Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f835571-a63c-361e-a93a-107b6c7bae0e.roa
File:                     4f835571-a63c-361e-a93a-107b6c7bae0e.roa (raw, json)
Hash identifier:          8FqzjdiuNdETercsAbXnljZT1I2jcPE/kF8DpPGcbZk=
Subject key identifier:   2A:C4:A4:C7:92:06:A0:15:E1:75:F6:3B:32:F7:4B:D6:87:5C:64:40
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A346F2DB607EFBE02D67D40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f835571-a63c-361e-a93a-107b6c7bae0e.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     3360
IP address blocks:        204.105.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:6f:2d:b6:07:ef:be:02:d6:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=e0b5b136-d9b1-4ef0-8dd4-f3b9ef167f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:aa:34:f9:67:a6:c1:78:9b:c3:0e:c9:27:01:
                    61:5f:ec:3a:ff:53:c7:20:03:80:c3:28:35:16:b6:
                    c4:d8:ec:b9:cb:a8:54:2f:a8:11:cb:1c:22:7e:97:
                    6d:f7:0e:46:38:65:bc:0a:3a:2f:1e:18:94:8f:97:
                    fb:f4:c8:69:ad:62:f8:45:79:fa:5e:f4:64:91:79:
                    47:57:ec:08:86:ff:b4:fb:25:10:37:d5:96:b3:ac:
                    4e:2e:e0:76:b9:9c:8c:c1:c7:5d:c0:c2:c2:f7:b2:
                    48:2a:f5:35:a8:f7:30:52:d1:42:16:ea:95:6a:36:
                    37:b8:c1:da:ad:2d:e3:2f:e6:b0:f9:3d:2e:3a:0a:
                    ba:97:07:a7:84:ff:c8:e3:e6:6f:e2:47:db:23:91:
                    90:a3:48:7c:a9:18:eb:91:f9:65:9d:3a:05:95:3e:
                    76:a7:6b:81:41:94:f2:d4:67:3a:98:d5:1b:f2:ae:
                    c8:ad:e6:61:0a:b1:e8:dd:91:a0:e2:bb:86:d6:43:
                    98:9c:18:5d:b2:74:af:fd:03:e7:f3:b6:cb:f2:9d:
                    53:cc:36:0c:1d:0d:55:9e:df:17:d5:9c:75:5e:83:
                    10:2c:0b:6a:65:38:42:2a:41:f5:4a:19:46:bf:e2:
                    11:35:18:5a:04:22:53:ef:87:99:e5:a2:90:ec:c0:
                    34:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C4:A4:C7:92:06:A0:15:E1:75:F6:3B:32:F7:4B:D6:87:5C:64:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f835571-a63c-361e-a93a-107b6c7bae0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:87:23:51:0f:71:fb:6f:07:2f:9e:4c:2b:da:d8:27:d2:46:
         1a:04:40:ae:9e:69:5b:e1:96:d9:f9:91:a7:2e:d5:fb:aa:b9:
         fc:ca:33:38:1e:58:6e:93:bd:de:0b:71:2c:cc:64:6d:b6:66:
         b8:03:43:8a:74:42:d9:58:e4:58:3c:f1:fe:7c:a7:22:a6:0b:
         3d:2d:42:e8:ff:37:03:a9:df:2b:b1:7d:f5:80:7c:b0:60:5d:
         39:9c:b0:2c:30:f4:c1:76:cd:c9:a7:60:26:01:e1:b5:01:2f:
         a3:d8:e0:32:d0:09:37:95:f0:2a:01:bd:45:f7:4e:96:c0:08:
         5e:eb:05:e0:55:9d:7f:e4:d7:79:e5:48:5c:cb:07:3a:9d:50:
         a3:62:fd:ac:17:4a:88:18:c1:93:83:af:aa:4a:64:f5:d4:4d:
         28:d3:aa:1f:47:5e:6d:8e:91:c1:b2:4c:61:82:e8:c6:b7:06:
         48:d8:92:83:50:23:b9:6d:3d:1b:f8:b6:4a:13:8c:91:c8:e4:
         62:e0:e1:a7:da:db:e5:15:12:5d:09:9f:70:d7:2d:80:c4:3f:
         53:92:1d:8d:d0:bf:86:0b:53:d2:60:e9:2c:73:2d:e6:af:aa:
         d6:d7:7e:59:57:74:d4:40:d8:cb:2a:79:f7:4f:83:5d:e1:cb:
         03:be:f1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:23 2025 by rpki-client