Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d773bf58-292f-36b3-a4f4-0236351f8150.roa
File:                     d773bf58-292f-36b3-a4f4-0236351f8150.roa (raw, json)
Hash identifier:          wVbsYT7sqbTF8J+kuq/mnB2Qq3RFOL8hbYUr6JBg9fo=
Subject key identifier:   7A:91:B5:A9:E2:30:11:C6:5E:4D:4E:02:B9:BA:BA:6E:1C:31:A1:EF
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB6837ECDC1BE4D45BDAC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d773bf58-292f-36b3-a4f4-0236351f8150.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     5714
IP address blocks:        205.141.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:68:37:ec:dc:1b:e4:d4:5b:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=a95da8fa-db16-48c9-be90-4b8c940984b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:96:78:97:ae:c8:a7:1c:6e:e4:73:1c:8c:
                    55:39:7e:62:e4:c5:dc:04:dc:2b:63:c7:47:71:a0:
                    1c:59:4d:0b:08:62:dc:6c:bc:d5:91:1a:4e:a9:62:
                    78:1b:57:77:3a:76:10:27:d6:ae:1a:34:38:c1:43:
                    d6:6b:a4:33:0f:fa:0f:89:58:9b:69:41:5b:31:03:
                    90:6e:39:cd:86:0a:24:f8:a2:86:3c:aa:38:ac:08:
                    16:c6:1d:46:a1:34:38:50:9d:e9:a6:73:e6:65:1c:
                    2f:fc:1c:d6:ef:37:ca:d5:bd:dd:cc:fb:47:7d:77:
                    68:24:a3:d9:f1:b8:c4:05:2e:eb:3c:2c:1b:85:ef:
                    3d:ae:f1:84:19:31:fa:e3:25:a5:dd:b4:5b:66:a6:
                    d9:59:af:a4:ce:7f:1e:50:14:a5:ff:6c:a9:db:05:
                    de:5a:96:3b:00:34:1f:83:51:98:ab:61:35:55:49:
                    d7:ae:59:3a:df:41:2b:30:f8:61:43:53:f9:36:56:
                    10:cd:35:85:f8:b7:a6:41:4c:e4:0e:7b:53:4e:c3:
                    fd:0d:cd:6d:ee:70:35:35:41:de:3e:29:3b:b8:89:
                    13:58:2d:4b:d8:ad:ef:9f:4d:17:b5:b6:46:51:2f:
                    9e:45:10:f0:d4:eb:d2:7e:40:9a:9a:bb:d9:d2:e9:
                    d8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:91:B5:A9:E2:30:11:C6:5E:4D:4E:02:B9:BA:BA:6E:1C:31:A1:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d773bf58-292f-36b3-a4f4-0236351f8150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e5:48:59:a8:95:9c:5a:51:5b:8d:31:27:e4:74:d7:6d:8a:
         3a:9e:32:4c:3f:db:9e:ef:12:d9:13:ce:b1:83:cd:21:56:d6:
         60:b2:7c:46:09:b5:58:25:2e:04:7e:8a:b3:9c:33:ee:15:a9:
         89:c5:c0:77:bc:dd:1c:b3:6f:30:a2:cc:be:7d:e8:a9:9e:dc:
         65:4a:cd:c7:cf:81:77:cb:ee:b5:4c:7c:5d:e7:d9:8d:2b:d1:
         20:c7:63:bb:aa:f9:d1:8d:71:b3:02:36:fe:ca:35:3d:08:bb:
         84:53:09:66:28:a9:d8:39:be:9b:4e:2e:6f:00:0d:d2:8c:c1:
         6b:e3:9b:bc:8f:36:e0:0c:37:8c:15:89:a7:17:92:3c:eb:da:
         b2:5c:64:62:bf:c1:ad:6f:1b:50:60:17:91:1c:25:89:c3:ac:
         1b:89:51:fd:c3:0c:b6:a7:77:78:44:06:b2:2c:48:6b:db:1f:
         09:40:3e:4d:35:7a:ac:a8:cb:95:fa:5b:6a:75:dc:13:14:fb:
         7b:84:78:86:1e:2c:57:0b:31:00:81:3b:45:e4:48:3e:1f:cc:
         33:cb:d4:7c:4a:9b:57:3a:de:3e:5b:c5:a1:81:0f:19:e7:b7:
         8f:72:28:4b:e9:40:73:03:e8:e0:51:d7:13:41:be:53:86:e6:
         3e:ed:b1:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+2g37Nwb5NRb2sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk
YTk1ZGE4ZmEtZGIxNi00OGM5LWJlOTAtNGI4Yzk0MDk4NGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpCWeJeuyKccbuRzHIxVOX5i5MXcBNwrY8dH
caAcWU0LCGLcbLzVkRpOqWJ4G1d3OnYQJ9auGjQ4wUPWa6QzD/oPiVibaUFbMQOQ
bjnNhgok+KKGPKo4rAgWxh1GoTQ4UJ3ppnPmZRwv/BzW7zfK1b3dzPtHfXdoJKPZ
8bjEBS7rPCwbhe89rvGEGTH64yWl3bRbZqbZWa+kzn8eUBSl/2yp2wXeWpY7ADQf
g1GYq2E1VUnXrlk630ErMPhhQ1P5NlYQzTWF+LemQUzkDntTTsP9Dc1t7nA1NUHe
Pik7uIkTWC1L2K3vn00XtbZGUS+eRRDw1OvSfkCamrvZ0unY+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHqRtaniMBHGXk1OArm6um4cMaHvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDc3M2JmNTgtMjkyZi0z
NmIzLWE0ZjQtMDIzNjM1MWY4MTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzY3KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFXlSFmolZxaUVuNMSfkdNdtijqeMkw/257vEtkTzrGDzSFW1mCyfEYJ
tVglLgR+irOcM+4VqYnFwHe83RyzbzCizL596Kme3GVKzcfPgXfL7rVMfF3n2Y0r
0SDHY7uq+dGNcbMCNv7KNT0Iu4RTCWYoqdg5vptOLm8ADdKMwWvjm7yPNuAMN4wV
iacXkjzr2rJcZGK/wa1vG1BgF5EcJYnDrBuJUf3DDLand3hEBrIsSGvbHwlAPk01
eqyoy5X6W2p13BMU+3uEeIYeLFcLMQCBO0XkSD4fzDPL1HxKm1c63j5bxaGBDxnn
t49yKEvpQHMD6OBR1xNBvlOG5j7tsVs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:23 2025 by rpki-client