Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a80aaa9e-0703-342f-b8c4-55c127b26fac.roa
File:                     a80aaa9e-0703-342f-b8c4-55c127b26fac.roa (raw, json)
Hash identifier:          M+NDs0buKJHm2J6gzZtVlKF/eHUxUJWaKY+C5uEtr58=
Subject key identifier:   19:CC:46:9A:C2:BB:78:42:AE:84:60:88:39:E9:A0:26:B1:BD:E6:D5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858499AF485DAD4F262DE93BC1680
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a80aaa9e-0703-342f-b8c4-55c127b26fac.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     3356
IP address blocks:        192.57.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:85:da:d4:f2:62:de:93:bc:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=5203aac5-e429-41b0-b964-764bb42422c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a7:a0:8b:70:57:59:9a:b5:08:27:2b:d0:f6:
                    d2:d9:74:01:5d:62:84:50:4b:47:2e:85:bd:a9:ae:
                    95:c5:ce:ff:3d:5c:57:68:e3:39:ed:22:ae:22:d0:
                    1d:56:75:b1:e6:d3:ac:ed:41:af:02:22:1e:43:72:
                    79:0e:e6:d5:df:3c:4e:99:72:6a:03:ca:cc:d8:f3:
                    23:45:b3:8a:c0:36:bb:c7:db:dc:69:7e:10:64:aa:
                    b9:12:a2:8c:6e:bd:54:cb:60:f1:cc:74:2c:b3:11:
                    70:e4:bf:9b:2c:d1:5e:05:06:dd:1f:29:e2:15:42:
                    dc:cc:02:ba:4e:fd:b3:44:77:9c:83:32:12:d1:85:
                    58:9f:1d:cf:db:91:4a:7b:66:26:36:54:b4:b8:b3:
                    b1:d6:5b:ae:79:87:36:c1:7d:de:21:13:55:d7:96:
                    20:21:61:86:03:44:cc:22:03:59:fc:c5:00:53:7e:
                    fd:84:e9:7d:35:5d:2a:88:ac:1a:c4:ad:3a:62:1c:
                    25:b7:3a:cd:0e:bf:7d:03:6b:2c:fe:a0:d8:f0:35:
                    59:f7:f9:3b:33:e9:b2:0c:c3:0d:17:80:cf:79:1d:
                    fa:1a:34:99:c5:31:60:62:34:f7:80:34:81:af:d0:
                    32:69:2e:f0:6d:38:c2:39:44:98:a2:da:b2:9a:c2:
                    71:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CC:46:9A:C2:BB:78:42:AE:84:60:88:39:E9:A0:26:B1:BD:E6:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a80aaa9e-0703-342f-b8c4-55c127b26fac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a1:f8:0c:fe:d5:a7:38:c1:01:cd:50:03:07:cf:3b:d5:0d:
         f6:63:c7:52:5d:63:c7:34:7b:3f:ab:4f:f6:eb:ce:1e:49:fe:
         2e:a6:8a:5a:be:9d:e0:bc:b5:a9:fe:91:4c:3d:74:19:98:c0:
         8b:de:13:10:b9:b0:84:8a:43:43:c1:e1:0d:c1:67:2e:a0:fb:
         c3:fc:fc:85:d0:d4:26:1a:85:13:ce:1f:f3:d4:c4:d9:0d:46:
         34:4d:db:9f:bb:bc:79:9f:80:4c:1e:8e:90:61:99:a0:ee:61:
         88:b5:4c:70:37:19:b5:ac:57:70:e2:d8:10:4b:b7:5b:e0:09:
         a1:76:66:da:93:dd:de:dd:c0:31:fb:bc:39:fa:1f:d9:9a:10:
         05:0d:76:6f:60:99:17:18:7f:32:20:7e:e8:6a:fd:08:a1:b1:
         43:4d:3a:2f:56:03:b8:10:84:28:ad:fb:91:f7:f1:5c:dc:ee:
         f1:37:a0:78:64:02:36:52:59:25:27:f6:a8:c4:1c:c5:da:2d:
         6f:58:45:95:af:c7:cc:89:a8:c4:7b:87:3a:80:8c:6b:2c:0c:
         8d:a7:cf:0a:45:a2:47:41:f2:06:6c:fd:7b:56:c4:b9:2b:b0:
         55:46:ed:24:92:e7:cc:db:a6:6d:15:58:24:08:1d:e9:45:a2:
         2c:d9:74:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:41 2025 by rpki-client