Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0fda407-3641-3385-93d9-4a7761c5b20c.roa
File:                     a0fda407-3641-3385-93d9-4a7761c5b20c.roa (raw, json)
Hash identifier:          7qXWcEbkwpVc8V5AqUwnKXxVYW53NS8xiyBfoK4kZMI=
Subject key identifier:   5C:EA:35:02:D8:6C:34:4A:05:80:ED:9B:0E:D1:AA:6E:8A:D9:02:15
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B2A31DB181F6CB2E19C40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0fda407-3641-3385-93d9-4a7761c5b20c.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     3356
IP address blocks:        204.104.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:2a:31:db:18:1f:6c:b2:e1:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=853a7613-bfed-40dc-ad63-4466d1c0e897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ae:72:a9:66:8f:59:20:df:af:69:e5:8e:d5:
                    58:e1:c8:5c:87:5f:23:7c:eb:29:66:26:64:cf:b2:
                    8c:e5:b5:53:06:69:98:e5:54:d6:63:af:05:6e:8e:
                    66:0c:be:4b:22:92:84:77:12:b3:67:ce:c6:ec:0c:
                    60:0b:a9:94:47:6b:39:5b:27:d8:90:29:be:f1:50:
                    ee:06:e3:84:c4:a7:2b:c2:bc:ae:57:8d:34:a8:8f:
                    56:4d:60:ec:93:42:2f:13:42:92:aa:73:a7:5c:9c:
                    1a:88:10:5c:c5:29:db:e0:1f:00:8b:b8:c5:18:e6:
                    cd:a7:fb:c7:d9:96:37:f3:74:df:24:54:4a:dc:6d:
                    45:d9:d3:a2:d9:e8:8b:4c:01:6f:65:f7:3f:fe:7e:
                    ca:de:16:76:e6:5a:a9:77:0c:ab:40:50:ff:bb:5d:
                    17:bc:20:80:1b:e0:18:ce:43:92:1e:db:1d:be:b2:
                    b1:7e:70:58:c7:32:1b:19:92:12:44:48:29:93:3b:
                    4e:82:95:6c:0c:3f:69:78:40:ca:52:59:99:1b:b4:
                    8f:60:14:da:a4:c0:bd:1e:e4:4e:9b:41:0f:7b:7a:
                    d8:e7:d2:4b:fc:0a:4a:5e:62:53:6b:7c:b4:9e:52:
                    7a:3c:ee:bf:92:aa:ad:e3:48:f5:67:01:01:c8:62:
                    55:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EA:35:02:D8:6C:34:4A:05:80:ED:9B:0E:D1:AA:6E:8A:D9:02:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0fda407-3641-3385-93d9-4a7761c5b20c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:4a:76:3e:62:b0:22:55:d0:7c:15:ee:85:8f:a4:2d:2d:c0:
         5b:5a:76:7f:6d:3c:c4:d6:47:3f:ab:3c:a4:c7:5a:17:98:af:
         40:99:3b:33:6e:74:50:6b:79:eb:61:b8:a0:43:fd:f9:c5:61:
         01:57:4d:7b:3b:d5:fb:56:0a:66:38:e3:40:7f:be:64:43:5c:
         57:15:40:4f:5e:ad:f3:aa:7e:de:8d:c5:f3:ae:d5:0e:f5:d1:
         68:34:99:ec:8e:ae:4f:d8:e9:4a:60:63:8a:0f:95:f3:32:71:
         54:98:e3:79:ee:9a:e3:a9:6c:db:eb:f1:88:42:4c:9e:47:e5:
         90:4c:f3:6b:80:86:44:0d:e5:53:37:7f:40:d4:8f:bf:c1:48:
         e8:ff:58:4a:37:ab:53:20:86:eb:90:22:93:ea:83:7d:0a:90:
         d0:45:b3:09:c3:27:15:2c:24:8d:3c:a4:a7:95:99:ee:45:dc:
         f5:2b:52:8a:c9:7c:4c:9c:ea:56:97:5e:9e:b3:20:f4:f3:ad:
         f9:88:62:a5:39:68:16:6d:94:c6:86:f9:9b:8e:61:ae:97:f3:
         cd:03:c2:6c:4c:6c:71:21:8a:b5:b0:77:1e:46:64:16:36:61:
         25:de:8a:7c:23:02:9b:15:1b:b8:58:82:f1:1c:f7:8b:9f:51:
         b7:2a:2a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 23:46:36 2025 by rpki-client