Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/450ca495-c781-35fe-ac29-cf3b9e222135.roa
File:                     450ca495-c781-35fe-ac29-cf3b9e222135.roa (raw, json)
Hash identifier:          pKpdUgPkwSGigDX9Zq1Ih09plUfPvf+JgCf4JsZthp8=
Subject key identifier:   14:3F:55:59:C3:51:D4:BB:A7:45:15:85:EB:0F:CD:24:7A:8B:13:B8
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498CFF139C1D6FA49829E3E800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/450ca495-c781-35fe-ac29-cf3b9e222135.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     203
IP address blocks:        204.104.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:13:9c:1d:6f:a4:98:29:e3:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=c55e3cda-5f8b-4428-aff4-1804d87b2b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:df:a9:3a:03:7d:25:34:68:e1:30:0d:a3:3c:
                    df:72:29:96:44:82:66:a4:2d:7f:ca:8f:b7:e0:a5:
                    24:c0:b3:da:bc:da:4c:d1:93:f3:58:fa:ee:44:87:
                    fa:88:69:de:9a:bd:9c:8f:e0:da:9f:a6:7b:33:d2:
                    eb:c1:be:7f:41:01:3c:10:2f:93:5c:09:c8:af:4a:
                    fb:d1:d2:43:b7:6a:ca:74:df:c3:af:1e:a1:40:96:
                    37:e6:51:a4:da:58:39:5a:44:25:25:4a:51:03:75:
                    3a:0d:b2:a7:25:89:a2:1c:49:fd:02:d1:96:08:c0:
                    01:b3:f8:9b:f8:23:b2:7f:8b:6a:a3:40:02:cb:5e:
                    88:d6:ea:65:84:6f:b4:5d:c9:1e:c9:ae:df:58:14:
                    18:0d:e9:19:ed:96:8f:22:30:13:83:67:13:cd:95:
                    8c:51:ba:dd:85:07:42:89:e4:94:4b:dc:2f:bc:c7:
                    50:0d:5f:22:7a:8b:75:48:98:0a:a9:0f:a8:66:12:
                    76:e2:81:22:64:6f:47:f9:6c:da:16:91:db:20:ba:
                    9f:f4:2b:49:4c:eb:7c:c7:40:70:d0:7a:72:f3:56:
                    4a:fa:f2:57:90:c5:bc:31:00:c9:94:f1:be:38:78:
                    10:21:a0:21:84:f3:66:08:86:ea:ff:46:d5:3e:59:
                    c4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3F:55:59:C3:51:D4:BB:A7:45:15:85:EB:0F:CD:24:7A:8B:13:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/450ca495-c781-35fe-ac29-cf3b9e222135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:3f:6b:9f:b5:dc:61:83:5c:4f:e8:8f:50:07:47:7f:9e:12:
         50:0e:54:e5:46:6d:70:e5:34:3e:fd:29:d4:b1:80:9d:e8:70:
         b9:56:60:0f:80:95:b7:f1:a0:48:60:e8:15:63:87:7b:79:cb:
         d8:a4:ae:6b:81:39:72:a2:22:21:9e:0f:5e:8c:90:06:a8:8d:
         b2:bf:07:c7:42:d9:65:47:2c:a3:74:ab:6c:25:da:b2:57:67:
         06:23:69:38:91:af:a2:e0:66:6b:3e:95:e4:bd:3a:c3:e1:4e:
         38:96:29:25:32:d8:19:f2:c7:0f:b8:2d:2d:9d:5d:ed:bb:0a:
         fa:bf:4f:c6:1e:e3:80:b1:17:8d:29:71:07:38:88:64:27:39:
         ea:31:88:d3:87:33:b6:50:9d:d7:77:74:25:95:d8:9c:c1:50:
         63:cd:a6:4b:cb:be:9c:c6:30:28:9a:4d:1f:23:80:3d:a5:19:
         19:f8:0f:cc:61:e4:ee:e1:8a:5b:c1:e4:51:60:bc:83:7e:f4:
         59:5c:16:1d:69:d9:72:fa:82:ad:c4:d2:40:30:13:a6:28:57:
         c3:fb:25:bd:24:7f:5b:16:55:58:d7:77:86:37:50:8c:be:ca:
         00:08:95:6c:5a:b5:5d:1a:11:7b:5f:aa:5d:01:5a:3c:ca:d8:
         20:d9:f2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:28:56 2025 by rpki-client