Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a711ee2f-63b3-3905-acac-4b7383c96cb7.roa
File:                     a711ee2f-63b3-3905-acac-4b7383c96cb7.roa (raw, json)
Hash identifier:          ayR0aKZFOUiv4wQ4IDyLOLVsPq93PPTLWE0A4neYcgE=
Subject key identifier:   01:4E:E3:40:B3:5C:36:87:9B:82:CD:D1:75:A6:61:60:D6:EB:8C:CD
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A34704940843CD3064C0E00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a711ee2f-63b3-3905-acac-4b7383c96cb7.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     3360
IP address blocks:        205.141.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:70:49:40:84:3c:d3:06:4c:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=1b32ada5-332b-4baf-bb07-1ddba82183f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fc:39:d8:ec:63:fa:f7:e9:1f:8c:48:9e:98:
                    b2:5b:fe:f2:2c:8c:23:ff:cf:ec:6c:9d:7c:7f:67:
                    57:c7:2d:08:ca:fa:65:09:16:ce:4d:15:5e:4d:fa:
                    f6:fe:b4:1e:57:89:83:0b:c6:b4:e2:32:52:16:79:
                    90:09:f2:bd:9d:c9:0a:04:58:6f:b7:07:c1:24:3b:
                    61:93:58:02:9d:68:3d:23:bb:1d:2c:9c:57:39:e2:
                    11:0e:d1:25:6e:70:9b:82:eb:d3:6d:70:cb:5d:24:
                    10:0d:4b:40:bd:92:fd:52:f7:ee:0d:4f:01:45:b9:
                    2c:9e:8a:ba:76:09:13:bf:30:c0:d7:08:a3:d6:2f:
                    6b:08:37:39:35:84:cc:c8:99:b0:ae:80:0c:b6:3b:
                    74:f3:a1:3e:55:fd:85:b5:4d:cf:9c:a0:1d:5e:31:
                    85:f7:92:8a:bc:3a:f3:37:51:db:01:3d:21:e1:ca:
                    cf:cf:52:6c:eb:5f:e0:4c:67:a3:a6:43:36:1b:61:
                    e3:a3:1b:25:ca:55:56:5e:3e:3e:85:f0:21:9d:eb:
                    f0:2c:66:ea:68:4e:53:f1:4d:d8:57:db:7b:47:d7:
                    16:26:11:f1:d5:63:18:35:d7:bb:c0:00:bc:e6:25:
                    9f:0c:b5:25:19:d0:ca:12:10:a8:df:5a:45:05:a2:
                    95:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4E:E3:40:B3:5C:36:87:9B:82:CD:D1:75:A6:61:60:D6:EB:8C:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a711ee2f-63b3-3905-acac-4b7383c96cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f3:a6:c7:64:ad:b5:b0:e7:3c:64:10:50:0e:6a:a0:3b:ce:
         be:ab:80:d4:42:50:e4:58:08:d2:1a:ee:86:3d:54:62:b0:3c:
         d9:de:b5:8a:00:9a:5f:17:4c:ec:a1:fb:ae:e7:da:e8:b7:2a:
         07:29:ff:b6:02:1b:fd:83:a6:66:e2:64:55:54:88:82:fa:3b:
         d1:cb:67:20:05:55:27:0b:e6:6d:37:f9:fa:de:a6:e5:83:63:
         e8:c9:ef:26:69:10:8b:cd:b2:0c:34:ec:d3:59:37:35:92:cb:
         20:da:86:fe:14:d4:31:8f:12:eb:dd:9f:6b:bf:82:57:af:b9:
         02:b3:11:57:ae:ed:38:c9:60:9f:6d:8c:45:40:5c:92:9f:13:
         30:f6:0b:cf:04:6d:6a:51:7c:13:31:a4:20:46:ae:55:b9:49:
         e1:9f:21:c5:ab:c2:a7:b4:ed:1b:6b:06:9a:bc:a0:7b:7c:a1:
         22:f7:ea:3f:b3:97:96:d0:f2:10:46:1b:1d:77:a1:08:c8:cd:
         81:2e:b0:ce:b6:75:45:e1:f4:90:f1:d3:a0:46:24:33:7d:e7:
         1e:f2:08:86:8e:af:cd:b3:7b:9e:80:29:91:62:e0:e3:72:a9:
         c6:af:50:5d:91:ca:cb:87:99:f4:03:92:44:eb:ab:c2:57:c0:
         df:61:7f:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNHBJQIQ80wZMDgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk
MWIzMmFkYTUtMzMyYi00YmFmLWJiMDctMWRkYmE4MjE4M2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/w52Oxj+vfpH4xInpiyW/7yLIwj/8/sbJ18
f2dXxy0IyvplCRbOTRVeTfr2/rQeV4mDC8a04jJSFnmQCfK9nckKBFhvtwfBJDth
k1gCnWg9I7sdLJxXOeIRDtElbnCbguvTbXDLXSQQDUtAvZL9UvfuDU8BRbksnoq6
dgkTvzDA1wij1i9rCDc5NYTMyJmwroAMtjt086E+Vf2FtU3PnKAdXjGF95KKvDrz
N1HbAT0h4crPz1Js61/gTGejpkM2G2HjoxslylVWXj4+hfAhnevwLGbqaE5T8U3Y
V9t7R9cWJhHx1WMYNde7wAC85iWfDLUlGdDKEhCo31pFBaKVFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAFO40CzXDaHm4LN0XWmYWDW64zNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTcxMWVlMmYtNjNiMy0z
OTA1LWFjYWMtNGI3MzgzYzk2Y2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzY3AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABPzpsdkrbWw5zxkEFAOaqA7zr6rgNRCUORYCNIa7oY9VGKwPNnetYoA
ml8XTOyh+67n2ui3Kgcp/7YCG/2DpmbiZFVUiIL6O9HLZyAFVScL5m03+frepuWD
Y+jJ7yZpEIvNsgw07NNZNzWSyyDahv4U1DGPEuvdn2u/glevuQKzEVeu7TjJYJ9t
jEVAXJKfEzD2C88EbWpRfBMxpCBGrlW5SeGfIcWrwqe07RtrBpq8oHt8oSL36j+z
l5bQ8hBGGx13oQjIzYEusM62dUXh9JDx06BGJDN95x7yCIaOr82ze56AKZFi4ONy
qcavUF2RysuHmfQDkkTrq8JXwN9hf7Y=
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:03:07 2025 by rpki-client