Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f20c6d23-438a-358a-9615-5dfa783e4571.roa
File:                     f20c6d23-438a-358a-9615-5dfa783e4571.roa (raw, json)
Hash identifier:          l0gNyMjBrgck8MrPbDAdPwaUYyoxOyMVqgYEV+9Drdg=
Subject key identifier:   9E:BE:39:E1:36:0E:30:30:87:78:0C:8E:39:DC:CF:A0:F6:37:2B:17
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A34712100EDBBB9A9F0E800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f20c6d23-438a-358a-9615-5dfa783e4571.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     5714
IP address blocks:        205.141.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:71:21:00:ed:bb:b9:a9:f0:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=8106005f-5dd6-4c84-80a6-15ece6094d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:b9:35:49:d4:9e:c3:f5:ca:62:62:c8:32:
                    e8:70:ac:e9:09:30:f1:5f:8e:f8:2d:a6:cc:b2:03:
                    1d:05:5d:34:78:80:8d:1b:ca:c4:a2:53:42:d6:3f:
                    6e:f4:d1:bf:86:2c:76:b6:f5:29:19:28:8a:48:6c:
                    8b:81:db:4e:e3:a9:05:66:2d:80:cc:a6:7f:24:dc:
                    45:db:c4:81:05:cd:55:27:b1:0d:62:f5:5c:04:52:
                    72:2e:cc:52:07:6f:1a:42:3c:c2:8f:8c:8c:f9:60:
                    50:45:b0:79:dc:36:a6:6f:ae:e5:5b:df:da:69:2f:
                    d7:4b:8a:7a:2d:bf:dc:b7:e5:5a:2b:56:7e:06:56:
                    8d:dd:79:6f:e3:31:7a:7e:dc:86:9d:b4:36:2e:b8:
                    44:92:80:97:52:0b:fa:04:9d:66:20:1c:8d:78:62:
                    84:75:57:79:0e:8e:89:a0:70:2e:66:88:13:d4:3c:
                    27:94:bf:3f:76:c4:f1:6c:b7:10:8a:d2:7d:0e:4a:
                    af:a6:0c:ba:56:a7:80:88:f2:98:de:3e:c2:68:a4:
                    53:3b:a3:45:64:57:82:26:d5:00:43:23:d2:8a:1e:
                    18:3e:69:3a:ac:92:6b:3b:e0:25:7a:3f:3f:ba:25:
                    b1:ba:ff:8d:71:92:18:d6:30:7d:24:3d:9e:b9:89:
                    22:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BE:39:E1:36:0E:30:30:87:78:0C:8E:39:DC:CF:A0:F6:37:2B:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f20c6d23-438a-358a-9615-5dfa783e4571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:bc:9a:9b:89:d3:67:bb:5f:a4:77:99:69:f6:60:f1:ae:0f:
         20:5e:97:3c:d5:55:bd:9f:81:bd:78:d4:a3:4d:20:fd:fa:f6:
         30:e9:d7:d8:36:d6:d2:33:0a:35:b0:c5:a4:19:22:ad:14:a4:
         78:ba:c0:00:4c:0c:7a:b4:6d:d5:b4:80:13:f6:af:8b:af:09:
         6d:6d:03:7a:c4:a1:05:8c:53:7f:8a:eb:19:ee:67:fe:85:cb:
         cf:4e:63:9f:f3:e5:66:40:68:09:6b:8c:23:13:46:68:e8:61:
         17:37:26:ac:0e:e9:72:28:8f:bd:b7:4f:78:d9:9a:6c:e6:74:
         65:82:21:ab:54:57:f5:2c:fe:a1:b8:e2:4a:a2:d5:91:69:a2:
         15:f3:32:63:0a:6b:6c:d0:fb:c4:f8:f1:fc:24:94:ed:52:3f:
         b4:ab:de:de:2e:47:8b:27:a8:0a:5d:fd:e8:fc:dc:7e:d2:db:
         51:54:2e:d2:db:1a:50:e7:58:d5:bd:38:be:bc:d6:82:05:1c:
         16:43:d8:b1:42:3c:22:e8:96:df:a0:b9:de:7b:56:12:4a:b4:
         65:a7:d5:f8:fd:50:bd:7a:93:23:29:2e:69:19:c1:42:c4:4f:
         af:37:83:28:aa:ba:d9:61:2e:44:93:ee:02:a2:0c:c8:9b:c1:
         c8:3b:af:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:10:59 2025 by rpki-client