Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4e902ef-3861-3de8-9e6b-51aa1b246987.roa
File:                     b4e902ef-3861-3de8-9e6b-51aa1b246987.roa (raw, json)
Hash identifier:          cF0iBDUTPFGu27+H19MZ2q3YPiyLywtaL0RR6TAUeGM=
Subject key identifier:   82:77:17:35:EC:CC:22:87:3A:B3:24:47:84:F1:E0:3D:62:22:38:D9
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A346234D21B3EABFB2A0E00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4e902ef-3861-3de8-9e6b-51aa1b246987.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     3360
IP address blocks:        192.57.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:62:34:d2:1b:3e:ab:fb:2a:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=387e7b00-4dd1-41a1-a992-adb620488fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:e0:62:98:63:76:88:0e:43:1e:90:84:04:
                    89:26:47:d4:be:73:68:b4:79:5b:84:a9:97:bc:6d:
                    f9:80:69:39:99:6f:55:32:2e:c5:ef:e7:87:b9:ab:
                    5f:79:61:e9:04:8f:65:77:9f:b4:86:7e:27:d3:33:
                    11:2b:d2:78:a2:aa:6f:6b:94:9d:fb:d4:cf:8d:d0:
                    cd:3f:62:78:b5:44:be:9f:1e:98:19:5e:d9:e5:0a:
                    52:c9:01:a5:8d:ec:60:83:7b:c1:9d:0b:d9:7c:2e:
                    a8:f7:e7:d3:d2:65:cb:7a:25:c3:41:be:07:a8:a8:
                    2b:14:16:57:c2:60:ac:a8:de:16:f5:7f:77:eb:75:
                    c8:12:b1:3b:45:ba:df:2a:c6:7b:e4:3a:6d:90:52:
                    df:ac:63:68:aa:37:7c:56:9d:11:1b:31:c2:f3:8e:
                    21:14:f5:d7:ad:dc:9d:e0:8e:41:fb:74:08:64:c3:
                    2e:10:94:69:ea:52:b5:9e:95:67:a8:dd:90:d4:c6:
                    c5:3d:ef:6d:52:f6:45:8e:cf:24:a3:94:76:e3:3d:
                    f9:ce:3b:e5:7f:f7:b7:b1:c0:fb:44:2b:e0:a8:f2:
                    33:83:6e:81:54:19:b1:c5:58:c5:f9:38:ed:dd:63:
                    98:c0:49:df:11:98:4c:68:db:3f:86:16:47:fd:a1:
                    0a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:77:17:35:EC:CC:22:87:3A:B3:24:47:84:F1:E0:3D:62:22:38:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4e902ef-3861-3de8-9e6b-51aa1b246987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:62:e4:56:f1:56:07:f9:78:5b:64:89:e8:75:af:7a:3f:8a:
         4d:19:07:e2:3c:ab:5d:66:16:4d:21:f1:05:9c:f3:1f:98:f7:
         e9:2c:93:f4:fb:3c:f8:32:31:57:d9:13:65:ae:b7:87:f8:64:
         8f:8e:2d:9b:28:14:b5:b7:73:77:37:58:25:b2:21:46:60:63:
         6d:82:58:8e:48:c3:6f:96:85:fa:23:21:58:ab:19:e9:03:81:
         d6:b8:aa:3a:dd:b2:74:69:8b:44:3a:65:bf:90:dd:8f:38:34:
         05:45:c1:16:7b:f9:7d:99:55:41:14:26:c1:83:65:70:ea:24:
         35:45:2a:dd:bf:ed:19:77:9e:c9:dd:99:32:b6:d1:13:6c:a2:
         ac:dc:fa:03:19:17:6f:14:2f:e7:6d:3d:d5:80:60:b9:43:af:
         03:9d:a6:81:85:65:0a:a2:cc:00:68:62:df:23:ec:e0:64:d0:
         b7:d6:b4:c4:4d:51:3c:bf:9d:ba:ac:37:6b:97:d3:65:17:b7:
         0c:66:98:28:44:0e:7a:eb:61:e0:b8:e2:d6:c9:87:64:55:b0:
         3d:35:f3:8a:d7:06:da:d5:b3:db:07:19:46:4d:5a:a2:16:da:
         15:bf:86:62:f5:bb:a1:17:2f:ec:53:54:be:7e:c0:a5:4d:b9:
         ff:88:e1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:06:33 2025 by rpki-client