Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a27b0c0-ae59-3f5b-9372-805a421b953b.roa
File:                     8a27b0c0-ae59-3f5b-9372-805a421b953b.roa (raw, json)
Hash identifier:          z/HfYk5bmUibVBHTWQm6HTcrn4mvjarmADLPd0uON0k=
Subject key identifier:   31:44:E1:22:FA:C6:D6:14:1C:93:BC:37:40:CF:38:ED:D5:CF:A8:52
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB695B93DC508CD86CB700
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a27b0c0-ae59-3f5b-9372-805a421b953b.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     202
IP address blocks:        205.141.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:69:5b:93:dc:50:8c:d8:6c:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=9af1f000-5135-4893-9137-174afc2932c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:58:bf:48:77:69:3d:a7:97:3d:bb:1a:9c:98:
                    de:d0:30:d5:66:ad:2d:c4:9a:de:5b:f1:9c:a7:dd:
                    af:64:c5:0c:a1:0b:89:1d:4b:d9:11:d3:18:bc:7d:
                    3f:9f:9b:af:67:de:21:2b:14:60:82:d0:23:6e:55:
                    36:62:97:1c:68:68:70:34:71:f2:6f:4a:46:93:b9:
                    7b:80:5a:e9:8b:2b:b7:c0:3f:3c:74:4e:b5:b3:24:
                    dc:6b:8b:ff:61:c4:8c:5d:31:cb:84:d3:ff:ed:a5:
                    55:47:f8:b5:ab:65:9a:fe:2e:df:3d:ed:4c:78:2d:
                    ea:59:c0:4b:a6:ac:42:b6:bb:d3:a7:49:4b:e7:47:
                    3b:b9:78:45:cb:57:6d:0c:45:5d:f9:c7:ae:fb:9d:
                    f1:0d:40:cc:7c:67:77:dd:d9:62:5b:89:e4:75:d1:
                    40:73:2c:c0:ba:2c:76:b1:10:39:a4:95:d5:e7:cb:
                    d3:66:5c:78:ee:27:b7:bc:90:e0:b4:69:6e:a0:6e:
                    3c:cd:38:43:cf:4d:32:85:db:31:b6:56:80:7f:ad:
                    2d:3e:c5:d2:6f:1d:24:28:8d:be:fe:cb:f0:51:52:
                    9d:1e:bd:f1:d4:d6:8b:56:8b:58:71:16:7a:25:93:
                    8f:51:1d:f3:6a:4d:cb:4d:a2:98:5d:12:28:44:ca:
                    e5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:44:E1:22:FA:C6:D6:14:1C:93:BC:37:40:CF:38:ED:D5:CF:A8:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a27b0c0-ae59-3f5b-9372-805a421b953b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:8d:89:9a:fa:c8:89:30:b9:65:75:aa:1b:5c:cc:34:c3:ec:
         f4:b4:d3:50:c6:e4:b2:a8:63:12:0f:2c:e0:2c:43:3e:b3:f5:
         28:25:76:7d:68:67:9b:de:ab:c6:fa:81:48:ac:38:ef:18:8b:
         8c:d2:88:54:49:27:50:47:62:52:30:3f:61:04:ac:cf:4c:12:
         db:95:a8:dc:11:09:f8:14:0b:5c:b7:77:46:ae:fa:72:a4:68:
         f9:54:6b:14:39:73:3f:13:f1:94:06:c3:f6:4f:09:f2:b8:b7:
         d2:d5:83:55:10:29:7a:35:9a:8b:27:ec:1a:15:e3:ce:f2:02:
         1a:17:98:be:94:f4:1e:ac:6e:63:6e:60:49:7c:de:9b:5a:d5:
         18:5d:54:0d:6b:b0:35:b5:e2:53:d7:1a:32:13:d2:e9:c7:92:
         43:1e:62:ae:1b:20:a0:62:91:dd:a2:c7:bc:4b:4e:85:c7:30:
         6b:61:38:e5:14:1b:16:a2:ec:1f:ef:ae:59:52:4d:00:36:60:
         1f:3a:a0:66:f9:6c:25:95:5d:70:9f:19:0a:ea:45:aa:97:6a:
         cc:dd:71:5a:51:41:35:a9:26:ac:c0:96:43:2c:49:dd:44:5e:
         da:25:67:10:eb:d4:bf:74:94:52:f5:56:8a:26:66:96:0d:de:
         73:77:c0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:08 2025 by rpki-client