Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f22f5c8c-d07f-3466-ad35-6e64098165e6.roa
File:                     f22f5c8c-d07f-3466-ad35-6e64098165e6.roa (raw, json)
Hash identifier:          hgkkc6ERNvNgzANV35E7r+GdpKOoyUWyiqLSCjLvTA8=
Subject key identifier:   86:2E:45:0E:42:99:79:B2:4F:0A:12:81:93:BD:DC:30:0F:8C:F8:4E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B2D14C83F58DE20A72080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f22f5c8c-d07f-3466-ad35-6e64098165e6.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     203
IP address blocks:        204.104.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:2d:14:c8:3f:58:de:20:a7:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=a1cf4b8f-d5cc-4024-bb33-31e7a9a1a7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3b:81:03:56:4b:e4:1e:3b:af:9b:42:0e:e3:
                    be:4e:60:bc:34:c9:ad:bd:1a:a4:6f:ce:12:0a:25:
                    df:32:ec:1f:9f:a9:6b:30:13:46:9b:99:46:f7:65:
                    1b:ed:97:35:04:5d:80:cc:8c:94:7c:da:08:12:90:
                    e8:ad:79:ef:ad:48:2f:69:d2:c7:af:34:48:b7:29:
                    3a:84:c5:19:dd:4a:93:30:fc:ee:e6:8f:dd:aa:85:
                    08:aa:c6:80:93:d7:df:78:6d:3c:81:d5:2c:46:68:
                    44:73:08:10:14:04:93:25:7a:22:30:f7:68:c9:ab:
                    ed:df:e3:6a:a0:5a:6d:80:62:63:37:a9:1c:99:69:
                    3e:07:b4:b4:73:c5:fb:a7:4b:6b:b0:5b:57:31:16:
                    3c:18:e8:15:d6:34:e5:27:71:b0:96:6c:27:f2:1a:
                    7c:e6:ae:68:00:24:46:26:4f:82:3a:e5:02:e0:6e:
                    0c:7e:36:b1:ea:07:40:f6:0d:b4:97:bb:4f:71:40:
                    5f:c9:04:ca:d6:a2:c5:de:97:2f:73:73:01:e5:68:
                    0b:83:c0:22:dc:c4:08:68:75:90:88:ba:75:8e:3a:
                    a6:1a:88:c1:e8:02:77:e9:8e:51:f3:e3:fe:54:fc:
                    e9:b7:fa:49:5e:12:ce:39:0a:1e:7a:48:dd:ab:a7:
                    69:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2E:45:0E:42:99:79:B2:4F:0A:12:81:93:BD:DC:30:0F:8C:F8:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f22f5c8c-d07f-3466-ad35-6e64098165e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:c1:8e:1e:62:21:64:2d:f2:69:b3:61:dd:c8:80:e4:89:7c:
         f1:64:2f:ff:61:10:bb:bb:83:f4:dc:e9:25:46:de:d9:ea:8a:
         09:75:3f:ce:14:70:a5:e9:d4:45:13:87:8c:76:30:76:d0:56:
         0a:8f:8f:5f:d6:2a:d3:4d:18:43:bf:6a:a2:fb:91:63:d9:0c:
         a5:34:e5:fd:06:85:0a:b1:02:af:8f:c7:41:4a:7a:61:a0:c8:
         21:e7:26:b9:49:32:e9:2f:80:6e:9e:94:e2:e2:e2:65:ba:d3:
         f0:97:ea:92:7d:e4:18:3e:03:02:31:a3:31:d0:2b:2d:0c:76:
         ed:f5:00:3a:5e:83:c7:d6:01:b4:fa:e3:06:23:f1:55:c2:41:
         0f:06:4a:1f:42:8c:db:ef:e1:b0:fa:a4:86:d8:ed:9b:3e:eb:
         17:a1:da:96:3d:d8:7b:6e:a1:1d:15:7d:53:b2:3c:6a:ce:ba:
         0c:cd:76:fc:e2:d5:e0:43:31:aa:3e:a2:7f:92:51:f2:e0:51:
         76:85:41:3b:73:98:84:53:cc:55:74:10:05:3d:39:04:34:e3:
         18:4c:56:49:15:67:77:04:92:5d:40:10:5d:de:d1:92:7d:45:
         34:42:ba:02:61:94:0c:4e:2c:c1:14:41:ff:38:6f:d8:ca:92:
         0d:5a:cd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 23:44:05 2025 by rpki-client