Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19b03211-d410-30b4-802c-9bc89d88b1e7.roa
File:                     19b03211-d410-30b4-802c-9bc89d88b1e7.roa (raw, json)
Hash identifier:          lgK6sd87JbaeM0DDnEQU7RsIkvrFMvxS4VSRVn1Edfg=
Subject key identifier:   6E:33:76:98:78:42:A0:A1:1F:CB:39:31:C2:8A:66:0D:03:D7:5B:F7
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849CBCFA1F4B67E98C5FDBCDCC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19b03211-d410-30b4-802c-9bc89d88b1e7.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     203
IP address blocks:        204.104.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a1:f4:b6:7e:98:c5:fd:bc:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=1efcf307-3325-473b-81ec-ab547b795d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:01:08:66:95:26:b3:55:f9:ee:8b:f1:6e:23:
                    8d:e5:51:9e:25:29:e3:64:de:bd:81:39:f0:bf:da:
                    ed:c6:ea:85:fe:de:a9:0b:3f:f2:c1:74:7a:c0:bb:
                    9e:bd:f4:f8:de:a9:44:68:5e:70:3a:b7:50:c1:d7:
                    1f:b0:04:11:19:5b:b9:32:59:ca:8c:8d:0d:2e:ef:
                    5a:35:1c:6c:3b:e6:24:bf:9e:f4:e3:74:dd:96:66:
                    fd:4c:76:c5:06:68:de:c6:67:99:29:8c:5e:29:4b:
                    c9:55:bc:e6:ca:47:df:29:f6:67:db:ef:63:26:f2:
                    51:e0:85:b3:70:4a:b1:1f:fd:da:5b:78:c0:c0:b5:
                    04:c1:37:86:40:3e:a2:4e:e1:fa:ab:69:ec:bc:77:
                    ce:e2:94:61:48:df:ec:39:71:c5:96:d3:47:b5:db:
                    7e:93:b6:a8:31:35:92:f5:1a:48:eb:e1:93:53:ce:
                    8a:ee:20:56:0d:18:47:19:96:2c:cb:9e:af:3b:f6:
                    08:92:dd:3a:75:ea:29:f2:11:e3:52:59:83:02:63:
                    6b:dd:5e:f6:14:08:da:02:82:aa:74:6f:41:4a:63:
                    a8:e1:3b:be:23:8d:65:83:56:f1:9d:23:61:d2:a2:
                    b7:0e:6b:c7:fb:36:05:f1:1a:14:59:55:89:8e:63:
                    ee:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:33:76:98:78:42:A0:A1:1F:CB:39:31:C2:8A:66:0D:03:D7:5B:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19b03211-d410-30b4-802c-9bc89d88b1e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:77:5b:f1:33:86:67:51:93:c2:d3:16:0e:f5:5f:96:da:1d:
         6a:b9:99:56:dc:31:73:4a:ea:c6:fc:69:a9:71:67:b6:89:2f:
         6e:59:8e:73:95:76:02:df:76:07:e0:8e:f9:2f:20:6b:b8:f7:
         55:93:d7:3b:00:46:f7:4b:18:91:39:fa:ec:37:8e:f4:38:02:
         a5:e7:34:b9:d0:a7:3e:98:98:3c:40:c2:23:65:5c:6d:f5:b9:
         df:ea:f6:64:53:51:70:e5:b3:58:4f:37:4d:cc:a7:4f:9b:19:
         85:61:2b:81:29:15:ca:4f:32:53:47:a5:2e:5c:40:41:a5:79:
         5f:6c:fc:6f:e3:20:eb:50:2d:d6:7f:4a:f0:68:8c:42:0e:42:
         36:e8:c1:1a:db:69:3e:12:52:a9:de:57:e8:48:4e:7c:df:4d:
         2a:cc:95:b0:ad:ef:5d:0d:3e:e9:fd:21:63:0f:82:80:75:38:
         fa:40:de:70:4c:da:ee:f3:2a:60:77:a7:90:08:a4:c4:17:05:
         8a:76:ed:2c:d2:7b:6a:68:72:01:f8:89:db:aa:1c:4d:63:6a:
         5a:ab:95:dc:84:5c:80:90:aa:4f:41:57:57:26:2b:b9:1f:4b:
         9b:bf:1f:0f:ee:30:ff:00:51:b2:78:26:dc:80:27:de:69:a9:
         2e:e2:80:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:37:20 2025 by rpki-client