Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f30cda7-b374-3fec-a284-3b3ddbafc3d9.roa
File:                     2f30cda7-b374-3fec-a284-3b3ddbafc3d9.roa (raw, json)
Hash identifier:          RlOsx7RRF4TqK4orbmC74XxpjqtX5tn/j41nop7xv2A=
Subject key identifier:   EE:C3:AC:98:AF:28:32:83:0C:77:01:9A:39:7B:06:3E:90:95:36:C8
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858499DBF34D5FAD3187FC3B84B40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f30cda7-b374-3fec-a284-3b3ddbafc3d9.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     202
IP address blocks:        205.239.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:34:d5:fa:d3:18:7f:c3:b8:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=56da236c-f50c-4f79-a630-12fc2e2c606b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:9d:67:eb:2b:df:87:db:28:77:a0:e3:8c:
                    bc:f0:cb:13:28:6a:1a:ef:33:ec:e0:4e:d4:b2:db:
                    da:b7:e6:51:dd:fe:9b:08:cc:83:63:17:fe:99:b7:
                    a9:b0:09:79:82:ba:9c:12:05:ae:1e:67:a9:ca:be:
                    52:48:d5:ab:84:3e:a2:1c:4f:bb:9e:4d:65:90:12:
                    f8:a0:5c:4d:ef:50:e6:0b:c8:b2:d3:ff:be:a9:93:
                    f3:91:52:c4:2d:f5:c3:16:a3:3f:a6:cf:70:2b:cb:
                    b4:af:4b:02:65:a8:ee:69:50:1a:10:f0:0f:1c:a0:
                    5a:b0:a9:a4:63:c9:b8:52:d4:5e:ed:08:49:6d:50:
                    15:3f:1d:52:2d:56:07:bc:8d:ee:84:ea:f6:8c:b6:
                    82:39:5a:fb:b6:fd:5c:b2:d5:0b:14:15:11:85:df:
                    cf:fb:aa:2a:6f:8f:3d:53:f7:23:3a:7e:05:f2:45:
                    63:08:cd:19:95:ef:36:fa:bd:11:0b:a4:4e:33:99:
                    91:05:95:90:18:72:68:a9:9e:f2:75:6c:a5:6e:aa:
                    18:a4:85:b0:41:ed:f9:4f:a9:df:2e:b9:4a:92:2c:
                    d5:bc:c4:68:5b:35:4b:92:56:75:9f:0e:66:6d:3d:
                    ea:f8:1a:52:25:48:a3:82:b5:94:65:80:fe:25:aa:
                    92:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C3:AC:98:AF:28:32:83:0C:77:01:9A:39:7B:06:3E:90:95:36:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f30cda7-b374-3fec-a284-3b3ddbafc3d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.239.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f2:80:3a:fb:33:5b:ce:e2:25:8a:c6:81:05:6f:53:13:b5:
         74:1d:55:24:7c:f9:72:55:79:63:88:df:19:54:1a:72:ee:e7:
         b4:5d:f6:85:f8:df:9e:7f:24:75:ac:e1:8a:84:b2:d6:d4:dd:
         e2:d0:dd:0a:43:e7:46:18:88:aa:84:5a:65:24:f0:b9:53:d0:
         de:ed:08:1d:ff:07:ba:98:cb:b4:90:18:da:83:5d:7d:47:13:
         ce:33:51:43:e4:58:2d:32:3b:9c:8f:75:81:9f:e1:d4:6b:a9:
         3b:92:e5:c7:e5:04:5f:05:ec:90:9e:ab:2d:1b:c9:ab:69:4d:
         d5:ff:21:9d:29:b1:af:33:dc:fe:50:bb:fa:8f:e7:64:7a:b4:
         fa:69:da:9a:2c:73:7f:8b:76:f4:14:3c:7e:ba:9c:a6:ed:c7:
         30:1b:8b:61:71:a3:9a:26:aa:89:4a:d1:49:3e:36:a0:02:08:
         79:e0:7f:dc:77:ca:40:0b:59:34:9c:ad:db:34:71:a7:84:35:
         3b:bd:9f:91:c1:13:ca:e4:a4:87:fb:07:4e:e9:18:60:49:b1:
         6f:bc:00:47:fd:8e:6f:0f:36:5a:85:e4:5f:4f:08:1b:be:82:
         6c:24:57:bd:ef:c3:c0:04:49:46:ef:07:61:14:88:65:7c:db:
         ee:43:34:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:21:30 2025 by rpki-client