Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/786b9b0e-dd64-307c-b091-efb0d1d2017c.roa
File:                     786b9b0e-dd64-307c-b091-efb0d1d2017c.roa (raw, json)
Hash identifier:          dXiQbU8AWgJ3LvXjHkunood3wH3KFo9RwI7M4FFp/40=
Subject key identifier:   B1:1C:9F:D1:44:A7:2D:9B:FE:96:84:D1:D9:05:CB:D5:E8:4A:54:6F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849CBCFA1BDF77B5E1E2157EDC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/786b9b0e-dd64-307c-b091-efb0d1d2017c.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     203
IP address blocks:        204.103.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a1:bd:f7:7b:5e:1e:21:57:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=80da3d2b-779b-42ea-bcb9-f449496a7f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7c:d0:88:ac:1c:60:47:d4:0a:f2:fa:f1:69:
                    cc:0e:45:df:13:79:5c:1c:e7:02:bc:2d:ca:a0:51:
                    fe:6f:98:be:62:2b:0d:92:89:d9:a5:6d:50:e6:81:
                    68:cb:ca:f3:f5:83:70:e5:fb:6c:0d:b6:3e:cd:c4:
                    92:af:60:5d:ce:10:97:51:79:18:51:a5:84:26:51:
                    86:27:54:8e:b0:8d:c5:b7:8b:3c:15:e1:b8:34:8c:
                    77:0d:c6:56:68:ac:31:d1:7d:2e:25:51:47:14:dd:
                    5d:4d:1d:0b:74:16:62:0d:be:03:64:2a:9b:0c:dd:
                    98:03:07:ae:b9:82:6a:cd:23:7e:a3:5e:e3:69:98:
                    bc:e5:2b:e6:bb:a0:95:8b:b1:9f:c8:cf:f0:58:4a:
                    b4:25:59:6f:ad:31:cc:81:c4:95:87:77:66:8f:86:
                    38:c4:8a:e6:ef:0e:d0:40:7a:5f:99:8d:20:4a:30:
                    bf:10:f3:bf:67:83:bd:2b:6f:e3:da:43:75:c5:b9:
                    10:d2:21:38:72:8a:4d:6d:f9:b9:da:9d:ae:c7:b1:
                    99:2b:cb:23:95:10:e7:cc:e7:e1:68:c2:63:52:9c:
                    2c:28:b1:cc:fc:da:ba:0f:10:64:85:74:44:b5:df:
                    ce:36:cd:b9:5b:ba:13:5c:0c:35:9e:5f:79:2e:c6:
                    75:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1C:9F:D1:44:A7:2D:9B:FE:96:84:D1:D9:05:CB:D5:E8:4A:54:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/786b9b0e-dd64-307c-b091-efb0d1d2017c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.103.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e6:fd:90:53:60:79:71:af:df:33:91:75:09:da:be:a4:be:
         8b:80:d7:cd:c0:83:d6:32:c8:00:59:98:ad:68:d2:8f:87:58:
         d0:44:49:78:53:36:1d:53:90:34:57:98:3a:c9:b2:f3:79:bb:
         86:75:5c:a4:19:25:3e:53:e2:5a:80:49:11:96:f7:99:11:3c:
         93:2d:cb:04:e1:06:fe:d3:7e:7f:1e:72:4a:c2:d0:eb:ec:5c:
         fb:c2:a2:24:a2:22:8f:bf:be:d5:58:d5:4f:6f:ae:40:73:63:
         1e:75:e4:aa:d1:e0:79:e2:a9:2b:45:66:00:07:ec:2f:db:f8:
         9b:f7:5e:77:70:73:e3:0a:46:87:08:b7:77:0f:75:a5:c7:e2:
         49:fa:46:96:d9:c4:42:01:f7:52:26:5d:fd:23:29:60:20:d3:
         d4:fe:7d:a7:75:48:f4:66:cc:4c:f7:49:4b:9e:5a:b0:b4:00:
         9e:23:74:01:45:88:8e:c7:e8:ac:24:33:f8:9a:6a:d9:b3:ba:
         1e:fe:f9:9b:94:11:98:3f:bb:d4:d4:ed:ba:2a:47:48:a0:ce:
         68:23:9a:fb:da:02:e8:b6:7e:f8:07:02:e3:61:df:bc:96:f3:
         a1:07:27:05:d3:b2:fe:c4:fb:03:0c:f5:11:07:d3:01:af:ac:
         a0:7f:d0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:08:52 2025 by rpki-client