Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cdc30a2e-69cb-3693-a4c5-4e562ac7d9f4.roa
File:                     cdc30a2e-69cb-3693-a4c5-4e562ac7d9f4.roa (raw, json)
Hash identifier:          NJpJSRGm8Mydy7VQJT+kQkqJya+6jUkbt0i4dW7FO8U=
Subject key identifier:   25:BB:DE:83:FD:04:2C:87:D2:E6:A9:D9:41:6A:6C:B1:D4:BD:15:1D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498CFF1B000F8849AAAB3CDA80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cdc30a2e-69cb-3693-a4c5-4e562ac7d9f4.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     3360
IP address blocks:        216.240.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:1b:00:0f:88:49:aa:ab:3c:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=fb55c448-1d5b-4d81-87ba-83149a1e6535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b3:13:34:a5:60:34:13:9a:fe:15:99:e7:49:
                    35:0d:83:ab:14:ac:8a:d0:04:43:37:3c:12:de:86:
                    43:b7:17:d8:a6:7e:a9:5f:2f:6a:e3:01:a2:fb:f1:
                    73:91:8f:c0:2f:dc:a7:06:89:67:8a:94:de:5e:d7:
                    ec:a3:8d:34:ed:3f:d5:cb:fe:67:34:71:b7:a9:a4:
                    dc:04:7a:08:c8:6f:77:10:a8:f4:c3:a5:14:26:f6:
                    b0:a8:78:c9:cb:bb:07:8a:1c:5f:01:70:63:fe:03:
                    48:09:eb:32:d4:22:99:24:ad:02:e0:cd:b8:2f:43:
                    37:ba:87:23:d7:b8:96:c8:aa:bf:97:a8:43:c7:a2:
                    6f:ae:f9:4f:d4:f8:72:6e:69:92:74:84:d1:c8:01:
                    8b:9d:c3:52:51:25:55:d7:11:37:50:68:6a:63:10:
                    08:f9:c2:30:38:38:f7:30:1c:39:fb:06:f2:91:ef:
                    8e:12:61:3b:b5:0c:ce:40:5b:d3:00:ce:8d:ec:fb:
                    9e:bf:65:fe:13:fb:2d:fa:14:92:ce:1e:e1:73:63:
                    97:06:b5:a5:31:b5:6a:55:da:7d:47:42:51:ad:3b:
                    82:7c:06:cf:1a:de:3b:46:91:3c:79:26:0e:92:11:
                    70:f2:82:36:c9:aa:3c:ce:1d:48:67:9a:57:da:b5:
                    35:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BB:DE:83:FD:04:2C:87:D2:E6:A9:D9:41:6A:6C:B1:D4:BD:15:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cdc30a2e-69cb-3693-a4c5-4e562ac7d9f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.240.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ef:2d:95:21:9c:d6:60:18:fa:04:fa:95:cf:7d:2c:b8:80:
         2a:6f:de:46:3d:53:fd:06:e1:4c:e3:dc:fa:86:87:e9:79:6c:
         12:2d:7d:b5:72:9c:78:7e:a8:12:0f:4a:bb:9a:65:d0:42:c4:
         db:c0:97:80:b1:cc:83:51:ec:d7:9b:53:7b:13:33:0f:52:ed:
         f6:68:d8:f7:04:82:cc:a1:f7:c3:5c:7b:47:c8:a3:39:38:97:
         11:cd:ed:82:50:2b:2d:66:33:b4:28:be:62:80:91:3f:92:24:
         d3:56:c0:9f:89:08:fb:9e:ad:63:c2:1e:9f:e9:72:8c:2b:7d:
         e5:6f:95:50:45:31:be:7d:5e:fc:57:4d:e7:d7:24:09:1e:ac:
         bb:fa:77:4d:36:5f:0e:f2:58:97:a8:28:9f:73:57:71:2c:a7:
         b6:2c:7a:69:fc:03:55:ae:80:93:4b:56:86:41:3d:db:ae:01:
         60:0b:49:43:62:57:25:26:42:02:85:f8:06:da:f3:44:4f:40:
         66:62:be:73:e0:55:0f:07:9c:ae:30:53:b9:40:17:db:d0:d3:
         d5:82:4e:61:7f:a9:13:e9:52:e4:52:17:12:48:49:73:90:10:
         d8:de:14:78:de:07:5e:28:fe:7d:46:c4:b4:14:63:4e:9e:3f:
         94:c8:d2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:19:44 2025 by rpki-client