Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ca49f919-aa8c-3107-bed6-9503a6755010.roa
File:                     ca49f919-aa8c-3107-bed6-9503a6755010.roa (raw, json)
Hash identifier:          tCT9TDU8jI2/s5MGXTVHq+7xG84mdLpcYbmYAOP1eTw=
Subject key identifier:   DC:E2:F1:03:D5:C9:AA:57:55:74:F4:22:8F:D4:F5:1A:87:B1:CA:E8
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A34741CCCB4E61646BD9440
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ca49f919-aa8c-3107-bed6-9503a6755010.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     3356
IP address blocks:        205.141.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:74:1c:cc:b4:e6:16:46:bd:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=d9eaa6d8-458c-40ca-868c-e5ffece772bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5d:13:ee:2c:18:28:fb:f2:c0:0d:5e:53:77:
                    3c:53:60:69:9a:61:d5:40:49:6b:fc:67:e6:7a:97:
                    24:7b:ca:2b:c0:4c:ce:3f:d8:af:59:c2:3e:5c:c9:
                    6c:1f:79:a0:ab:a5:3b:b6:8e:28:02:a2:d8:88:61:
                    99:8e:b5:df:7f:50:af:f6:0b:19:5a:60:e3:ce:03:
                    db:33:34:7a:af:98:89:00:d4:54:36:42:ef:c9:d4:
                    6d:f4:b4:37:3c:64:c4:25:14:04:aa:b4:7c:28:e2:
                    c6:d1:4e:de:ef:8f:23:9d:ad:37:57:9e:00:2e:7c:
                    3f:7f:6d:04:d2:52:3e:54:07:d6:ae:d0:2e:7e:73:
                    63:3b:45:4e:f8:b2:af:3f:c8:64:70:01:f4:8e:f1:
                    92:9c:e8:00:90:af:4e:45:13:c7:31:d0:05:0e:5e:
                    6a:4e:89:e2:ae:0b:ec:ff:53:89:12:2c:6a:64:f5:
                    d9:2d:9e:8d:b2:77:3e:b2:3c:e9:52:37:35:83:bf:
                    fd:19:fa:d8:b3:0f:29:27:8b:56:21:e0:d3:c8:9d:
                    f3:f6:8f:eb:42:8f:51:df:87:5b:2b:be:24:da:1f:
                    39:a2:bb:58:c1:a2:ed:2f:52:71:8a:65:ad:a2:8b:
                    1c:cc:4f:57:a9:92:67:b1:f2:c4:84:39:3f:b3:f7:
                    63:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E2:F1:03:D5:C9:AA:57:55:74:F4:22:8F:D4:F5:1A:87:B1:CA:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ca49f919-aa8c-3107-bed6-9503a6755010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:47:d9:78:66:ba:ff:cc:e3:57:6c:bf:9e:e6:bb:10:3d:94:
         36:50:da:e9:89:a6:5e:29:c5:52:c3:0b:7e:50:51:7f:de:78:
         53:06:03:e4:bf:26:7e:31:41:ff:c7:78:b6:55:ef:64:ca:9c:
         7b:9b:7b:18:79:1c:58:08:36:19:40:b4:35:81:f9:ff:75:d1:
         82:91:9c:7a:9f:45:11:75:bd:be:e0:69:ba:e9:7b:72:e1:37:
         93:e4:05:f5:a5:b1:9a:6c:9f:17:51:09:f9:1c:38:c3:d2:49:
         36:b7:c6:bd:af:55:f9:bd:0b:22:d8:64:ce:ca:33:c8:65:bb:
         b6:d6:90:4b:0f:05:b6:a2:21:cb:05:c6:55:9d:d6:f3:31:01:
         87:5d:a9:03:bf:3b:b1:34:7a:4f:65:ca:84:0c:76:8e:79:bb:
         ee:61:c5:b0:e2:b4:d4:8e:2e:0c:a5:9a:63:d1:ae:3b:c7:e6:
         a4:95:53:71:94:ba:be:76:52:79:ce:30:b2:09:f2:42:f6:ce:
         03:5b:a9:94:54:22:c7:9d:f5:23:54:dd:82:cc:b5:29:ff:d0:
         2c:ec:0e:d0:10:c5:4d:93:24:d6:5a:9c:ad:fb:1d:cd:b9:0a:
         8f:a9:c9:9e:2f:97:71:38:4d:9f:d9:6e:31:8f:d9:25:2a:27:
         01:28:5a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:27:08 2025 by rpki-client