Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8075e8b3-12e3-3866-8312-53b3497572b8.roa
File:                     8075e8b3-12e3-3866-8312-53b3497572b8.roa (raw, json)
Hash identifier:          hBPdn5ZExIQCO+gTL32HcCILR9MLyI8AHt1nYPAC99I=
Subject key identifier:   24:5F:CA:D3:68:B7:78:C0:DD:4B:1A:2A:E9:D9:61:08:A2:E9:DE:7D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498CFF1379F497A8046B4737C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8075e8b3-12e3-3866-8312-53b3497572b8.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     3356
IP address blocks:        204.104.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:13:79:f4:97:a8:04:6b:47:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=f2cb1655-ff22-49d4-b72e-6f6833d8c868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:db:80:65:98:a4:5c:ea:28:72:c3:a3:37:9e:
                    d8:21:a5:47:01:68:79:9f:ff:ea:d9:7d:ee:22:70:
                    f4:ba:be:74:f8:3e:32:3d:78:21:51:09:43:53:b0:
                    7c:c9:1b:10:d6:c9:06:0f:b6:ef:2d:21:e8:2d:c8:
                    98:44:74:d0:47:f9:4a:3c:a0:a0:de:61:d2:3f:e1:
                    dc:8f:b3:81:c7:fe:9c:1a:b3:af:c4:d4:75:89:07:
                    33:8c:78:c8:b5:a2:3d:0d:7c:5f:25:fa:a6:09:d2:
                    73:b6:98:2a:02:3e:ef:f0:25:23:90:80:79:7d:a3:
                    b4:a0:3e:b1:46:b1:92:e3:28:50:48:b0:6e:d6:78:
                    fa:78:2b:f9:f0:d8:a7:1a:52:9b:47:84:12:da:26:
                    d9:6d:07:2d:c6:ad:4f:06:59:4a:f9:7f:d6:07:03:
                    22:1f:ef:70:5b:0e:f0:1b:0b:49:08:11:21:f7:fe:
                    39:8b:46:27:20:d8:7e:6e:38:b8:58:2b:1d:18:ee:
                    43:23:00:8b:5d:f9:36:d5:59:df:67:5e:f7:74:37:
                    3f:d9:9a:e9:be:b5:4a:9d:10:47:ed:1b:c0:83:1d:
                    7a:c1:bf:45:e2:1f:5c:e7:a9:a2:7c:ec:c2:1c:a0:
                    0c:b9:b3:e4:e9:b3:3b:bc:d1:2f:21:74:6f:ad:e3:
                    30:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5F:CA:D3:68:B7:78:C0:DD:4B:1A:2A:E9:D9:61:08:A2:E9:DE:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8075e8b3-12e3-3866-8312-53b3497572b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:25:d7:4d:fa:6a:dd:4c:16:af:3d:47:cb:5a:0b:94:b6:86:
         f3:18:72:c8:39:7a:b4:ee:0d:1b:58:c5:f3:aa:bd:8e:a1:91:
         90:42:2b:2d:fe:ab:29:75:84:b9:7b:d8:b5:33:f7:bf:b7:75:
         5e:d0:a6:cd:55:7d:78:0e:5f:1d:3f:e9:e1:d0:f7:90:6b:4f:
         9a:d6:da:a0:a5:ca:37:32:f7:1f:2a:14:0b:80:13:02:fa:38:
         8b:67:b0:35:a5:c6:53:17:07:19:37:7a:ff:28:f9:be:83:96:
         14:56:48:ea:13:77:38:a9:5a:d6:44:97:4b:92:25:d2:b5:5c:
         c0:f8:aa:d5:1a:37:80:04:80:fe:64:0b:74:f6:8a:0f:e1:3f:
         2f:b4:c0:72:ec:63:9a:73:97:81:8a:a9:90:d4:71:3d:85:de:
         1e:47:66:a3:23:09:95:f8:64:b1:4a:1d:21:b3:ef:94:db:df:
         d6:8a:93:d6:b4:07:a2:f0:2d:bc:2b:41:f2:fd:52:25:d3:78:
         9e:ed:24:0b:2d:52:28:3b:58:6f:9e:5c:68:97:49:4a:e2:3c:
         20:e6:bb:97:98:ec:4b:0e:b8:79:82:82:3b:2d:d8:57:76:65:
         37:a6:f4:e2:9a:48:4d:11:16:c9:f9:4e:89:48:7e:86:63:ce:
         ca:82:06:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:22 2025 by rpki-client