Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/28ef903e-c341-37ee-ab6e-f0cba98db689.roa
File:                     28ef903e-c341-37ee-ab6e-f0cba98db689.roa (raw, json)
Hash identifier:          EJZZdYZBzui1sqQvndIIhRL0n3xmk68Hzkwe5wBpank=
Subject key identifier:   CE:40:A9:E8:D8:3B:92:CA:01:39:D2:BA:B5:3C:03:5E:A1:C8:EE:B7
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A347474156934C580840640
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/28ef903e-c341-37ee-ab6e-f0cba98db689.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     202
IP address blocks:        205.141.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:74:74:15:69:34:c5:80:84:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=c6f7d85a-3730-4114-a607-63923a3475d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:76:fc:fe:53:0d:7c:6d:b8:e9:10:f5:00:c7:
                    c3:6b:96:5f:5c:d1:53:97:19:8c:bf:09:43:73:14:
                    53:d8:f4:58:7b:e6:77:5c:ca:cb:cc:27:5d:74:98:
                    a1:89:77:3a:9b:3e:3e:0c:d2:07:a1:29:0c:d2:32:
                    97:5b:8d:ca:96:53:aa:42:96:81:41:e0:6a:97:e3:
                    a9:4a:9d:0b:ca:a5:15:bd:88:0d:6e:d5:63:f8:96:
                    f5:dc:7e:ca:b7:f3:d4:62:d4:23:61:9b:79:5f:ef:
                    5f:43:81:f6:b9:30:bc:7a:f2:82:cf:99:63:05:91:
                    f7:36:d3:c7:31:af:2a:6b:d3:0a:88:ae:3b:de:8b:
                    76:84:92:aa:aa:73:cd:2a:77:7b:86:c5:ae:d9:c7:
                    d3:be:d1:19:d8:c8:c8:7a:05:8c:47:c9:0c:22:47:
                    c1:25:4f:a3:cd:14:73:7c:b8:d8:ae:97:ad:a4:de:
                    85:4e:08:e2:f8:ef:67:96:31:9f:c3:73:92:6d:b9:
                    dc:22:0d:28:65:31:02:b5:d2:a8:62:82:df:1f:c0:
                    55:52:81:fb:1d:60:36:f2:4b:d1:06:f4:23:84:a8:
                    d7:8f:62:b4:4e:2d:e7:72:85:2f:24:d0:12:d4:af:
                    95:3e:7f:d8:04:55:db:ac:a7:31:d0:75:4e:3a:e9:
                    cb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:40:A9:E8:D8:3B:92:CA:01:39:D2:BA:B5:3C:03:5E:A1:C8:EE:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/28ef903e-c341-37ee-ab6e-f0cba98db689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:61:ae:39:a9:b3:ac:b4:fd:63:f7:ef:3b:f4:0a:98:0b:12:
         4c:d6:73:a0:14:76:d6:7a:00:42:1b:56:56:cc:ff:43:cc:be:
         1b:67:13:bc:99:80:06:8a:dc:ec:62:39:9b:29:2c:f0:07:4e:
         af:48:d9:09:2d:30:e5:a2:ef:fb:db:e3:fd:3b:8b:9c:61:ef:
         ee:ec:ce:36:8c:c5:ea:91:0d:6a:e7:ac:16:3e:76:6e:0a:65:
         23:72:b9:a9:d7:c8:26:f6:36:62:2e:e4:2a:1a:f7:9c:5c:6c:
         bb:3a:72:aa:65:47:49:7a:d0:a6:c7:82:42:23:68:3a:15:a7:
         2f:e2:4c:28:74:a1:0d:41:fe:5c:2c:3a:30:df:83:80:07:71:
         a2:64:64:a6:b7:33:89:60:81:7a:1e:1e:b7:3d:e0:11:9f:56:
         27:1d:77:71:a5:2e:9c:e3:ed:a4:dc:8f:65:82:54:0b:46:de:
         cd:1d:91:1d:f5:8d:48:0a:88:30:d7:84:e1:b8:57:1c:bd:4f:
         c2:85:89:37:c9:42:b2:36:49:b1:02:b4:6c:29:f0:97:6b:b6:
         40:6c:eb:85:d8:b6:58:e6:da:88:89:42:51:87:2d:4c:0d:dc:
         bd:d4:41:18:93:4b:d1:90:83:b8:f9:eb:32:cd:eb:a2:f3:41:
         6d:dc:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:19:48 2025 by rpki-client