Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f08d7eb0-95ca-3fd0-81c9-69f7fa5f9587.roa
File:                     f08d7eb0-95ca-3fd0-81c9-69f7fa5f9587.roa (raw, json)
Hash identifier:          3Ub7gxa4A9quy7rCPWX75CJM4aeOsYmKc81QM1QUb6s=
Subject key identifier:   93:28:EE:EA:C2:FA:B1:09:E6:AB:91:DF:CB:D7:14:97:BF:3E:CD:7E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849631EC6AC4D7B51AEBBC78B00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f08d7eb0-95ca-3fd0-81c9-69f7fa5f9587.roa
Signing time:             Wed 02 Apr 2025 01:00:46 +0000
ROA not before:           Wed 02 Apr 2025 01:00:46 +0000
ROA not after:            Tue 01 Jul 2025 01:00:46 +0000
asID:                     3360
IP address blocks:        170.30.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:1e:c6:ac:4d:7b:51:ae:bb:c7:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr  2 01:00:46 2025 GMT
            Not After : Jul  1 01:00:46 2025 GMT
        Subject: CN=ff6a1e76-fc62-4297-a21b-039ac5d80f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:bc:43:58:f7:fb:a4:cb:ff:33:50:2a:46:
                    06:89:36:56:61:58:f9:a9:fa:ba:cc:7f:d2:86:b8:
                    46:f0:5f:eb:6f:80:59:b1:a5:66:0e:e9:64:6d:ba:
                    84:29:c4:73:b0:e5:43:98:bf:f4:98:3d:20:cc:77:
                    be:7d:66:2f:4e:c8:a8:50:3d:24:81:a3:c4:41:11:
                    c1:53:e6:6a:00:dd:be:b9:4b:b7:69:86:f4:6f:3e:
                    a2:68:e6:1c:b2:c6:6c:f7:42:0a:96:8a:bd:ce:ce:
                    5d:38:5f:4c:54:17:44:6f:28:d8:67:0b:9a:8f:de:
                    2d:be:ac:43:c4:64:91:2f:55:18:a0:f1:e9:4d:f3:
                    66:c0:eb:6e:b3:2a:e7:00:3c:ed:39:ef:ce:bc:03:
                    31:fc:63:40:80:69:19:71:7e:51:ab:8b:f7:1f:5c:
                    3a:58:a4:e5:d2:72:39:7f:4e:52:e6:4f:bc:0b:66:
                    01:a8:34:c1:c5:ab:37:eb:d6:e1:a6:3a:73:4f:eb:
                    ef:7b:29:f7:44:b6:2c:68:c7:91:fd:d8:2e:03:95:
                    cf:e2:35:cf:12:aa:02:af:ee:72:83:8d:2d:ec:d8:
                    01:ed:67:2c:29:42:09:72:de:3b:3c:57:8e:ed:f0:
                    55:72:85:df:62:84:ac:9e:c9:cd:70:e3:df:41:33:
                    05:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:28:EE:EA:C2:FA:B1:09:E6:AB:91:DF:CB:D7:14:97:BF:3E:CD:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f08d7eb0-95ca-3fd0-81c9-69f7fa5f9587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:5d:59:b5:70:64:2c:27:47:28:8e:bb:0c:1f:7e:c4:23:63:
         81:33:e1:1f:bc:a3:4e:ac:76:01:77:f0:5a:f7:69:8b:af:53:
         0f:27:2d:2e:db:6e:2c:8b:49:57:c1:c5:3e:f1:6f:e3:ab:02:
         2d:12:c4:49:da:06:4a:43:d6:9f:fb:1d:11:b5:e2:53:83:2f:
         18:00:7b:8e:41:40:e1:49:45:f4:89:f4:35:0d:ab:52:45:4c:
         cc:8e:d2:a6:3a:5c:c1:7e:84:a0:dd:fc:58:6a:36:38:5b:e2:
         a3:d1:d1:0e:23:28:79:48:23:61:e3:98:5c:90:27:d6:19:f9:
         4d:46:28:3e:dd:66:41:f9:0a:62:aa:b2:ae:16:2e:cf:bb:88:
         1a:27:d4:24:0b:e8:2b:cb:5e:04:0b:a1:bf:80:d3:70:e9:7e:
         e9:81:79:c7:92:e8:46:3b:19:c9:47:18:33:86:80:77:78:0f:
         36:7f:97:12:bf:7e:e2:40:d6:bf:f8:93:99:fe:fe:60:8f:1f:
         0a:0c:b4:4e:89:4a:c4:a2:96:b7:e5:3c:17:23:6d:17:84:cd:
         ab:0b:88:80:19:9f:18:f6:d2:77:93:53:3b:1f:6d:c0:16:c7:
         38:51:0d:71:94:33:65:3b:0e:40:7d:07:99:1a:f0:6a:23:f2:
         ec:dd:e1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:53 2025 by rpki-client