Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f91def5-8fb2-3eca-b2b6-f02c311b1869.roa
File:                     4f91def5-8fb2-3eca-b2b6-f02c311b1869.roa (raw, json)
Hash identifier:          eXoAO8wMnVl0hamNbFdir7awExekY3GTSIGdVyqHJpk=
Subject key identifier:   AF:D6:49:B2:BB:07:95:0A:C6:BE:8A:5E:C5:98:21:8D:DF:FC:43:93
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584832F01F8F77043FD8E988EA10
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f91def5-8fb2-3eca-b2b6-f02c311b1869.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     202
IP address blocks:        204.105.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:1f:8f:77:04:3f:d8:e9:88:ea:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=0efb767b-aef5-435c-949e-3b5cf7cf8dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4a:66:d9:76:ac:72:92:ee:f3:e3:a4:6b:e4:
                    c2:a0:80:b3:b6:90:d5:3a:d6:39:0c:14:f0:06:96:
                    7d:aa:6d:11:05:2a:7a:2b:67:b7:17:e1:86:aa:b0:
                    a0:83:9e:04:96:e1:fe:6d:31:fc:da:97:f9:f8:94:
                    07:28:73:8e:7f:c2:39:bd:8f:30:10:52:f0:d0:30:
                    a3:0f:04:c3:7e:09:92:96:61:96:80:1c:bc:ed:2a:
                    fe:b6:4c:86:45:f8:6e:5d:35:13:14:7c:bc:e1:8a:
                    02:90:63:56:96:d8:76:65:70:3d:64:d1:ee:1f:22:
                    ca:ce:54:36:34:7d:75:54:cc:17:7c:56:b3:53:de:
                    1b:fd:f0:c9:db:87:4c:ad:6a:42:fa:c6:c9:81:f4:
                    d2:11:f4:0d:25:ba:79:c9:74:fd:74:e1:80:7f:45:
                    ec:89:01:5d:f3:7a:89:c8:ea:4f:20:9b:6a:9d:62:
                    a9:1e:4d:48:10:4a:a2:a8:8d:1c:b4:03:5f:74:b4:
                    11:28:2c:21:2a:ea:37:29:17:aa:27:c9:e3:d4:4b:
                    44:45:c8:8e:bf:61:33:c8:f6:5b:5d:88:51:ff:30:
                    d3:99:ba:32:56:9c:19:07:6c:c0:7a:56:7a:e1:0c:
                    46:cc:54:77:9f:81:56:04:f2:a6:43:fd:65:79:8f:
                    cb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D6:49:B2:BB:07:95:0A:C6:BE:8A:5E:C5:98:21:8D:DF:FC:43:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f91def5-8fb2-3eca-b2b6-f02c311b1869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:2f:e4:60:7b:38:f5:c1:a1:3c:99:9e:27:8f:10:be:68:10:
         20:1b:28:20:c1:08:22:f6:e2:c5:4d:fd:a2:7a:6f:bb:2f:f2:
         f2:28:52:5a:1c:07:f3:bd:28:42:f4:11:df:7e:37:00:be:e0:
         92:73:53:35:6b:23:83:93:58:4a:8b:60:b4:37:b3:61:1b:88:
         b7:20:df:c4:cd:6a:28:e4:5d:d0:87:2c:33:31:fe:b6:10:81:
         65:e8:5e:9b:c7:6b:1a:8b:07:36:ac:56:0c:92:7b:74:35:f7:
         0b:a7:31:01:b2:1e:af:46:ee:d2:35:71:1e:55:94:49:f2:3d:
         45:40:74:d0:ae:55:c1:4a:16:ed:87:a1:88:72:e8:38:9b:95:
         42:a2:24:a8:96:dc:aa:07:ac:ba:42:c8:11:c9:42:2e:23:a1:
         1d:dd:92:67:3b:05:f5:c7:d9:2a:9c:a1:4b:53:38:54:d7:15:
         fa:81:ec:d5:e0:6a:b8:8f:5f:39:c6:5a:6c:ee:14:cc:80:20:
         c2:11:ba:98:cd:d0:aa:d3:1c:61:6c:e2:81:38:45:27:dd:bc:
         8c:ae:0f:43:f0:38:99:fc:c5:b3:07:40:c2:a4:c6:8e:dd:c8:
         cb:c3:0e:00:77:7d:e8:88:fa:61:14:97:2b:51:dc:a2:dc:b8:
         ef:61:17:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:39 2025 by rpki-client