Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6b4bc13c-b790-3904-b48f-b3e1b08ac9e9.roa
File:                     6b4bc13c-b790-3904-b48f-b3e1b08ac9e9.roa (raw, json)
Hash identifier:          Y4AGyZnQrU4npxWqsUxzJtaoCTkn2F/P41k+eHIc9zw=
Subject key identifier:   0D:38:45:90:3A:E4:72:DF:59:67:6E:47:B8:91:CA:A7:53:6C:88:E8
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A346B02D56E6C5B1E83D110
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6b4bc13c-b790-3904-b48f-b3e1b08ac9e9.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     203
IP address blocks:        204.104.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:6b:02:d5:6e:6c:5b:1e:83:d1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=5c92b2ad-306d-44d0-8ac7-72a91f8a4b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c3:ab:9e:a1:55:74:63:90:65:4b:31:0e:4d:
                    7d:f4:74:02:c7:95:2e:62:f4:c8:30:0c:41:ef:ec:
                    49:6d:ac:6e:7b:c3:95:f6:63:55:75:f1:e8:45:f6:
                    75:87:1a:1b:cb:c1:a5:04:d6:0c:98:b1:6b:a2:66:
                    64:51:f3:44:76:53:ad:98:e6:2d:a2:2e:1b:0a:70:
                    d9:92:9f:91:2e:dd:48:48:cf:20:b2:12:db:6c:1f:
                    d8:76:8d:aa:5d:89:cc:e4:5b:df:14:a0:a4:1d:e4:
                    97:db:ba:03:8f:ac:88:07:3f:0e:9e:1a:38:9a:a9:
                    5a:cd:fd:ef:50:18:2d:b6:66:33:b4:d5:62:42:94:
                    0f:77:fe:6d:87:b2:7f:c4:e8:50:f4:9f:e9:f4:42:
                    ba:01:e2:7e:12:3e:a6:06:cc:3a:80:28:01:6c:27:
                    b2:81:90:aa:78:5b:1c:56:c6:29:73:35:c3:9a:38:
                    50:f1:4b:66:ad:ad:a3:69:c2:2f:28:d8:64:43:5e:
                    b9:7e:f8:9d:c1:23:04:76:2f:f1:1e:02:68:b5:b5:
                    e3:34:b7:62:f0:e8:67:b9:2d:1f:cf:c0:dc:01:ce:
                    99:3b:7b:8e:7f:b0:0d:0c:1b:fb:e9:2c:67:cb:fe:
                    1a:5f:4d:a3:91:ec:97:69:b1:a0:cc:f7:f7:80:b3:
                    a9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:38:45:90:3A:E4:72:DF:59:67:6E:47:B8:91:CA:A7:53:6C:88:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6b4bc13c-b790-3904-b48f-b3e1b08ac9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:62:2f:63:f6:1c:85:28:96:58:77:66:a8:4e:a2:f5:e5:27:
         f8:f0:1a:32:88:19:8e:51:ee:31:5b:4f:88:0b:a9:51:c3:1b:
         e0:4b:08:d1:1f:28:08:0b:42:33:12:16:6e:ff:95:b7:4e:b4:
         55:d6:5b:d5:18:b6:2d:3c:6e:fe:87:24:4c:48:40:65:61:81:
         c6:95:cd:40:d5:fb:7b:92:4e:f8:62:32:bf:5f:8a:c6:00:2c:
         da:6a:2e:08:7a:b9:a2:3f:43:41:c5:61:3b:35:37:f8:94:6b:
         8c:17:6b:01:20:30:a3:3e:13:3a:f8:9c:23:27:cf:da:19:ec:
         66:3a:06:0e:96:4c:cb:e0:84:97:6d:21:05:61:0f:2b:4d:8a:
         a9:fd:a3:ba:8c:18:36:88:51:31:a1:76:eb:bc:11:96:50:e9:
         08:3a:00:5e:e2:dd:1e:79:0e:11:b6:db:38:75:6f:fa:51:e1:
         d1:2a:33:d1:cf:a4:3b:22:94:14:70:7f:03:dc:2a:6a:35:0c:
         55:72:af:f3:f8:cb:57:f3:6b:3d:09:bd:09:14:13:bd:d4:6e:
         b1:48:d0:de:6b:ec:e8:14:ac:2e:f0:9b:17:f8:60:d6:97:21:
         b3:e8:56:44:a8:41:0b:47:8c:1d:30:44:24:e2:12:f1:ba:33:
         a8:22:09:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:15:48 2025 by rpki-client