Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/637448b1-0e67-3cc1-b952-cd1398fb936b.roa
File:                     637448b1-0e67-3cc1-b952-cd1398fb936b.roa (raw, json)
Hash identifier:          zixtt02wrZNc2zj98xhYMhjOUi+XIZDYW6mHvMLMxSw=
Subject key identifier:   9F:09:C5:F2:54:74:3B:9F:D5:F4:F2:67:1B:11:5C:E6:34:95:36:49
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858499DBF34B83013E1FBB2502800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/637448b1-0e67-3cc1-b952-cd1398fb936b.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     3360
IP address blocks:        205.239.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:34:b8:30:13:e1:fb:b2:50:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=7bf560ef-2a88-4dec-9275-2410890f100d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:e1:62:48:31:cd:d2:68:de:5d:e3:2c:7b:
                    9a:05:af:33:13:87:2c:86:d1:29:03:8e:59:86:71:
                    66:25:04:8a:a9:da:5b:b1:08:c3:0f:98:88:f6:05:
                    7e:20:fc:e3:2d:01:9b:7e:6c:13:23:98:80:5e:f0:
                    26:87:f3:57:49:e6:c6:3f:3b:ac:40:6c:01:ec:98:
                    33:b5:f3:49:02:31:ba:96:07:fa:64:9b:ab:b8:d6:
                    e7:f0:3e:c3:fa:75:b1:ee:fd:b0:7e:1f:a2:95:96:
                    44:fb:36:2d:54:2b:8b:aa:b7:06:9b:5a:9d:b0:75:
                    df:39:6f:4d:12:35:32:83:8a:81:dc:60:02:fd:04:
                    04:30:ed:1a:5a:81:f2:d1:c9:b9:ce:b4:dd:e7:a9:
                    e8:b2:4c:e4:5e:93:c9:77:47:96:24:36:5b:fd:55:
                    b6:36:45:39:77:80:a0:bb:a7:ba:ba:76:13:51:cf:
                    e9:fb:0a:b3:36:3b:5a:0c:4d:c7:0d:7f:fb:ef:e5:
                    2e:74:c2:38:36:59:84:0f:f9:fa:14:ba:f4:87:0c:
                    42:a8:6e:fa:5f:f9:d0:4c:66:0f:f7:f9:4b:96:97:
                    63:ea:1d:94:d5:32:7d:95:d2:4f:90:70:cd:2f:45:
                    76:38:55:f4:36:20:4e:d3:a0:9a:0d:8b:45:ed:d3:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:09:C5:F2:54:74:3B:9F:D5:F4:F2:67:1B:11:5C:E6:34:95:36:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/637448b1-0e67-3cc1-b952-cd1398fb936b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.239.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:cf:56:66:dc:32:97:9a:24:cd:ed:cd:09:5d:c1:3e:c8:53:
         f9:42:4f:4d:57:84:41:b4:c5:4d:49:7a:4f:d3:53:8b:83:1d:
         51:f7:70:4c:64:d3:2a:45:34:11:e3:d6:78:1c:57:fd:29:6a:
         a5:44:3b:e4:01:93:30:8b:cd:42:ef:ad:b5:b9:61:09:8e:53:
         d8:ce:ce:55:1f:e9:8c:1d:93:5b:11:26:5e:2d:b6:8d:e4:31:
         d8:0e:d5:19:5d:d6:d9:8c:8d:fc:d0:c7:3b:30:dc:67:b6:ae:
         e0:6b:b7:ce:e3:28:06:8c:f5:9c:d2:a3:cc:ee:af:20:12:a3:
         13:3f:11:74:9a:90:ce:9d:f5:61:bc:48:1c:c2:e5:4b:8d:90:
         05:36:b2:32:15:20:f9:53:03:78:aa:ce:0f:43:81:34:02:be:
         1e:11:2d:56:be:2c:76:15:6e:14:bb:e9:72:88:7a:5b:f0:61:
         b9:44:a3:95:d1:5a:a3:e4:de:e4:87:e7:a2:91:c4:b1:8e:c4:
         33:50:31:85:78:78:82:40:ef:56:f5:4c:12:9a:46:ea:e0:1b:
         ac:92:4d:97:a8:7e:e1:36:72:eb:61:ef:dc:4d:b6:59:75:6b:
         fd:6a:fc:d8:2c:62:9f:1c:e5:25:d8:09:09:1f:64:d1:7c:5b:
         34:d8:32:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:18:34 2025 by rpki-client