Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0b890bd4-28a7-30f7-bbe2-b135ed8944a5.roa
File:                     0b890bd4-28a7-30f7-bbe2-b135ed8944a5.roa (raw, json)
Hash identifier:          mzCMtO0viasT69+ebw+VXYkySvxQ5DiLo282PGUodVw=
Subject key identifier:   00:7A:F4:16:D9:DD:1B:F9:46:95:D8:B6:3A:26:6B:D1:4B:AD:2B:B0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB679D703ACC7EF0362F80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0b890bd4-28a7-30f7-bbe2-b135ed8944a5.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     3360
IP address blocks:        205.141.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:67:9d:70:3a:cc:7e:f0:36:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=1fc85757-3cc7-4d77-b952-afd11159a03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:b9:f0:72:99:5d:37:b1:ae:40:59:a1:82:
                    26:5c:57:c9:64:93:4f:94:af:6b:48:be:9d:b5:86:
                    8f:12:e1:34:7c:db:73:2b:9c:ed:f9:de:57:db:2f:
                    b0:dd:01:3c:92:9a:c0:6d:cd:2a:98:44:da:31:78:
                    f0:16:44:da:a1:66:1f:8d:79:e8:73:df:74:40:35:
                    e1:28:1c:ec:c7:2d:ca:74:86:4d:63:0f:4c:0d:65:
                    fd:28:78:33:3b:da:a1:9a:e1:1d:9e:58:53:18:04:
                    4e:a8:ab:ef:d6:ba:45:5a:76:9b:82:28:47:b5:ff:
                    bf:44:62:6a:ee:15:67:13:72:cc:83:3b:6b:f9:da:
                    3e:ec:eb:1b:b3:18:61:c5:65:8d:5a:66:e3:70:18:
                    84:08:17:88:29:1f:cd:c2:99:30:46:6f:6b:7d:7f:
                    22:c4:fa:42:07:6b:fe:b2:7a:36:6e:7b:fa:c0:f9:
                    b6:d6:47:f1:a5:28:1f:ad:16:68:18:c7:95:c6:5d:
                    7b:2f:92:45:8a:8f:1b:34:0d:00:e4:dd:e2:7d:18:
                    9c:98:05:b1:3c:b2:7c:4a:5a:2d:6b:b2:80:b0:82:
                    6d:bf:f3:79:7d:b2:24:d7:d6:c0:35:3c:b0:4c:27:
                    02:e7:91:77:9f:36:08:0e:a5:f3:a8:ba:a0:f7:22:
                    47:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7A:F4:16:D9:DD:1B:F9:46:95:D8:B6:3A:26:6B:D1:4B:AD:2B:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0b890bd4-28a7-30f7-bbe2-b135ed8944a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:42:53:4e:d0:9a:fd:b4:db:48:17:95:e7:2d:c9:07:3d:04:
         bf:9d:b2:43:4b:52:c3:22:d3:3c:58:2b:fa:47:99:52:b8:18:
         7d:34:f8:66:c6:30:95:f7:e8:d9:e9:81:1e:50:eb:90:d5:8d:
         b7:26:92:16:3a:56:f4:46:94:b0:da:23:ec:97:e5:e7:66:d1:
         0b:ba:0b:cc:59:fd:67:80:92:4f:d7:cf:c8:0f:59:74:4c:58:
         36:ce:2c:9e:a3:3a:e1:d0:59:ac:e0:bb:e7:fe:cf:95:a2:a3:
         88:da:ca:c7:e4:d9:2b:ee:e3:bc:9e:e5:62:90:7b:09:f1:dc:
         e9:85:3e:9b:a8:f2:6f:cc:ef:9a:38:b8:a5:13:b0:eb:17:c0:
         74:cd:62:47:0e:1f:b6:a4:ed:42:3b:ec:b2:67:d5:f7:76:b2:
         4e:aa:de:08:8d:aa:e8:5b:fa:50:b8:46:29:1a:d1:ac:93:84:
         f8:00:f2:7a:8d:eb:4b:14:aa:e8:d7:58:05:fa:05:b2:2e:3d:
         5b:4b:09:cb:c7:11:00:b1:42:b1:9d:69:c7:9b:2b:a6:bb:d8:
         46:4b:e1:fd:6e:be:b9:c5:f4:9f:29:83:f4:79:0c:97:f0:08:
         27:4a:74:7c:96:f3:49:a8:75:8a:2f:ec:e5:8e:8f:b7:f9:63:
         24:9d:cd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:34 2025 by rpki-client