Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7576536-6b2a-3a6a-8e38-92c3daaeff99.roa
File:                     a7576536-6b2a-3a6a-8e38-92c3daaeff99.roa (raw, json)
Hash identifier:          0mvGqeIXxbS0TZGqDCL0FbEZOEQvUOr78gCBCXDSzSA=
Subject key identifier:   C2:59:C8:78:2A:31:57:0A:DE:B8:BD:2E:0E:AC:53:DA:2B:5B:07:9E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB621A5C93E14C75A25D00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7576536-6b2a-3a6a-8e38-92c3daaeff99.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     203
IP address blocks:        204.104.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:62:1a:5c:93:e1:4c:75:a2:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=70ed4d1d-b4a5-4fcc-a4e9-9f19945ac9ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a4:af:a7:f7:47:b9:ba:61:f1:11:aa:39:da:
                    b8:bc:a4:9a:16:b6:33:b8:7c:f0:31:46:0b:ea:21:
                    41:fe:7d:60:c0:8e:c3:64:db:7a:d5:3f:9a:8e:ce:
                    84:c6:a3:53:ee:ca:a0:33:b2:b4:2c:b3:45:a5:40:
                    37:ca:b5:7e:7b:ff:77:22:fa:19:c3:25:8c:e6:bf:
                    f5:34:bc:96:e6:5c:72:08:b2:24:1f:27:86:b7:05:
                    78:dd:7c:cf:34:e0:8a:10:c9:c9:4e:18:22:19:eb:
                    90:f0:30:85:6b:a3:ba:fa:ce:7e:59:b3:48:c1:76:
                    dd:0a:3e:4a:da:b1:08:8f:fc:79:ad:60:e6:4f:6d:
                    41:49:44:d3:1d:b5:7a:2a:68:a8:4f:71:5c:f3:93:
                    35:04:84:0e:c7:50:32:cc:d5:1c:7f:ad:f7:6e:da:
                    5d:63:51:5f:f3:ad:9d:aa:41:c7:31:8a:54:76:df:
                    65:dd:2c:b1:8c:0b:52:8f:22:17:b8:4b:78:7c:d2:
                    8c:24:2b:fb:6c:1e:b7:5f:ee:4f:60:01:37:56:0f:
                    01:76:4c:29:d8:6c:55:61:47:7b:0f:ce:db:ef:c1:
                    dd:58:a9:9b:c1:c6:63:17:42:4a:65:a8:dd:08:54:
                    99:23:57:21:55:7f:0f:91:79:66:f6:d0:46:3c:df:
                    f1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:59:C8:78:2A:31:57:0A:DE:B8:BD:2E:0E:AC:53:DA:2B:5B:07:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7576536-6b2a-3a6a-8e38-92c3daaeff99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:f4:18:98:29:09:21:e8:c6:4f:c7:16:07:bd:a7:05:ae:0e:
         a4:01:1e:9e:bc:c8:95:6d:ae:c2:6d:51:b9:ef:2f:3d:19:e0:
         eb:41:4e:b2:ff:82:bb:b8:84:64:5e:62:f3:85:df:b6:cd:cb:
         c2:81:f2:d0:b0:f1:5b:3b:0b:ee:46:0e:c1:81:d3:6b:fe:9f:
         be:b2:71:d0:2d:cd:7c:7c:42:b8:27:41:09:fe:22:39:8d:61:
         eb:e9:9d:b1:9a:8b:5a:4e:41:e2:32:44:5c:ec:27:8a:2b:55:
         b1:8d:93:c2:ac:ee:a9:50:fa:a9:27:62:8b:0e:43:65:89:3a:
         a1:9b:d7:a2:81:ce:8b:23:3b:a4:4f:d2:a9:ba:e9:57:b8:9e:
         ee:06:06:71:2e:48:fa:ff:91:09:97:11:66:95:6b:1c:c0:bb:
         a3:e9:ed:97:43:11:7d:cc:61:14:79:f8:bc:99:0f:5c:7b:17:
         cc:54:14:3b:de:82:69:f9:18:87:39:a3:02:e2:f6:3d:0f:3a:
         ba:d4:59:b5:13:7d:fe:51:06:ff:1a:58:9f:29:be:b5:20:76:
         b7:4d:89:68:44:6f:60:44:ef:08:05:b5:0e:16:3f:fd:38:c0:
         2c:40:04:27:1e:86:21:ff:6b:8e:58:6a:44:59:a7:8f:64:c3:
         87:b9:c7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:32 2025 by rpki-client