Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ac1a8ed2-809d-3eb9-bbf6-c77b0187f23a.roa
File:                     ac1a8ed2-809d-3eb9-bbf6-c77b0187f23a.roa (raw, json)
Hash identifier:          ZUHAhgOIx9tWFEJdT/u0zCOQlnWeJXJrLMwMHjB/kMY=
Subject key identifier:   12:57:0D:DF:BE:81:6B:93:4C:4C:DD:36:1C:04:A5:E1:E9:5E:12:5D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A3467EB5D51083546AC0F20
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ac1a8ed2-809d-3eb9-bbf6-c77b0187f23a.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     3356
IP address blocks:        192.238.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:67:eb:5d:51:08:35:46:ac:0f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=41e0b5c1-a1c6-48f5-b704-90b079b54848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2b:d7:26:ec:93:d3:eb:e8:46:b2:52:93:7d:
                    0b:79:f7:8c:0d:cc:50:b4:5b:af:33:93:82:f1:04:
                    59:28:be:40:12:47:48:d0:ae:ee:5a:22:ea:ad:21:
                    60:d4:ed:9d:41:d1:f7:65:92:b5:51:e2:1f:d6:dc:
                    6f:d5:7d:8b:d1:56:27:56:8f:38:25:ed:6f:25:59:
                    be:38:cf:c4:a1:be:30:7e:bc:19:a8:f1:b5:d3:77:
                    2c:e1:3c:63:de:63:60:0d:03:74:e2:5f:bd:99:80:
                    0f:7d:da:22:6b:6d:d1:cc:f9:92:4b:4b:2a:d9:1a:
                    03:ee:e5:e7:89:8a:28:9d:ad:92:5e:c3:68:71:0c:
                    5a:6e:66:f7:04:f6:c6:51:e2:be:86:84:e9:6f:10:
                    63:8d:50:69:98:da:26:f0:6c:28:5b:63:22:6f:24:
                    ac:d9:91:02:8c:94:c8:9f:f6:aa:7d:ae:5b:95:5e:
                    52:55:71:04:62:52:59:18:30:84:7e:0e:f2:28:d0:
                    d0:3a:23:77:67:9b:38:84:60:87:a9:c6:73:24:80:
                    e7:ad:f2:ce:25:37:74:5f:79:38:f9:7f:1d:33:34:
                    a8:b7:55:9f:4b:75:f6:f2:df:2c:cf:c8:34:24:2b:
                    da:1c:b1:c7:61:f7:7e:02:7c:ed:c4:ae:ac:31:bf:
                    4a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:57:0D:DF:BE:81:6B:93:4C:4C:DD:36:1C:04:A5:E1:E9:5E:12:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ac1a8ed2-809d-3eb9-bbf6-c77b0187f23a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.238.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:36:ba:41:42:ba:61:7a:d9:70:a6:39:85:57:d9:b9:d8:96:
         f9:61:4e:1d:0d:02:97:a1:04:6f:db:54:5d:dc:68:e7:18:6e:
         8b:5a:52:00:2b:a7:c6:65:3c:fc:6c:28:9d:c9:ca:d5:7c:f5:
         78:78:31:fb:d6:08:8d:41:c4:1d:3a:d3:1a:04:c2:42:3b:c1:
         ac:3c:bb:d9:24:de:97:93:42:7c:0a:b7:d4:d2:02:20:d3:a3:
         39:27:21:79:88:a6:18:f7:93:45:83:db:7f:57:41:49:27:97:
         8b:45:ae:00:c4:df:a9:fe:a5:3c:e1:50:05:45:2f:6b:0e:f9:
         2e:2e:5e:0e:aa:02:ea:e4:46:28:8a:b7:5e:8a:c5:bb:b6:83:
         35:88:63:7d:65:db:73:46:a6:22:95:78:45:86:c9:d6:06:06:
         df:ba:e5:82:70:f5:67:15:50:a2:a5:ca:47:d3:04:43:2d:9c:
         68:80:3b:b4:92:37:d7:5d:5f:29:59:47:a8:fd:32:a8:ba:b0:
         68:ed:08:73:d7:47:bf:71:d9:37:88:5d:4e:1b:8d:05:e0:22:
         e2:7f:fe:c0:fa:3f:36:ed:28:29:7d:85:7c:22:9c:d4:cb:3e:
         77:cd:8d:d7:7b:23:17:24:cf:c7:da:39:7b:97:26:ac:c0:f1:
         35:c2:a1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:01:45 2025 by rpki-client