Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6973402f-73c5-3ffd-a113-86b60d7ea1d2.roa
File:                     6973402f-73c5-3ffd-a113-86b60d7ea1d2.roa (raw, json)
Hash identifier:          0H/3IjP2qkVmpQh0xkQ8t+SWcCKyN8HSRKUjrWMMReI=
Subject key identifier:   D9:5E:A9:BF:1F:E4:00:EC:6A:A4:89:95:1F:2B:19:A9:53:14:EB:8E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849998F3A9E66AE040F31D7CE00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6973402f-73c5-3ffd-a113-86b60d7ea1d2.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     202
IP address blocks:        192.57.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:3a:9e:66:ae:04:0f:31:d7:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=e7ef6149-9b65-4895-b416-bd08123d60c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4f:fe:48:a9:ae:64:95:08:b3:bd:94:69:5c:
                    76:13:d3:57:eb:53:7f:66:61:52:8d:9d:30:01:9d:
                    29:f2:96:09:78:1f:22:8a:23:85:c0:cf:e9:d6:93:
                    ab:48:1c:c3:e7:3a:3e:62:7e:0e:53:80:8b:65:bd:
                    d7:67:9a:ba:e1:ce:c3:b2:bb:82:78:f2:2b:84:c2:
                    3b:26:49:de:42:be:eb:64:50:ec:f2:18:d4:30:a8:
                    7e:e7:58:37:ed:77:46:33:40:51:c7:c6:c2:1d:27:
                    3e:a5:0d:8e:a6:4e:87:6c:c8:92:cd:e2:fc:07:bf:
                    0a:f0:c5:ef:ef:98:bc:07:ca:7b:10:a0:15:1c:8b:
                    1c:c5:72:4e:79:53:42:92:cf:16:2e:ad:54:a3:1c:
                    e8:48:d3:77:c0:d5:a9:98:73:3c:4f:28:e5:b1:c1:
                    35:8b:57:bf:6e:96:cc:7d:56:96:2b:f5:91:c2:a0:
                    98:a8:2c:e7:80:62:c0:b1:89:53:04:c5:79:dc:2a:
                    3d:96:92:34:e9:18:9d:8e:38:16:97:01:ef:d3:60:
                    bf:93:65:83:67:3b:a0:cd:6c:b5:ef:ae:33:75:26:
                    05:ab:50:e8:46:d8:40:0f:0b:8b:30:9c:dd:19:a4:
                    69:b0:8a:e9:48:1c:99:df:30:8e:ff:86:c5:39:86:
                    eb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5E:A9:BF:1F:E4:00:EC:6A:A4:89:95:1F:2B:19:A9:53:14:EB:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6973402f-73c5-3ffd-a113-86b60d7ea1d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:99:b0:e3:a2:0d:1d:52:12:dc:ef:30:b9:76:1b:ce:aa:b9:
         19:64:fa:72:1e:65:9c:fd:c3:b4:69:b1:c0:4b:ca:93:7b:c3:
         52:0d:54:c1:81:0e:ec:ed:c8:1a:78:52:bd:b6:89:42:ee:cc:
         4c:e0:d9:02:c1:fd:16:04:92:13:20:05:05:a0:be:fd:be:f5:
         03:8e:74:fd:22:70:f1:93:c2:16:a3:63:e2:10:d9:e9:00:8c:
         26:0f:26:13:38:bf:85:1e:2c:93:8b:e4:5d:3f:30:7f:25:cb:
         dc:e6:3f:fe:d8:8d:af:0d:1b:f3:49:d0:24:37:64:87:22:85:
         85:92:d6:ec:c5:ec:ee:34:17:c9:4c:1f:1a:c6:68:3c:96:8a:
         b9:4d:66:e7:95:c7:6b:43:94:86:bc:23:91:96:4b:97:0f:8a:
         55:35:3f:90:81:bd:22:f9:0f:4b:01:da:4d:b6:16:07:4f:19:
         35:9d:67:fd:a1:4b:f0:51:76:59:66:72:4e:22:c7:1b:2a:de:
         e9:2d:4f:10:af:24:d5:1a:53:8d:84:2f:77:dd:6e:08:c1:a3:
         ce:c4:e7:6d:29:89:0d:74:7d:2a:b1:78:ea:70:9b:fc:43:7e:
         50:fa:ea:aa:ba:17:04:e9:c3:66:2a:76:11:67:4a:fa:72:b8:
         c8:58:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:19:34 2025 by rpki-client