Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/892c4d5b-b580-37ea-84cc-f3d71794f4e0.roa
File:                     892c4d5b-b580-37ea-84cc-f3d71794f4e0.roa (raw, json)
Hash identifier:          wJGQuqTh1FrdQ2TA/Ph3bArljmt3w71nL62gDTkMbL8=
Subject key identifier:   84:46:80:D7:43:4B:40:8A:D2:0A:03:0B:A5:86:26:30:15:65:2F:11
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB5DBBF59B1C099B815120
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/892c4d5b-b580-37ea-84cc-f3d71794f4e0.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     203
IP address blocks:        204.103.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:5d:bb:f5:9b:1c:09:9b:81:51:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=70c40d4f-7d44-4dd3-8113-4f19e777a198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:12:e4:43:a5:a4:45:db:44:b0:f7:cc:6f:dd:
                    b0:c2:9b:72:f4:a6:98:d3:f6:83:d5:1a:bd:a7:8d:
                    a2:02:18:9d:10:c0:38:85:1f:3b:a0:35:fc:bd:1b:
                    40:bf:8a:a2:3e:42:b3:9d:45:9f:37:b7:71:ca:21:
                    ad:0c:00:77:52:4b:66:95:5f:f0:cf:ec:84:24:bd:
                    d4:40:8e:a3:16:27:b5:ae:cc:77:45:dd:fd:f5:e8:
                    e8:41:d4:83:8b:3f:d8:9b:b4:68:da:35:6f:7c:3b:
                    0b:7b:c0:90:60:db:ea:6e:a4:36:11:f8:5d:45:5c:
                    43:c3:9e:97:85:59:72:6c:76:e2:b7:ca:d0:1b:b2:
                    75:21:6c:81:7a:a7:02:36:e4:8b:88:25:a9:33:82:
                    9d:e5:1a:77:1e:75:87:26:87:16:c0:b5:4e:72:28:
                    7d:f6:d3:1c:1c:32:c6:d0:41:d6:8e:47:84:a2:d0:
                    bd:62:32:3d:cf:a8:e9:3d:d1:4a:6c:cb:c9:b8:b8:
                    2c:33:fc:13:79:58:be:35:ef:08:55:3f:9e:92:48:
                    64:cd:81:aa:34:0b:fd:98:13:7c:66:9d:96:d7:8f:
                    8a:e6:a6:64:16:c2:5b:da:3d:2e:5f:57:16:d1:54:
                    56:88:b2:05:8b:cf:80:a3:5f:43:8c:a3:08:55:f1:
                    61:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:46:80:D7:43:4B:40:8A:D2:0A:03:0B:A5:86:26:30:15:65:2F:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/892c4d5b-b580-37ea-84cc-f3d71794f4e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.103.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c7:b5:aa:80:d9:4a:41:66:fb:8e:a8:b9:22:e0:b3:9a:aa:
         4a:79:b1:1f:bd:8c:6e:0f:f2:80:62:98:dd:15:db:f8:92:89:
         c2:0f:9a:e1:52:31:46:6e:47:51:47:3e:36:84:a7:6b:8c:e9:
         c3:56:d9:48:4b:49:7d:38:42:68:ab:bd:82:eb:23:fb:7f:a6:
         9a:3b:2f:b1:f1:d1:c0:a5:fd:d3:9d:69:7f:00:ad:74:5e:94:
         4c:46:9d:4e:10:f9:48:86:f6:0a:f5:07:ef:97:a4:96:1a:1d:
         94:95:d5:e3:65:f0:01:cc:d4:5d:60:66:a6:43:f9:59:0e:80:
         7d:2f:99:f1:c6:14:4c:41:3f:ca:3d:dc:5e:cd:3c:0c:f2:3a:
         66:5c:6b:30:85:db:5c:56:6d:61:df:9d:f9:b7:95:77:03:33:
         94:98:ea:61:72:b2:c1:90:a8:23:e0:80:f5:0e:be:9d:03:35:
         a9:e7:0f:b7:c3:b2:68:50:66:00:b4:ff:1c:8b:6a:6d:fc:02:
         44:d5:8c:a6:60:75:c3:f9:80:1a:5d:9b:94:72:80:55:3a:e7:
         ab:0f:d4:e0:61:6a:05:e4:40:2a:39:4d:b6:76:f9:81:4d:fb:
         27:58:d7:cc:96:47:15:64:d3:90:b5:05:39:d9:ee:22:34:ca:
         5a:01:27:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:10 2025 by rpki-client