Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c4208cb5-cbac-37d8-9a6c-00c292193361.roa
File:                     c4208cb5-cbac-37d8-9a6c-00c292193361.roa (raw, json)
Hash identifier:          aChkLaJBK3taaR55SKxv0YhStJQPUq0fXP4Dmp3qDQE=
Subject key identifier:   E8:2A:1F:B9:95:3E:34:B7:95:17:DF:C4:15:FA:74:A5:10:D4:52:4C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A3469076E89C33AFACC0C20
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c4208cb5-cbac-37d8-9a6c-00c292193361.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     5714
IP address blocks:        199.228.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:69:07:6e:89:c3:3a:fa:cc:0c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=4b0f7ed3-221b-4ded-b442-bba1d7534c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f1:e2:3c:53:b5:c1:ea:3d:70:bf:57:c6:05:
                    dc:bd:ca:44:9c:64:ea:40:b5:ff:6f:b4:66:91:49:
                    6b:13:fd:16:65:38:21:ad:21:7a:ff:14:93:0a:11:
                    70:30:db:ca:3c:5a:ea:03:cd:92:c5:f7:9c:ed:00:
                    89:4a:2a:30:76:b7:9b:ae:5a:72:cf:79:b5:71:81:
                    1f:b3:d1:6e:c7:d4:69:00:19:d5:33:5b:42:a0:94:
                    1c:42:00:85:fa:eb:e2:db:b2:2f:64:9a:7b:91:15:
                    7d:6f:b8:79:2a:86:f0:dc:d1:69:2d:ae:b5:1c:bc:
                    58:41:18:59:1a:8b:9c:4e:09:5a:2c:77:75:89:d6:
                    bf:c9:41:c7:66:a7:14:fa:2f:80:df:e2:a6:75:34:
                    06:33:76:e6:7e:4c:62:c0:4b:6d:69:00:47:75:59:
                    58:11:78:da:a4:b8:dd:64:a8:06:33:96:35:fb:9e:
                    6c:b1:a2:f9:c6:93:7b:57:07:7c:b5:6a:87:3b:4b:
                    ee:98:ff:31:46:51:c0:55:7d:16:57:70:b8:0e:b8:
                    26:89:d9:13:27:bd:2a:b6:1d:f9:f6:02:3f:3f:59:
                    ff:19:7f:be:9c:8e:b1:50:85:78:04:44:9f:d0:e7:
                    4b:86:f6:63:28:cc:cb:fe:cd:b3:64:af:0b:10:f1:
                    6d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2A:1F:B9:95:3E:34:B7:95:17:DF:C4:15:FA:74:A5:10:D4:52:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c4208cb5-cbac-37d8-9a6c-00c292193361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.228.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:8f:fb:c1:d4:40:8a:df:64:92:b1:87:f7:04:3a:fc:a6:2e:
         74:2d:8c:62:47:ba:9c:9b:61:b3:2d:5f:0c:6e:51:8c:2e:09:
         ec:e8:9c:3e:e2:23:a8:b5:5e:e5:30:4e:f4:32:59:42:63:63:
         d5:74:f1:e5:36:e4:cf:e3:25:41:58:3e:1b:a4:2c:75:2c:a3:
         e0:a1:75:00:c0:92:e3:2c:c4:dc:04:9a:1c:31:85:1a:f0:d2:
         18:f1:6e:bb:c0:a1:6f:f9:4a:7f:ae:46:03:bd:69:66:7d:98:
         32:3c:ed:dc:2f:9a:43:d6:c8:f4:e0:8b:76:a3:8a:9b:4f:8f:
         b6:d8:c8:f7:09:f7:22:12:5e:27:45:69:a7:37:e1:4a:d2:fc:
         d2:6d:7d:69:a1:66:99:31:e5:22:0a:18:5a:72:e9:3d:ae:1d:
         54:b8:2a:a7:28:22:0b:f7:5f:2f:43:8c:1d:a2:31:ce:8a:8b:
         fc:42:3f:42:8e:4a:f7:80:d5:d4:5a:c9:16:aa:81:b1:1c:1c:
         50:2a:15:9d:33:f9:bd:a6:28:3d:69:44:98:4c:9e:95:67:5d:
         5f:20:23:af:d4:57:f5:c0:2f:90:23:94:68:f9:fd:22:8b:4a:
         b0:de:65:02:27:4d:20:e4:46:fb:79:d8:6e:1d:c3:a2:56:6b:
         5b:f6:bc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:52:12 2025 by rpki-client