Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/637448b1-0e67-3cc1-b952-cd1398fb936b.roa
File:                     637448b1-0e67-3cc1-b952-cd1398fb936b.roa (raw, json)
Hash identifier:          k+19BwmMOXaAzUaFQXeRC18Deh1TJnJnxnw2wjL2rdo=
Subject key identifier:   0B:AE:52:DB:5F:49:A5:E6:1C:04:37:C2:B2:EC:B7:17:C1:D7:E1:82
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848BE862260948AFE99F3D73B80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/637448b1-0e67-3cc1-b952-cd1398fb936b.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     3360
IP address blocks:        205.239.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:22:60:94:8a:fe:99:f3:d7:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=a1476999-a807-4550-b3b0-1cc7af34bf5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a9:2d:0c:f9:63:6c:33:99:c2:8b:36:75:ee:
                    1a:8f:09:53:8e:55:53:d5:4f:45:83:62:82:98:e5:
                    88:e8:cb:09:45:2f:79:a7:c6:62:dd:70:ce:19:04:
                    91:44:5a:40:c6:a9:62:8f:1d:a5:84:81:91:91:b9:
                    ca:3e:fe:fb:4e:f0:07:31:0b:d3:1c:3a:10:bd:7b:
                    27:8f:9c:ae:5b:e3:1e:e8:07:fe:60:30:fb:5e:31:
                    bf:57:ec:fd:d1:28:a2:bf:df:38:0b:98:ba:86:14:
                    19:f4:3b:c4:41:e6:fd:22:f6:8c:36:5a:92:91:51:
                    ea:1f:6b:a8:17:55:79:56:36:68:64:58:31:63:06:
                    87:8e:31:33:66:9d:b4:77:1a:68:41:e7:e5:8d:0c:
                    1b:ef:66:bc:32:47:7c:6e:d9:1a:96:bc:a6:2e:5e:
                    1b:c5:44:9d:39:1c:6e:c2:2c:6a:db:89:32:31:52:
                    0e:5f:e1:e8:15:82:27:19:11:e0:13:9c:16:aa:47:
                    e1:dc:d0:a3:47:19:89:e1:dd:57:7e:8c:ce:32:88:
                    f3:6b:1c:95:6b:00:1b:c1:5b:db:5b:1d:4b:5f:b0:
                    1b:fc:7a:b4:cd:ac:47:bd:62:33:f2:29:12:b9:01:
                    bd:70:55:3b:48:d2:21:0e:b0:a3:12:67:65:ef:4b:
                    9f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AE:52:DB:5F:49:A5:E6:1C:04:37:C2:B2:EC:B7:17:C1:D7:E1:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/637448b1-0e67-3cc1-b952-cd1398fb936b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.239.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:4c:15:74:dd:b4:ac:e1:db:0f:00:c5:81:8b:ce:81:68:80:
         5d:ea:67:69:1f:ce:ce:3b:e1:cd:d6:36:47:1d:57:3f:76:53:
         8a:e7:a8:c6:cb:98:6b:58:d7:02:1d:d6:57:56:f3:24:d5:1d:
         98:2c:45:c5:da:4f:52:57:33:ab:de:a6:6e:b3:d7:5d:70:92:
         e2:b5:18:8a:d4:ea:63:65:2f:c5:d9:e2:f7:10:94:60:ac:7a:
         47:95:50:bd:d4:22:3d:68:68:46:88:97:4a:2b:15:a0:b2:0a:
         79:d2:05:fb:fe:53:26:88:9a:8f:1a:e1:0f:6c:51:51:5d:a4:
         86:3f:7a:0d:ae:2a:b9:48:84:8d:d5:82:fc:af:0a:b0:08:d9:
         aa:08:d7:7e:cc:18:a6:6f:42:e2:47:14:55:64:85:40:86:5e:
         55:b0:fe:07:b0:80:85:8c:54:be:c5:f2:54:25:cd:c4:f6:42:
         0e:9e:be:b5:93:aa:66:3b:41:9e:8a:ee:a1:5b:0c:44:07:76:
         04:73:1e:a0:7f:98:b5:b5:be:23:ce:a0:89:b1:94:e6:b6:e0:
         aa:05:98:e5:3f:db:59:92:a3:35:3e:0f:08:8d:8a:bc:8b:a6:
         0a:ee:1e:d7:f5:9b:ff:83:3d:f5:da:fb:8d:0d:e7:a5:53:5e:
         e5:39:1b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:50 2025 by rpki-client