Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ad54f154-c805-3de3-8529-cb8fd1832c11.roa
File:                     ad54f154-c805-3de3-8529-cb8fd1832c11.roa (raw, json)
Hash identifier:          mjDNXN/ptirMS9+edEdEsMgBSRmQH7P5e2PlBeq2gIc=
Subject key identifier:   F9:34:DE:15:FC:AB:99:89:C2:82:4C:72:E8:38:67:5A:0F:39:6F:27
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498CFF1B3160FB7DF384FC9780
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ad54f154-c805-3de3-8529-cb8fd1832c11.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     203
IP address blocks:        216.240.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:1b:31:60:fb:7d:f3:84:fc:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=70de99b0-0e30-4e71-8f92-b3bb270af8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:b5:82:c7:ab:20:0e:3e:22:32:50:81:d8:
                    88:e0:83:8b:f2:9a:b8:3e:ed:0e:f7:9b:76:f2:e7:
                    3f:29:ec:12:af:02:e8:d5:d3:36:a8:f4:6f:c9:41:
                    32:68:b6:cf:5e:03:00:1f:a5:72:43:f6:96:93:42:
                    60:14:6d:fb:c3:1e:c8:2a:e9:10:63:35:f5:c5:7f:
                    9b:b3:80:1f:62:a9:c7:62:b8:6e:67:38:3f:ae:1b:
                    35:e7:d3:b7:b8:0e:40:ed:0b:0a:a6:3c:f1:44:51:
                    79:c8:63:38:58:0b:40:16:ae:57:36:e1:bf:3f:c4:
                    08:c2:2b:e0:64:fd:d2:e0:d1:e1:4c:8c:0a:c2:0f:
                    1e:83:3e:df:ae:ed:f9:c6:5c:67:17:12:91:95:2c:
                    3f:b7:70:88:0c:02:4d:da:27:09:aa:52:fe:50:8b:
                    7b:81:65:94:ab:8d:8c:d5:7f:ff:62:7a:23:56:7f:
                    d9:20:4a:2d:f1:1b:e8:c2:fa:6b:06:6a:c9:8c:b6:
                    93:d0:61:d2:bd:b3:76:06:5e:1e:2c:9e:4e:28:6c:
                    cd:bb:70:50:54:44:e4:1b:00:04:bf:e5:1d:82:50:
                    a5:39:c4:bf:88:99:a5:0d:6a:fc:37:b4:82:7c:b4:
                    8f:7c:d3:54:d4:bb:77:cc:54:5c:98:0c:99:af:3d:
                    6e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:34:DE:15:FC:AB:99:89:C2:82:4C:72:E8:38:67:5A:0F:39:6F:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ad54f154-c805-3de3-8529-cb8fd1832c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.240.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:32:62:e1:e7:1a:e0:b9:e1:69:d3:8a:bc:dd:61:ce:62:19:
         99:a2:f7:74:8c:40:e1:32:34:4d:38:17:37:52:44:7b:62:a3:
         dd:d0:56:26:4e:78:cc:b3:ad:32:87:a6:dc:c0:c6:4d:c4:07:
         b5:6c:64:ba:6e:6c:e6:10:87:d9:d3:2c:65:0d:83:be:c3:c2:
         62:35:88:74:56:53:d6:01:72:68:ed:45:b9:70:0a:ad:b1:1c:
         6f:2a:8a:1e:b7:57:ac:2e:19:83:0a:e0:cd:e5:cb:a7:4d:03:
         1b:ff:6b:43:b1:50:4d:a5:95:db:4e:78:6a:4d:ff:02:2e:f5:
         bb:7d:8b:d5:dd:0f:e4:75:4b:3c:a0:05:ab:4a:99:01:67:e7:
         44:29:57:fd:d0:39:3c:ac:cf:5a:cc:0b:30:f3:b0:e5:71:08:
         44:d4:bb:fb:b8:5f:a6:e6:16:09:65:1d:d4:9e:ac:4e:68:9d:
         1f:06:43:6b:f3:e0:da:61:56:92:f5:bb:1e:d2:2d:6f:55:2b:
         1a:69:e4:1b:12:b7:0f:cd:60:b7:b6:66:b7:b2:1b:44:17:dd:
         7d:a7:ff:65:3f:6d:9a:28:a4:c8:f2:c9:bc:29:80:cb:c2:ea:
         b6:d7:d9:53:2a:fe:26:81:33:1c:44:fe:f5:96:74:75:9f:4f:
         b2:93:cd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:28:51 2025 by rpki-client