Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dda4aa88-ef43-3522-b9b3-0dd755556e56.roa
File:                     dda4aa88-ef43-3522-b9b3-0dd755556e56.roa (raw, json)
Hash identifier:          MoiZx/5PsQQmN+zTgjm0qUGMdMjdF3Ib7ZqgZv0BPsA=
Subject key identifier:   69:33:BD:7F:4D:18:B3:AF:58:8D:EF:2B:F8:01:D1:75:0B:19:71:F1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858491246CA3BB43C488D8C4EEF40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dda4aa88-ef43-3522-b9b3-0dd755556e56.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     3360
IP address blocks:        204.105.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:ca:3b:b4:3c:48:8d:8c:4e:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=db39a98a-9f96-4013-905d-c23ce9e24843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:62:a2:15:6c:18:8d:f9:4b:21:70:97:6b:e4:
                    c0:6b:21:e3:eb:40:4c:f8:92:a5:48:be:c8:b7:a7:
                    df:50:32:cb:2d:e0:f6:29:6e:b6:13:a1:21:fd:5c:
                    38:7b:3e:5b:29:55:c2:bb:27:04:47:b6:5a:c7:6e:
                    4d:38:f1:04:18:23:23:ba:2b:53:67:1a:5d:82:47:
                    f9:6e:26:3a:c3:80:3c:d4:a1:44:f6:99:13:f3:b3:
                    6a:af:2f:a5:6b:e9:68:98:68:5e:b8:b1:3e:3c:02:
                    7d:22:ac:45:da:ae:7c:c5:b5:d8:28:b6:76:45:b2:
                    b2:d3:6b:86:bb:6d:20:8b:ee:bb:c4:c9:a8:06:7c:
                    fc:8a:41:89:25:44:e4:6e:f3:f5:ae:ec:2b:33:2e:
                    51:62:32:c8:40:e9:dd:60:a0:cb:8d:a9:04:fb:32:
                    39:f1:de:9e:df:77:79:f8:f0:83:5e:50:ea:b6:43:
                    4f:c9:12:ce:c8:14:ae:1a:b6:6f:4e:54:3a:8a:69:
                    c1:42:98:e4:d9:9c:ec:db:91:aa:03:e4:ec:67:82:
                    6e:45:64:22:5d:7b:9c:66:64:b9:01:49:0e:66:65:
                    85:76:7d:9e:01:25:b4:e1:1b:3a:33:47:99:77:e9:
                    92:b3:27:3c:f3:68:2d:75:08:5d:57:e4:ab:ce:a8:
                    3c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:33:BD:7F:4D:18:B3:AF:58:8D:EF:2B:F8:01:D1:75:0B:19:71:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dda4aa88-ef43-3522-b9b3-0dd755556e56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:85:b4:09:31:5b:d2:72:11:80:d8:93:d4:ca:44:68:3d:16:
         23:21:66:55:15:5c:6e:44:6d:e8:2e:dd:82:7a:04:4a:4d:73:
         66:fe:24:bf:f3:a4:86:50:82:b8:14:71:e2:8f:69:22:fe:87:
         d4:2f:ae:af:2f:62:1a:41:af:c4:9b:27:73:64:82:94:e1:70:
         f4:67:be:cc:4a:aa:9f:b0:40:86:bb:b7:c1:72:3a:25:a2:76:
         1c:88:56:e3:4f:5e:4f:ec:e2:dc:18:73:cb:f4:57:57:b8:e1:
         d2:e0:6e:ae:fd:38:04:34:08:f1:3f:7b:07:20:d7:9e:64:26:
         7b:bf:84:5f:c5:67:7b:20:99:14:e5:f5:ef:97:46:1f:56:2a:
         f0:66:d7:5e:18:06:dc:30:42:2d:cb:78:a8:aa:9f:50:32:08:
         aa:5b:52:92:09:6d:de:22:93:07:ed:49:dd:fe:f2:91:e9:93:
         59:00:b8:71:da:96:fb:59:41:28:93:d5:cb:09:35:c2:b3:89:
         3d:39:72:b9:fb:2c:5d:79:0c:4e:0f:62:cb:ed:57:ce:83:de:
         74:b2:aa:42:fa:fe:1a:40:5c:6c:d6:f2:f1:e7:ab:4d:82:37:
         85:5e:f2:05:35:ed:77:96:84:47:a0:ed:ba:79:0a:38:dc:06:
         af:ab:2f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:38:00 2025 by rpki-client