d:c3:d8:fe:81:
         d1:65:20:c4:d8:43:bb:a8:44:b0:e7:92:50:ae:8b:72:10:29:
         47:74:ad:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:38:39 2025 by rpki-client