Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cc6d438f-900f-3a97-a816-13cdb4331f44.roa
File:                     cc6d438f-900f-3a97-a816-13cdb4331f44.roa (raw, json)
Hash identifier:          wXsuZmxVDvsTmkicoVfiahsW6FJWClv6La6H38hdy7M=
Subject key identifier:   4F:76:40:BF:66:99:AD:B6:1F:A0:AA:05:B5:D9:76:24:C9:44:FC:F5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A346F599926D62E8136FDA0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cc6d438f-900f-3a97-a816-13cdb4331f44.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     203
IP address blocks:        204.105.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:6f:59:99:26:d6:2e:81:36:fd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=2652f47a-2453-4a4e-b88c-988394c2608c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:f7:b1:cb:05:2e:54:ee:e8:d5:18:48:f1:
                    48:93:8b:69:56:52:c6:f9:f7:c4:2c:ab:f7:b4:09:
                    ca:43:6e:2a:90:bc:3e:b6:08:92:38:3a:34:42:9c:
                    bf:85:7c:02:e2:c3:c2:f0:96:b4:9b:c0:3b:1f:48:
                    d4:0b:a2:73:43:c2:74:fd:fe:eb:59:26:99:22:b4:
                    1e:ad:eb:63:2a:f4:fa:aa:d7:b6:c7:5a:ec:9d:99:
                    ff:c5:e6:ec:8b:2c:46:7f:18:0e:06:23:f2:6e:43:
                    c5:2d:c3:47:c8:ca:14:11:d0:09:95:9f:d5:f1:17:
                    13:ec:be:44:85:c4:7d:e4:48:a3:15:fc:4d:47:7f:
                    ef:67:95:ed:03:2f:ef:9f:eb:f8:62:8e:a1:c8:17:
                    1d:8a:dd:9a:9a:6d:d6:ae:3c:5a:30:aa:e0:45:d3:
                    b4:a2:a4:74:f2:db:2e:cb:11:d6:53:16:c4:9d:68:
                    fa:44:0e:79:d3:d5:8d:40:4c:fb:26:42:0b:69:88:
                    46:0d:32:a3:fd:1c:6a:c4:de:9a:35:ad:cd:97:91:
                    be:78:e1:1b:5e:bf:89:94:67:42:83:f2:22:78:38:
                    68:c6:cc:70:12:b3:c2:0a:8d:b4:5f:a1:09:20:1b:
                    cc:08:fb:26:8d:61:f6:61:77:e3:35:13:18:5a:50:
                    06:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:76:40:BF:66:99:AD:B6:1F:A0:AA:05:B5:D9:76:24:C9:44:FC:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cc6d438f-900f-3a97-a816-13cdb4331f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:90:6a:e6:36:c3:67:2f:5a:1f:a6:17:d1:a2:ff:f7:67:9b:
         88:4d:4a:c2:07:fe:fe:a3:6b:a2:98:26:21:45:a5:94:07:69:
         51:ae:b2:44:08:d7:55:d7:60:fc:a6:c9:b5:5e:68:4e:ad:a7:
         90:53:18:2e:d2:d2:c2:a9:6e:f1:55:21:ad:c1:ef:59:3e:d3:
         3f:9b:48:b2:09:a9:96:f1:55:ad:32:6d:56:d6:0f:40:8c:50:
         a6:86:c9:23:c3:f1:12:11:36:4e:10:2f:93:68:a1:d4:2f:5c:
         73:fe:7f:4e:27:70:32:bb:fb:3e:11:4a:3b:df:cb:1a:40:8c:
         2d:7f:79:a6:86:2b:da:b8:42:68:07:cc:25:dc:4c:68:92:5e:
         0c:86:45:c7:4a:12:b4:89:da:e1:da:d7:40:e8:01:82:87:13:
         54:c6:8a:b6:0b:6e:a5:08:3a:be:7e:6c:2e:67:7b:53:a2:f2:
         be:e5:ce:83:01:c0:e2:cc:10:b1:2c:18:61:b4:79:75:db:bc:
         b1:7c:39:3b:11:4e:32:7f:91:df:92:32:0e:7a:20:70:50:76:
         e9:57:74:b3:d6:9c:48:98:7c:37:e1:2e:51:e0:68:1b:32:74:
         9f:b2:95:1c:f8:70:7a:8a:97:2f:da:02:1d:65:16:5e:d8:74:
         b1:95:b4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:00:39 2025 by rpki-client