Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4375872f-98cf-3a5f-9833-ec14b2e20ac3.roa
File:                     4375872f-98cf-3a5f-9833-ec14b2e20ac3.roa (raw, json)
Hash identifier:          y2fjlizi319/i4lDX0aFKHfsfJth6tKPbVp45wKXQZ8=
Subject key identifier:   12:12:C6:D9:BB:7D:F6:6E:3A:BC:C5:5E:8B:41:BD:50:28:23:FC:F6
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB6A57A1AE4F33D4A57B00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4375872f-98cf-3a5f-9833-ec14b2e20ac3.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     203
IP address blocks:        205.141.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:6a:57:a1:ae:4f:33:d4:a5:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=db3a625d-fcf6-4802-b2d5-6c668ca11834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:16:41:9c:5c:97:ea:b8:81:bd:09:1d:bd:
                    1b:9a:ff:10:57:fe:70:b7:8c:27:04:cd:5c:f1:5d:
                    ca:7d:39:31:13:74:a7:d4:cd:dc:fd:f4:fd:29:b0:
                    e8:73:a0:78:7d:eb:78:73:e2:f6:55:ca:dc:3e:68:
                    da:8f:6e:2d:a8:c7:8b:ad:6a:92:df:f3:fc:b3:a3:
                    b8:be:c1:4b:4e:76:d7:08:a5:51:5d:32:e8:9c:8d:
                    92:f1:b4:d7:89:c5:a8:99:63:ae:a7:eb:e5:d3:54:
                    b0:8c:2a:b0:96:43:7d:ed:29:cf:42:03:99:8e:e2:
                    75:96:1e:82:9e:b6:72:05:d5:25:e2:01:f8:6d:12:
                    ac:60:4e:66:72:9f:a2:6e:3e:35:2b:5f:99:ba:02:
                    68:fa:bb:37:7e:59:e4:d8:a4:4c:00:30:56:c1:54:
                    b9:4b:2d:6b:6d:9f:62:83:18:e7:29:b2:bc:e8:4e:
                    cb:ef:28:8f:2b:a5:a9:35:c4:15:5b:42:47:1c:74:
                    0e:b1:20:06:d7:bf:0a:8b:ae:ea:d8:03:45:e1:59:
                    2d:0a:6e:92:20:38:82:e6:5a:61:35:92:60:16:aa:
                    cb:34:ef:12:5c:52:fc:80:48:74:2b:72:52:35:49:
                    65:74:43:15:07:d2:e0:3c:06:a5:dc:91:35:28:c3:
                    97:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:12:C6:D9:BB:7D:F6:6E:3A:BC:C5:5E:8B:41:BD:50:28:23:FC:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4375872f-98cf-3a5f-9833-ec14b2e20ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:95:a6:35:3b:77:64:46:14:2d:27:81:3d:f1:0a:a5:a3:c0:
         77:f7:50:c5:8b:19:a0:33:02:1f:ba:0d:9f:91:fa:4d:61:8f:
         4c:82:80:d0:6d:8b:11:81:6c:c5:ee:64:67:40:7d:18:49:f5:
         c2:a1:33:c7:83:f3:4a:35:f3:66:4c:fd:ab:02:50:62:61:ac:
         7b:d8:c7:f6:be:92:5c:3b:da:ca:d4:5c:d6:81:54:b3:a1:0d:
         f9:8a:db:4d:d7:1f:5b:16:14:dd:7a:4b:84:3c:90:ae:47:0e:
         c4:5c:5f:3a:be:51:6a:22:70:d6:29:46:fb:57:b9:52:63:69:
         1e:dc:a9:a5:4b:30:5b:84:21:cf:f1:86:87:ef:2a:fc:52:a0:
         d1:f4:49:04:3b:ce:39:50:65:29:25:7e:24:61:4a:40:0b:99:
         3d:65:e5:6a:88:b0:c4:e7:1a:1b:74:28:31:fb:9b:54:10:7c:
         af:9e:50:ac:08:ce:51:b0:0f:2d:0e:38:bc:f6:72:b1:09:79:
         52:cb:88:a0:25:bf:2c:a7:3c:d0:cf:21:49:36:89:05:cd:7d:
         59:69:10:20:70:47:90:9c:ed:a2:f4:3b:0d:b2:74:11:ee:31:
         c0:c2:27:6d:4d:16:c9:36:6d:81:95:fb:3a:f8:2d:63:bf:a8:
         ba:41:3b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:31 2025 by rpki-client