Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3799d942-2309-36f8-9e99-06b54dd0fae1.roa
File:                     3799d942-2309-36f8-9e99-06b54dd0fae1.roa (raw, json)
Hash identifier:          erFKKVHNneL5832V25NS1pR2glLNth8P8ScsMU0nzE8=
Subject key identifier:   9C:CF:D6:C0:72:4A:A8:D2:8A:98:26:4A:5C:3E:71:94:18:AD:44:D4
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B2DE236D760E659630880
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3799d942-2309-36f8-9e99-06b54dd0fae1.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     3356
IP address blocks:        204.105.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:2d:e2:36:d7:60:e6:59:63:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=6fbd71c9-4e85-429f-a6b5-fcd313cfa4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6b:1d:45:ee:ae:7c:1d:ef:b2:69:7d:9b:ad:
                    8e:45:d4:6f:27:de:94:3a:f7:a2:d5:2b:33:2d:08:
                    8f:19:7d:30:6f:02:55:29:91:fa:42:1d:ef:27:3a:
                    b5:f2:2f:dc:06:cb:a9:dd:79:49:06:76:40:66:1c:
                    98:fe:ef:1d:f5:81:d9:6c:23:1f:28:73:77:5d:eb:
                    9c:cf:01:12:74:ae:52:e1:e7:93:f1:4d:c0:07:4c:
                    ef:80:e0:45:6d:d2:16:d7:ab:10:66:64:9c:0a:79:
                    97:e9:12:4a:0e:c3:66:7f:fe:dd:69:74:df:ec:31:
                    8f:6a:76:98:2d:c2:39:0c:a9:49:af:06:4f:28:a1:
                    63:fb:cb:fd:10:11:05:59:01:74:5f:75:f0:da:fc:
                    72:b2:c2:ad:af:b7:1a:85:33:b3:b8:05:6f:05:6f:
                    5a:ae:ee:1a:cb:48:53:2f:84:c9:a7:a0:24:d2:7f:
                    07:6c:c7:47:06:c0:a3:f7:36:27:49:e4:92:75:60:
                    93:6d:4e:7d:3c:99:da:37:ca:74:30:fb:7f:fd:e8:
                    c4:7b:97:59:6f:3d:ca:6b:dd:d5:d0:9a:6d:40:cc:
                    53:72:ea:a2:b3:db:02:41:04:02:23:a9:0e:6d:bd:
                    0b:49:ae:22:4b:d2:f0:a7:8b:df:1a:99:4c:f1:bd:
                    38:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CF:D6:C0:72:4A:A8:D2:8A:98:26:4A:5C:3E:71:94:18:AD:44:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3799d942-2309-36f8-9e99-06b54dd0fae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:c1:9c:e4:fc:d4:88:0c:84:2e:c9:e0:df:12:67:63:36:97:
         d1:0b:e9:13:58:b7:77:aa:4c:90:ee:f3:f8:54:9e:81:80:df:
         02:01:16:20:7d:88:8e:94:ff:1b:14:e5:c6:d5:5d:f6:ce:58:
         47:4c:33:96:f5:ab:d2:e2:c6:d4:78:22:c4:c3:88:c0:3f:55:
         1b:85:d5:af:4a:77:32:51:07:0a:8b:97:cc:ef:16:61:92:c8:
         ac:6c:ea:2f:54:b4:fd:94:0e:1c:22:f1:a1:e0:d5:85:59:5f:
         97:7b:b2:1f:47:8f:af:0c:4a:76:96:db:6e:14:7b:9d:09:ae:
         81:dc:85:f6:b8:ce:29:e1:56:69:d6:35:49:d5:31:84:59:d2:
         cc:e8:0d:9e:fb:e4:b3:3f:9d:e7:9c:86:3b:21:47:2d:9a:dc:
         64:42:e5:f4:1b:1b:50:7e:d3:ac:49:30:46:fa:92:4f:9d:9e:
         2d:45:83:a2:41:77:17:89:da:9d:d0:e6:a3:b3:2f:8a:f3:d1:
         3c:77:c9:2e:d1:37:75:fd:33:e4:f8:36:ad:97:8c:8a:15:a1:
         e5:53:3b:93:4d:93:c9:42:96:f0:5f:3e:da:4a:f0:b3:8d:dd:
         63:dd:eb:8f:ac:d8:75:46:0e:07:dc:72:db:90:b7:f2:92:3a:
         49:7d:88:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 23:45:55 2025 by rpki-client