Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1f9ca0eb-1105-3aab-9022-1d21b6abc162.roa
File:                     1f9ca0eb-1105-3aab-9022-1d21b6abc162.roa (raw, json)
Hash identifier:          GaYvLKvl/DR4B2lh9toJoYF1EBautDaSsrhSGgM7cEk=
Subject key identifier:   23:4B:A3:62:2F:48:B9:E8:F5:F4:D5:C8:D7:FE:FA:2B:2B:6E:11:45
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A346AF5D815504BF3961F40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1f9ca0eb-1105-3aab-9022-1d21b6abc162.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     202
IP address blocks:        204.104.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:6a:f5:d8:15:50:4b:f3:96:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=3026bc19-2c83-4816-9f4a-c5dcb2de1bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d3:0a:90:c4:d9:12:6f:14:87:aa:ff:05:c9:
                    93:50:2f:18:e3:dc:dd:5f:40:b4:80:4c:22:4b:59:
                    7e:9a:66:7d:18:d9:69:d3:aa:ae:2f:18:6d:db:c0:
                    31:10:34:24:29:7f:ba:75:76:74:67:c3:27:49:22:
                    db:b7:af:3d:da:6f:3f:ea:e3:cd:d0:5d:10:91:4b:
                    2e:a9:5d:c3:39:a1:d7:38:ca:81:99:ae:fc:aa:dc:
                    be:6d:b8:0d:d0:87:1d:20:56:c9:f4:27:20:1d:a4:
                    c2:67:fa:9a:d9:b3:88:9b:81:3d:fd:23:90:95:cc:
                    96:01:51:f3:c6:dc:13:cc:e5:50:ba:c8:e4:6b:4d:
                    f8:50:2e:bf:1f:9b:68:b8:8e:56:9c:b2:1c:3f:90:
                    04:89:bf:75:b6:20:4f:f9:c8:9e:4f:a4:da:b4:5e:
                    ce:8d:52:eb:c7:c1:2b:65:29:80:f8:c1:1f:c9:42:
                    39:4b:ee:98:9b:4c:6c:8a:55:b9:06:d6:22:19:69:
                    c8:cc:e3:e1:59:b4:15:86:e3:b4:6b:7a:bc:34:26:
                    ca:c5:8b:70:cc:81:c4:8e:41:ba:1f:91:34:f0:a4:
                    6d:c9:f6:25:80:9a:b6:e9:d4:c6:33:49:26:56:44:
                    78:87:69:7f:8f:89:6a:06:78:3e:af:cd:c4:51:e8:
                    87:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4B:A3:62:2F:48:B9:E8:F5:F4:D5:C8:D7:FE:FA:2B:2B:6E:11:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1f9ca0eb-1105-3aab-9022-1d21b6abc162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d1:83:28:31:5c:49:14:c0:e9:46:e3:41:28:6c:f0:39:32:
         39:db:e9:20:f5:70:d7:04:b5:15:be:cf:b0:32:19:34:44:63:
         02:4a:4c:2e:7d:dd:bc:87:d9:32:bf:cf:c6:31:c2:c9:20:62:
         92:9a:8f:36:13:f7:1e:33:35:d8:40:ac:64:bf:85:67:98:e5:
         0e:db:d8:a2:cf:a5:b2:3d:dd:6b:cc:68:62:46:48:d9:41:2f:
         c2:fc:88:ec:33:d2:be:7b:82:a4:e3:0d:36:68:af:da:8a:a6:
         15:57:99:a9:37:2a:ff:1f:64:da:e0:e0:32:d1:79:d6:4c:9b:
         8a:91:c1:80:01:78:17:d1:fd:ad:d4:d1:6e:7f:f2:59:60:c0:
         95:c4:97:2a:d2:b1:d6:62:ea:b5:ed:c6:47:cd:ff:71:92:a0:
         38:de:c0:b1:eb:e3:78:bf:53:bc:be:b3:6e:1a:c2:4c:08:5b:
         f4:07:31:6c:f7:90:58:16:dc:7c:80:a9:89:d4:3d:fc:87:22:
         6a:a3:c0:35:2e:42:58:7e:96:a2:d2:71:e7:c9:de:a7:37:b8:
         be:f3:71:5b:55:39:27:40:03:d9:05:c8:30:3d:d5:c2:24:10:
         23:bf:c7:ff:88:5e:c1:c1:55:e1:5f:f2:1c:28:f6:2a:92:43:
         5a:5c:3d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:53:21 2025 by rpki-client