Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94dceb1e-1a6f-3712-85ba-54f005db603e.roa
File:                     94dceb1e-1a6f-3712-85ba-54f005db603e.roa (raw, json)
Hash identifier:          CGrayuuE6987sbqgjnBSF0uGXBy1JATYC9+xqok+F24=
Subject key identifier:   22:CE:97:AA:DB:80:64:61:31:68:47:C0:4E:41:3A:10:05:6E:ED:02
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A346C796FF06E53FB9E9680
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94dceb1e-1a6f-3712-85ba-54f005db603e.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     202
IP address blocks:        204.104.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:6c:79:6f:f0:6e:53:fb:9e:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=8a7b65d6-7d78-4b89-a38f-3396500660ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b6:08:bf:88:3d:22:8a:7f:d9:18:f1:b5:f5:
                    c2:c9:9e:bd:a5:9b:53:01:e3:0f:0e:a5:3a:cf:a7:
                    46:fb:88:a8:b3:ff:82:2a:ed:c5:d7:40:14:e5:e0:
                    70:de:06:0f:7b:72:6c:c0:5c:f1:86:a1:7e:83:4c:
                    b3:b0:f2:a9:e0:fd:0d:ca:df:d9:29:4d:e5:39:8c:
                    e9:3b:a0:e4:42:90:90:28:04:ee:42:06:ea:9f:b5:
                    aa:dd:c2:32:f9:48:b0:39:61:f0:85:43:54:7f:15:
                    83:6a:e6:8c:ef:bd:8d:f5:33:c8:4e:8b:47:5f:9f:
                    6a:0a:34:02:7c:a3:85:1e:4f:63:26:0a:2b:91:9e:
                    cd:72:53:31:00:5f:67:b4:99:25:75:d7:b0:ac:37:
                    aa:62:85:32:df:ca:8b:3d:28:db:44:d3:a1:bc:63:
                    78:09:13:3f:de:4a:8c:93:ba:76:f1:6b:68:e2:26:
                    fb:e7:4e:9f:5c:e6:09:9b:5f:7f:3c:99:60:8b:07:
                    e3:d3:8c:53:3c:f7:38:46:82:a6:c1:94:38:a8:e2:
                    ab:09:cf:ad:4a:68:ca:73:bf:fa:a8:69:5f:a2:74:
                    65:46:c3:ca:eb:f6:e2:12:36:67:8d:88:86:39:a7:
                    b9:83:9a:bd:31:9c:76:4e:23:2f:86:2b:c3:65:62:
                    85:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CE:97:AA:DB:80:64:61:31:68:47:C0:4E:41:3A:10:05:6E:ED:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94dceb1e-1a6f-3712-85ba-54f005db603e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:23:ea:3c:0b:0c:9f:8f:4b:c3:93:9d:51:b5:f1:f4:cc:ad:
         2e:07:17:32:22:fb:c9:a3:d6:d4:cb:a1:6b:bf:e2:e0:f2:da:
         a8:14:d8:29:3f:84:cb:dd:58:a9:ef:e3:00:36:fe:6c:fe:9c:
         1c:02:43:7a:a5:24:0d:3a:31:f7:f2:a7:ad:50:90:f2:ac:c1:
         d0:aa:3a:21:bd:9d:4f:85:f4:cf:e7:77:9e:73:17:fc:9e:22:
         2b:f5:c2:5f:6d:af:68:6a:e5:98:d3:28:0a:cf:5f:8a:93:1a:
         08:d0:70:ef:9c:03:41:6a:58:12:79:30:fd:38:72:a8:fd:23:
         c1:8f:6d:ae:40:14:ba:5d:d4:10:d7:dc:5f:e9:36:e2:5f:ea:
         9c:e3:e0:59:36:1f:56:37:56:e4:b2:f3:3f:cd:98:bd:a2:a6:
         35:99:ca:74:3b:8a:ac:24:6b:7b:c6:ec:9c:e7:81:88:29:0e:
         6b:d3:7a:15:f5:9c:aa:d3:99:b5:db:b3:de:fb:c7:9d:6d:83:
         c5:81:ab:8e:25:0c:93:dc:c3:60:3b:e3:33:2f:38:bc:37:4d:
         4e:d6:84:99:ed:da:08:c2:63:80:13:a8:82:f2:f4:40:b2:db:
         2c:24:50:e6:09:6c:fd:20:1b:11:6d:5b:7f:30:7f:4a:65:7e:
         98:4e:c2:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGx5b/BuU/ueloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk
OGE3YjY1ZDYtN2Q3OC00Yjg5LWEzOGYtMzM5NjUwMDY2MGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbYIv4g9Iop/2RjxtfXCyZ69pZtTAeMPDqU6
z6dG+4ios/+CKu3F10AU5eBw3gYPe3JswFzxhqF+g0yzsPKp4P0Nyt/ZKU3lOYzp
O6DkQpCQKATuQgbqn7Wq3cIy+UiwOWHwhUNUfxWDauaM772N9TPITotHX59qCjQC
fKOFHk9jJgorkZ7NclMxAF9ntJklddewrDeqYoUy38qLPSjbRNOhvGN4CRM/3kqM
k7p28Wto4ib7506fXOYJm19/PJlgiwfj04xTPPc4RoKmwZQ4qOKrCc+tSmjKc7/6
qGlfonRlRsPK6/biEjZnjYiGOae5g5q9MZx2TiMvhivDZWKFJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLOl6rbgGRhMWhHwE5BOhAFbu0CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTRkY2ViMWUtMWE2Zi0z
NzEyLTg1YmEtNTRmMDA1ZGI2MDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEkj6jwLDJ+PS8OTnVG18fTMrS4HFzIi+8mj1tTLoWu/4uDy2qgU2Ck/
hMvdWKnv4wA2/mz+nBwCQ3qlJA06Mffyp61QkPKswdCqOiG9nU+F9M/nd55zF/ye
Iiv1wl9tr2hq5ZjTKArPX4qTGgjQcO+cA0FqWBJ5MP04cqj9I8GPba5AFLpd1BDX
3F/pNuJf6pzj4Fk2H1Y3VuSy8z/NmL2ipjWZynQ7iqwka3vG7JzngYgpDmvTehX1
nKrTmbXbs977x51tg8WBq44lDJPcw2A74zMvOLw3TU7WhJnt2gjCY4ATqILy9ECy
2ywkUOYJbP0gGxFtW38wf0plfphOwnE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:06:46 2025 by rpki-client