Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a4279831-6fa0-3c38-a963-d87b25ca1ce7.roa
File:                     a4279831-6fa0-3c38-a963-d87b25ca1ce7.roa (raw, json)
Hash identifier:          1CB1M/elGlZ4QkZemM0MVApDMD0BC7Dfe0H4Euoudc0=
Subject key identifier:   E5:FE:45:A9:AF:11:F1:65:99:9F:5A:A6:6B:05:EB:02:B4:EF:82:B6
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB690E0ADD999D5DEE9340
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a4279831-6fa0-3c38-a963-d87b25ca1ce7.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     202
IP address blocks:        205.141.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:69:0e:0a:dd:99:9d:5d:ee:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=30cff75c-bac9-4168-a701-a4e94dff16b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a0:a1:0c:f1:ad:cd:27:cf:46:c6:29:ec:f1:
                    0b:38:9a:cc:31:a4:5b:4a:71:67:b4:d2:ac:cb:8b:
                    01:22:4c:8b:2f:36:bb:3e:64:07:26:c6:07:9e:d7:
                    49:a5:58:cc:d1:ac:41:c1:83:ca:62:3e:83:7f:00:
                    5d:f2:a4:1d:96:35:b3:74:9b:a6:96:37:a2:93:66:
                    fa:16:1b:5c:a0:c7:56:88:3d:3a:ae:13:74:a8:05:
                    a9:2e:ef:04:6a:df:f1:66:84:7d:2e:33:38:9d:e5:
                    45:29:77:4f:83:39:f8:31:6c:2f:17:24:73:f4:c7:
                    1d:38:ab:cd:50:8b:02:d6:eb:95:fc:78:17:ae:ea:
                    11:b7:7e:c9:eb:5a:02:94:ee:68:d5:6c:a3:89:77:
                    2e:e0:23:c6:84:4e:55:49:05:15:6b:14:e2:b4:e9:
                    08:ed:89:78:d8:e8:0b:2c:74:1c:0f:6d:c8:29:80:
                    65:60:d8:89:4c:17:bc:08:6c:9d:d2:a3:cc:cf:8a:
                    04:1e:a3:a4:39:0c:e7:19:c8:07:0c:01:57:bb:24:
                    9c:1f:b4:0d:78:8e:9a:1c:70:d1:3f:17:3c:18:13:
                    f0:c8:e6:39:5f:b8:60:2e:74:bf:eb:b5:83:75:f9:
                    b0:07:25:32:6a:55:a4:1d:7c:4a:4b:0e:72:99:88:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FE:45:A9:AF:11:F1:65:99:9F:5A:A6:6B:05:EB:02:B4:EF:82:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a4279831-6fa0-3c38-a963-d87b25ca1ce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:76:97:7a:34:44:30:39:d1:5f:f1:2e:cb:03:24:50:4e:df:
         20:53:1a:5a:75:2e:8b:82:74:9a:ce:fb:01:e3:d3:de:df:70:
         a3:e9:f1:12:e4:11:1e:b4:92:c8:35:79:74:2d:66:6b:84:08:
         bd:4e:d9:bc:38:9f:4d:e5:10:16:87:7b:00:db:09:51:e0:8c:
         e4:70:f9:de:93:42:66:c9:0c:bd:7e:e8:7f:ee:05:9f:cb:53:
         d6:19:ef:d3:30:37:71:9f:e7:60:0d:32:94:3a:fb:60:6e:16:
         3e:3a:f9:b8:6f:41:79:d8:87:8c:52:15:f2:74:0c:3c:10:a2:
         01:5f:a7:7f:90:57:af:53:a7:4d:39:8d:c8:40:d6:ee:b2:69:
         0a:5a:03:66:f5:f1:a0:f6:b0:b1:05:d6:79:88:dd:01:eb:c5:
         a9:88:b6:8b:c3:0d:d7:b4:e7:51:cf:02:e3:d0:c5:86:b9:4b:
         cd:e3:da:20:26:e6:8e:b7:ef:ad:fb:86:6e:2a:9e:86:61:3b:
         31:b8:02:ff:69:d1:43:13:ff:94:0c:8e:80:2a:12:73:7b:82:
         da:84:fc:68:6d:1a:13:0e:54:b3:2a:7f:a9:2b:00:e3:ee:20:
         30:e5:2b:dd:9d:31:eb:e0:f8:27:1c:de:f8:32:57:79:bb:60:
         49:a8:46:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:05:11 2025 by rpki-client