Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d903d1be-2e76-3c59-8861-74065f00b534.roa
File:                     d903d1be-2e76-3c59-8861-74065f00b534.roa (raw, json)
Hash identifier:          +57hSfRdU/tRZWR8aGzAFM3BAjEAGxo3swUniHleVk0=
Subject key identifier:   52:86:5D:54:C8:BC:91:DF:FB:B0:77:64:19:D9:6E:89:22:DF:EE:B0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A3475AD65F62B7E11CB9500
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d903d1be-2e76-3c59-8861-74065f00b534.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     203
IP address blocks:        206.164.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:75:ad:65:f6:2b:7e:11:cb:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=d69d93c2-8973-4946-a84a-39ba192a4f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3f:32:31:99:91:95:e2:f3:1e:20:b9:bb:cc:
                    b2:05:1b:95:28:5e:e2:28:a1:5a:a4:ac:01:27:52:
                    0d:43:65:ff:43:63:2a:75:b0:a5:b4:54:8f:21:26:
                    fb:67:a4:e0:aa:f3:93:ba:c0:0b:ff:ac:57:8e:75:
                    ee:f7:5f:49:84:46:b0:2a:10:6b:46:28:f0:e0:da:
                    9a:ea:66:e9:2c:5f:1e:3b:42:80:67:a0:f4:ef:e1:
                    ad:fa:90:41:5a:fd:dc:48:5a:f3:60:5e:97:0e:c8:
                    ee:ae:1d:e5:70:02:0f:67:28:29:72:6f:62:2b:6a:
                    53:5d:c4:d0:0d:e5:dc:24:ef:02:b8:e2:2d:fb:65:
                    60:33:d4:68:6f:9d:9c:99:82:32:85:88:51:26:19:
                    b0:12:e8:fa:a1:a5:b8:79:10:02:5f:2c:a6:70:53:
                    84:15:84:16:9b:df:62:df:91:88:4e:37:ca:8b:17:
                    98:51:24:eb:8d:bd:c6:f3:1d:75:61:44:72:68:02:
                    32:3d:89:8b:9a:24:6c:d6:8d:e8:e5:7a:f7:9d:b9:
                    b3:27:5c:c7:61:24:8a:c7:24:34:29:2a:c5:a6:83:
                    e0:75:a0:e5:f1:5f:d0:fc:2d:47:5f:f4:c3:04:9a:
                    2c:32:f2:ef:cf:c7:f0:c5:ee:52:18:5f:d5:71:5f:
                    5e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:86:5D:54:C8:BC:91:DF:FB:B0:77:64:19:D9:6E:89:22:DF:EE:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d903d1be-2e76-3c59-8861-74065f00b534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c9:4c:0f:b5:4a:d9:f8:0c:7a:58:a6:37:15:16:7a:55:36:
         51:c2:a2:00:2e:6c:25:03:6c:6f:0f:28:14:38:66:e1:6e:db:
         68:b2:76:70:6c:41:bd:e5:8d:4b:19:c7:38:ed:35:2e:7f:28:
         ed:25:bd:e3:43:8c:23:21:28:02:9d:b1:23:88:f5:d7:bc:f8:
         1d:7c:f5:0e:fb:21:b2:f4:3d:3b:7a:31:f1:24:56:33:cf:cd:
         96:55:44:da:fb:c7:e9:28:25:82:62:5c:60:b5:fa:d9:b9:46:
         33:e7:d7:e5:9b:cb:57:5d:dc:96:35:b8:d4:e9:4c:97:53:55:
         f2:81:6e:d9:22:41:70:67:b9:5c:b1:38:54:95:78:69:ce:8e:
         a7:3c:62:d5:75:fa:cb:43:3d:72:8f:6a:ee:e0:20:16:0f:24:
         2b:b4:2f:6b:12:19:d4:38:ae:5e:cc:c4:83:b7:7d:06:03:5d:
         79:be:39:14:2b:06:11:5f:b8:f1:ab:71:c7:02:ae:cf:10:df:
         dd:d8:70:4b:5a:39:00:da:22:4b:01:f6:16:8c:d7:46:89:0a:
         06:04:d8:69:51:ee:29:83:46:1b:06:dc:7f:2d:53:7b:70:84:
         19:18:4f:5a:82:77:a9:40:d8:1e:f6:27:f4:5a:09:b7:52:86:
         52:41:67:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:11 2025 by rpki-client