Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c878950d-c225-3a0d-ba25-6b682a17c8e8.roa
File:                     c878950d-c225-3a0d-ba25-6b682a17c8e8.roa (raw, json)
Hash identifier:          vlXld5RTvKafG8pHLqFwe4kndyNT4qYRRKLARuy4xdw=
Subject key identifier:   1E:A5:2E:D7:28:B4:0A:48:15:AF:E6:50:8E:DB:BD:0B:14:2E:FA:C2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB55A86B4D828B92999B80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c878950d-c225-3a0d-ba25-6b682a17c8e8.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     3356
IP address blocks:        192.57.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:55:a8:6b:4d:82:8b:92:99:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=702550ea-061a-4435-ba35-bf3e8de667c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b4:aa:67:d7:c8:e1:4c:9f:93:0a:db:4e:72:
                    00:72:de:7f:fd:a2:13:28:b2:82:64:40:fa:e9:b3:
                    57:bc:c7:27:f4:48:a6:39:25:e1:f3:b3:f1:1c:e1:
                    71:89:4f:f6:86:7f:3e:1f:78:06:bd:3f:b7:e5:10:
                    dc:fe:21:6a:f7:58:24:50:70:bf:70:1e:07:52:2d:
                    19:15:36:30:70:43:a2:72:72:71:6d:dd:a9:8c:2e:
                    1c:be:1c:14:70:bb:57:0a:18:3f:3f:de:62:dc:cb:
                    2a:94:2f:81:bc:87:6e:fe:35:25:20:b3:ed:9a:72:
                    cf:84:ab:42:ee:35:34:d7:59:0b:6d:cb:3a:81:9c:
                    f3:96:7a:30:07:b8:fb:71:65:ae:71:65:56:db:ab:
                    3f:2f:92:36:c9:bb:de:7e:d8:f1:c4:00:4c:e9:41:
                    7d:ad:1a:38:0d:3d:8e:86:a6:57:6e:84:a8:9f:0b:
                    90:8f:10:83:66:cc:cb:f8:55:51:ee:63:31:6d:25:
                    cb:d6:3c:bd:19:2c:23:df:f1:a5:91:51:d8:2d:a3:
                    93:3c:ef:ec:13:8d:9f:01:0a:9e:a4:bb:50:47:32:
                    f6:0e:bd:7f:97:a7:29:55:08:43:e1:32:08:be:4a:
                    5c:98:d7:64:7b:8c:dc:d3:a8:98:71:58:55:95:6c:
                    a8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A5:2E:D7:28:B4:0A:48:15:AF:E6:50:8E:DB:BD:0B:14:2E:FA:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c878950d-c225-3a0d-ba25-6b682a17c8e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:07:9c:08:75:4d:be:31:a3:11:79:c2:d5:8b:1b:81:df:ee:
         4c:d2:9e:ae:52:64:6d:53:07:12:f9:fc:1d:73:af:9a:8c:f4:
         1d:26:4b:e8:ed:a8:09:85:78:5b:fc:9a:96:0a:12:01:d8:60:
         e1:09:83:d5:ee:ba:2f:7a:57:28:2e:56:3f:3a:97:89:3e:26:
         71:dd:2f:2e:59:99:77:e5:0b:f0:3d:02:f9:00:83:57:e6:32:
         be:9d:fe:8c:de:12:94:5b:aa:9a:93:cf:2e:41:1f:7b:47:1e:
         9b:07:1b:3a:62:87:0d:c0:d2:ec:76:66:93:86:6b:ca:c1:55:
         fc:db:d3:b7:41:dc:6b:58:79:37:10:8f:7c:a0:2a:e5:91:73:
         61:56:5b:40:c4:5f:7f:ae:50:7a:54:17:45:98:9f:00:ab:db:
         3c:df:60:51:db:c7:61:46:c8:76:25:14:d8:b8:14:87:d9:b8:
         1b:72:18:c7:19:39:53:06:b8:fc:3a:5b:87:c4:e9:0e:9c:4c:
         f6:77:55:20:a5:7a:ce:60:33:f1:d5:12:bb:51:45:6e:da:6f:
         58:07:3e:b9:de:1c:72:01:f7:d5:1e:a4:f8:f9:5f:be:8c:23:
         5c:a5:2e:6d:2d:7b:bc:c2:5d:74:7d:af:ee:3f:17:ef:4b:da:
         2b:b1:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:30 2025 by rpki-client