Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b18e6850-cb3b-3004-be70-1aeefac1cd2a.roa
File:                     b18e6850-cb3b-3004-be70-1aeefac1cd2a.roa (raw, json)
Hash identifier:          7JPZ3GW2qVO9CnM8sggQfuVihQHGvo2fU49md7AGYD0=
Subject key identifier:   B9:35:FB:22:9D:5C:EE:4E:47:0F:5B:E0:66:5C:37:08:F4:C0:52:FA
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB6ADE9ECACFBEA4AF5260
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b18e6850-cb3b-3004-be70-1aeefac1cd2a.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     202
IP address blocks:        206.164.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:6a:de:9e:ca:cf:be:a4:af:52:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=7057404e-9d25-4202-8885-38a2463ad7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:71:fd:15:92:0b:9d:cd:60:46:a8:58:1c:
                    bf:88:65:c5:13:1f:0f:a0:14:0f:4a:ae:62:7b:87:
                    27:a1:f2:fd:2b:cf:c6:e0:f3:be:ac:9d:53:5c:9f:
                    48:59:69:39:ce:44:1f:d2:77:3f:b6:aa:54:d7:db:
                    06:ee:10:73:cd:10:de:f2:73:03:c7:00:54:d0:67:
                    23:12:ad:48:0d:33:4d:e2:03:12:c8:20:00:67:0c:
                    ac:89:7e:ae:13:72:18:d0:f3:17:60:1c:79:92:6b:
                    79:df:31:99:74:d2:a0:14:70:ec:c8:ad:56:f5:46:
                    b1:d2:61:9b:d9:e6:c1:35:e8:9d:c3:17:e5:b3:2b:
                    07:30:50:b2:aa:8c:96:01:8e:77:9c:39:22:9e:c8:
                    fd:d8:fd:36:67:20:e4:0e:6b:6e:fe:77:7a:91:3e:
                    e6:e9:2d:b3:96:34:07:d3:43:14:8d:e0:ed:f6:c2:
                    a9:6c:39:86:aa:95:17:f8:a1:d7:3a:90:09:69:e6:
                    e7:79:b6:40:43:3d:50:3e:a2:f3:88:fd:80:e5:2a:
                    3c:4e:5b:f7:56:13:18:05:b2:06:ae:b8:48:77:60:
                    52:c7:32:73:62:5c:57:5c:50:20:7b:79:06:dc:f9:
                    10:cd:29:44:ee:e6:83:85:d6:25:9e:18:c6:8f:dd:
                    d6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:35:FB:22:9D:5C:EE:4E:47:0F:5B:E0:66:5C:37:08:F4:C0:52:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b18e6850-cb3b-3004-be70-1aeefac1cd2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:7a:bc:9a:65:c9:bc:b0:c0:95:ae:2b:97:e7:0c:e4:42:f9:
         ff:32:4c:b1:34:e1:c8:de:30:cd:84:87:11:ab:2c:c5:fc:1f:
         68:91:dd:46:93:8a:60:84:75:a2:51:d3:00:83:ca:09:18:c3:
         8a:a6:04:b7:3a:94:77:20:d5:af:00:b4:a2:29:fb:4f:5d:0e:
         4f:6b:b1:86:b8:86:14:f7:82:4d:b8:a9:ec:92:3b:0f:a7:bd:
         d0:be:e9:13:d5:2b:62:b7:8d:fa:fa:c4:5f:c6:61:33:c6:64:
         25:51:fe:3e:af:bc:03:01:c3:2a:97:68:8f:7c:e7:e6:ee:ee:
         8a:91:4e:ea:85:9e:36:35:5a:d1:21:46:85:e2:a5:da:a9:d7:
         77:18:84:4a:e1:af:71:ff:95:d3:62:c6:4a:28:91:32:8b:3a:
         83:df:01:d2:56:fe:9e:6b:c1:60:31:58:85:00:2d:f3:a9:ba:
         08:56:bd:38:01:1e:85:b9:de:90:f1:68:c1:f5:3d:38:62:de:
         e3:1d:99:b7:32:11:b4:a7:b4:0d:98:5d:a3:c0:70:7f:f8:aa:
         7a:d2:56:1a:ae:3a:09:0c:43:e3:eb:8c:0b:e9:f8:fb:9d:e2:
         9d:33:2d:4e:ed:61:9b:5a:12:f5:d3:a3:66:6a:ae:71:b8:88:
         9a:55:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:23 2025 by rpki-client