Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1b86f41f-6571-3663-829b-f21598c98ac7.roa
File:                     1b86f41f-6571-3663-829b-f21598c98ac7.roa (raw, json)
Hash identifier:          MFNXJGigFwsDtq52Ky6nuUTR1HaCH+JKJomrW5P6+/s=
Subject key identifier:   0F:A1:02:12:96:90:F7:DE:BC:36:16:DF:5E:56:22:3A:FE:16:82:48
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A346AD80A77E18EEAFD6C00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1b86f41f-6571-3663-829b-f21598c98ac7.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     3360
IP address blocks:        204.104.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:6a:d8:0a:77:e1:8e:ea:fd:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=4a14173d-50ef-4c8f-8c4d-9a935e8a6e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:b9:93:35:be:06:32:cf:c3:e8:52:be:93:
                    38:5a:eb:58:a0:7b:71:4f:63:f1:70:45:ba:e5:86:
                    2f:b7:a9:d8:03:ac:73:ea:5c:28:f1:1c:cc:db:cb:
                    7c:7a:e9:61:1f:a6:82:72:59:0d:c0:8b:e1:c1:dd:
                    5f:f3:92:35:89:01:27:27:1d:68:45:c1:e5:d1:8c:
                    99:30:65:dd:73:6e:ca:be:fc:4c:e9:2c:d8:65:27:
                    79:47:66:ab:68:6b:0e:ec:11:c0:76:0a:d2:ea:98:
                    a3:47:eb:ac:2f:72:56:8a:b4:7f:82:c4:07:ee:0f:
                    9d:41:00:bf:fd:5d:70:eb:4c:66:3d:0d:d2:2b:a2:
                    87:5c:aa:2b:52:ac:03:e3:fc:84:d5:00:f7:7f:4c:
                    4a:aa:9c:08:89:54:90:9d:c3:2c:e3:53:63:3b:cd:
                    d9:85:7c:c7:06:8c:74:ff:38:1b:c0:f1:5e:22:21:
                    6d:51:df:ae:e4:14:bb:3c:31:42:50:dc:01:53:e0:
                    e1:eb:18:eb:80:57:a6:ac:d6:e3:d2:c9:84:94:80:
                    a4:33:78:be:5b:1a:71:48:d6:00:3c:12:04:15:9a:
                    c1:f1:cf:ee:9e:08:d0:d5:a2:75:5b:ab:4f:93:1f:
                    97:99:5f:f7:77:96:1e:b6:35:01:5d:82:e5:90:c9:
                    c2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A1:02:12:96:90:F7:DE:BC:36:16:DF:5E:56:22:3A:FE:16:82:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1b86f41f-6571-3663-829b-f21598c98ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:eb:aa:ef:1c:37:d2:39:5a:d9:d9:0c:ab:6c:65:5c:4b:fc:
         8a:72:91:35:58:81:fb:83:d6:a8:8e:f4:63:61:66:c5:f3:d5:
         e5:5a:28:fb:5c:1a:ac:77:0c:ef:61:18:6c:68:53:44:eb:fd:
         18:ba:3d:d8:1d:41:1f:fe:b7:06:1d:5f:f5:51:54:30:1e:fd:
         fe:e2:bc:7e:af:db:51:f8:2a:10:65:68:6c:39:9e:1a:94:a3:
         62:44:12:51:3b:c0:f7:eb:fc:46:9b:85:96:58:48:66:a9:e7:
         23:8e:99:1a:06:f9:c6:b1:ea:fc:d4:be:b3:54:b1:d3:c7:4d:
         9b:61:2d:ae:bb:bc:5b:dd:81:26:c9:af:55:a7:b0:d3:9c:db:
         ba:17:89:65:d4:2d:5e:47:9c:6b:e0:e8:30:0a:cb:d8:a9:1d:
         75:3a:fe:eb:de:4b:07:29:47:3f:9a:37:ac:84:51:53:ad:af:
         8f:26:33:d2:a3:05:13:9c:de:b1:55:20:93:e9:6e:4c:59:5f:
         ae:3d:87:c8:f6:4b:9a:d6:d9:02:ea:65:66:f3:5d:78:fe:d1:
         43:35:83:d3:c1:a7:bf:96:6e:8d:b7:f5:b9:30:16:32:b7:a1:
         b7:10:7d:87:10:94:ac:a9:3f:90:8c:42:22:ff:90:66:16:f0:
         56:76:96:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:22:20 2025 by rpki-client