Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9d7aee43-2f7a-3166-82d2-5ddd39af9118.roa
File:                     9d7aee43-2f7a-3166-82d2-5ddd39af9118.roa (raw, json)
Hash identifier:          jXPFtvRcu1FFgJyG2aTN7X2EeQUn/6yfgKq+NV661A0=
Subject key identifier:   73:B6:99:6D:5E:3E:F0:2D:83:2C:91:88:92:36:DC:82:5C:F1:8C:F2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849998F39D9A0F4EDC64D5DAA80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9d7aee43-2f7a-3166-82d2-5ddd39af9118.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     203
IP address blocks:        170.30.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:39:d9:a0:f4:ed:c6:4d:5d:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=8467eea8-9298-4ca8-a848-0b66e0126268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e1:20:00:fd:cc:22:de:7c:ff:31:69:5f:e0:
                    81:1f:25:0d:98:f3:93:12:ca:2d:fd:42:e7:73:ed:
                    a5:7e:33:51:a6:44:49:f7:10:9a:86:c5:0e:ea:66:
                    7d:f3:9a:be:d3:42:f6:07:4e:b3:f3:69:e2:11:fe:
                    21:d3:b1:7b:47:4a:22:93:c4:05:24:16:cb:7f:f3:
                    10:1c:06:05:e7:54:db:a2:43:78:b3:42:33:8f:9b:
                    fc:72:47:17:c3:d6:1a:04:f7:b0:e1:7b:4c:24:1d:
                    de:f2:92:3b:0f:65:83:1d:8f:66:c0:e0:fc:7b:77:
                    d9:9a:f8:4c:6b:83:72:b8:57:a6:3b:45:33:ee:89:
                    73:b5:ed:e2:be:52:58:3b:57:95:ac:87:2d:ea:27:
                    cc:65:84:20:fe:35:00:cf:f8:70:e9:d6:91:bf:a7:
                    56:e3:5c:78:01:1e:b8:4a:a0:c2:e0:59:09:63:6c:
                    aa:f5:6c:5a:2a:1e:61:91:c1:fb:8f:4e:8a:20:6f:
                    5d:25:98:64:21:18:59:71:5b:13:00:9d:e5:c0:4f:
                    03:28:7b:43:36:06:73:9d:64:be:f1:16:cb:85:8b:
                    13:b0:2f:78:9f:16:b8:43:23:dc:a4:c7:f0:22:c8:
                    32:f0:3a:13:1c:a3:f0:f5:34:8b:91:96:08:50:1c:
                    0b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B6:99:6D:5E:3E:F0:2D:83:2C:91:88:92:36:DC:82:5C:F1:8C:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9d7aee43-2f7a-3166-82d2-5ddd39af9118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e8:4c:8f:cc:0d:ba:f3:2d:91:6c:08:72:49:75:62:26:ad:
         12:ba:eb:9d:ca:f7:cc:c9:25:cb:10:44:70:a8:94:47:5f:59:
         e0:52:55:d3:3e:7c:57:73:f0:ce:95:ea:2f:67:cd:56:2c:92:
         3a:5f:fd:4d:32:cd:6a:db:37:fd:d2:2c:4a:5b:00:30:90:d9:
         9c:ff:f0:12:bc:cb:bc:f1:cb:62:72:bc:21:83:55:4f:19:45:
         dc:9e:06:49:0a:00:80:74:6d:c8:fa:d8:94:38:8f:3f:01:8f:
         e7:38:0f:5c:b6:3d:1e:a4:eb:ad:50:5a:6e:24:ba:b6:1b:eb:
         ad:76:9c:d7:55:fc:3a:6d:e6:94:20:70:2c:8d:14:65:93:50:
         ab:30:30:aa:27:91:1e:ae:49:e2:af:93:fa:01:17:3e:f2:d9:
         2d:78:8c:34:b5:db:71:fd:43:95:8e:39:c6:e7:d8:88:1a:b6:
         29:28:99:8d:da:56:f9:2e:c7:67:7e:17:64:c5:ca:0b:24:40:
         2f:b0:43:c5:41:2e:64:8b:78:8c:e1:f4:ee:74:6f:01:68:13:
         48:20:0e:e9:1f:47:b4:67:06:81:7d:ae:de:92:40:14:2a:42:
         a4:4d:7c:f1:41:13:e9:f3:49:39:d4:e8:e3:5a:0c:f2:3d:70:
         60:af:b2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:29:24 2025 by rpki-client