Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/427c4b9e-23bf-3e14-99c0-c0de2aa46fd0.roa
File:                     427c4b9e-23bf-3e14-99c0-c0de2aa46fd0.roa (raw, json)
Hash identifier:          s/vGJ+t4YXlu2BugCQP+81AIHYXORKAAB0M3ai1iNpk=
Subject key identifier:   CB:EE:FD:3C:C9:56:11:F5:1C:7C:AB:A6:1C:74:9D:DF:AD:24:E7:AA
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498CFF1B4C805EFBBC1B208000
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/427c4b9e-23bf-3e14-99c0-c0de2aa46fd0.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     3360
IP address blocks:        216.240.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:1b:4c:80:5e:fb:bc:1b:20:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=967c89bd-f007-47ce-b38f-8cd73fccaa35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8f:80:a3:08:e0:64:e8:98:f2:2a:31:03:0f:
                    54:b8:f3:d0:ed:a5:5c:77:c6:a3:bd:f3:29:df:23:
                    8d:0f:f9:9b:ea:c5:11:de:77:ee:cb:ae:bd:4a:63:
                    e5:25:8a:9f:f8:f8:e1:b6:3f:10:e1:23:cc:e5:13:
                    ca:60:7c:26:db:2b:1d:55:02:8e:30:ba:f7:38:07:
                    e5:16:7b:9b:09:5e:30:fd:ac:8b:5b:e3:68:d9:5a:
                    9a:a3:86:b3:e1:86:0d:4f:e8:fa:98:0b:92:dd:9f:
                    83:4d:37:b2:be:fb:af:31:bb:d8:74:59:1b:64:3e:
                    0e:e9:44:53:24:1f:20:cf:ea:57:be:0f:a5:65:b3:
                    ed:bb:4c:af:44:f7:7b:11:42:b1:9a:57:31:84:fe:
                    34:2e:35:c3:17:0a:da:4b:5b:19:d2:ad:fd:d7:b8:
                    f7:cd:91:c5:c5:53:83:69:9f:5b:17:6d:10:cd:9e:
                    2e:2c:d9:75:6b:5e:95:3d:14:2b:b2:4a:02:ab:35:
                    35:78:76:80:8b:3d:44:ef:ae:69:c9:b3:77:3a:f1:
                    9c:b1:42:cb:2c:41:0a:63:f6:75:4e:20:5e:dd:90:
                    6e:5a:fd:02:a1:46:c8:26:c1:55:d5:c0:ce:6e:15:
                    fe:6a:05:79:19:5d:36:c4:f4:98:9e:39:26:91:db:
                    0d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EE:FD:3C:C9:56:11:F5:1C:7C:AB:A6:1C:74:9D:DF:AD:24:E7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/427c4b9e-23bf-3e14-99c0-c0de2aa46fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.240.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:27:07:dc:0e:dc:dd:cc:08:bf:ff:78:af:96:42:65:37:4a:
         4e:46:e4:a3:58:2e:9a:ee:75:d4:2d:b7:6c:99:98:f0:e3:68:
         12:99:28:ff:f3:1a:26:13:bd:8a:86:62:86:af:3f:ec:06:f2:
         fd:14:13:bf:10:0b:04:8c:53:18:1e:34:88:93:62:2f:99:6e:
         df:91:e2:48:b2:ee:70:d1:1e:e3:47:d0:90:b9:83:03:22:4f:
         27:cd:25:1f:44:55:f4:e0:e6:e9:c7:87:a9:9e:16:a5:26:e7:
         1f:87:43:82:bb:11:8f:bb:3c:f8:fe:2d:86:e2:6e:af:ed:66:
         f5:bb:96:27:4c:c6:d6:42:45:61:c7:b5:10:12:80:a1:39:0a:
         25:a5:8b:5b:7b:a5:d0:c9:a6:8b:a4:07:0d:75:f4:99:1a:88:
         49:3b:a2:15:0d:eb:5b:e7:0c:7a:17:77:e6:22:8a:d8:a4:b0:
         f7:20:79:37:7f:c0:fb:a7:de:de:47:83:cd:f7:e2:6a:2d:ba:
         b5:8d:f1:a5:2a:44:fe:27:4f:7c:1f:ca:bd:d8:2a:a1:14:42:
         e1:b6:c7:69:e5:4a:32:05:a2:b4:41:e5:41:17:ab:75:9f:7d:
         4f:fa:2b:37:37:43:75:be:e3:d6:db:40:87:69:2d:02:e0:0a:
         bb:5d:ee:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:17:20 2025 by rpki-client