Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f22f5c8c-d07f-3466-ad35-6e64098165e6.roa
File:                     f22f5c8c-d07f-3466-ad35-6e64098165e6.roa (raw, json)
Hash identifier:          k9xL5PxNy2YNiIULnDH7fsikhMhLZVke+v+8Lo0FwZQ=
Subject key identifier:   C7:D2:B7:A1:BA:C7:14:04:29:C6:0B:82:C2:24:5E:4E:95:3E:FA:F5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A346EC2E4C61FD2D6D974A0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f22f5c8c-d07f-3466-ad35-6e64098165e6.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     203
IP address blocks:        204.104.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:6e:c2:e4:c6:1f:d2:d6:d9:74:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=a8649a72-103c-42ba-a915-68bc01f575aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:4f:12:9d:9d:91:31:99:ba:0b:90:d9:dd:
                    8a:5d:04:bc:f0:e1:ac:f0:06:3f:02:20:94:91:f7:
                    51:14:0e:5e:fc:c4:6a:23:a4:7a:e8:34:a9:de:10:
                    08:a3:56:c1:61:4d:c5:0d:22:b8:e0:d1:e5:76:e0:
                    42:6a:8b:7a:0f:17:e0:79:bf:b7:a4:6f:21:66:29:
                    25:29:ca:6a:50:37:e7:b6:43:78:f9:de:73:30:b1:
                    e9:97:93:57:3c:09:0b:bc:8f:2b:18:1d:10:c2:7e:
                    88:c2:e1:74:27:27:ea:c1:f8:25:61:c9:70:77:42:
                    ef:67:92:8b:be:ea:ec:7e:66:22:bf:39:41:10:1b:
                    7c:44:30:a4:4b:e2:17:7e:28:85:13:f5:2b:56:63:
                    66:a4:9e:d2:c0:52:f5:31:9c:23:c4:dd:5c:15:ad:
                    50:20:2d:f3:68:95:e2:84:fa:21:a1:8e:85:09:8f:
                    af:b7:5b:78:f9:75:11:59:0b:07:e3:e8:39:8c:97:
                    7b:95:37:4a:db:e5:ae:4a:ac:6b:70:e1:36:58:c8:
                    f7:5a:4c:bc:cb:7c:62:8e:99:04:52:16:d4:2f:3d:
                    e8:6d:f1:19:44:37:12:da:59:47:bc:fc:d2:a7:b0:
                    1d:bc:4d:da:62:66:e9:43:bb:9c:94:a9:0c:3c:8c:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D2:B7:A1:BA:C7:14:04:29:C6:0B:82:C2:24:5E:4E:95:3E:FA:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f22f5c8c-d07f-3466-ad35-6e64098165e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:14:06:e0:81:39:d3:91:d9:fd:0e:87:a6:2f:85:0c:cc:59:
         66:9c:07:69:97:f8:dd:af:2d:f6:ef:06:71:32:bb:d7:4d:67:
         33:62:0e:f1:96:c7:36:c3:5f:9a:8d:5f:9f:c3:b9:e4:a3:0f:
         f1:8a:04:80:3f:4f:6c:98:8c:1e:ce:fd:97:5b:60:ea:8a:d3:
         1a:d4:4d:d3:ef:b2:a0:2c:a7:4c:81:4d:71:c6:09:3b:13:79:
         d3:7d:1a:d5:55:a1:4f:ac:e0:fc:d5:77:c7:fe:ee:e5:4a:3d:
         f1:3f:e3:0d:de:32:6a:49:90:53:34:c1:d0:32:4d:71:4d:92:
         f2:57:ae:cf:fa:56:cc:45:fb:ab:e1:59:d2:ef:50:ac:bf:4e:
         68:52:9c:c0:49:16:21:dd:08:72:5c:3a:a5:41:9b:fc:ab:ad:
         f8:00:9d:b8:90:33:e8:49:ea:8f:a6:a0:bb:58:13:a3:dd:a8:
         76:bb:ee:9f:89:b7:0e:76:41:bc:d6:34:58:53:8a:52:a2:db:
         63:ae:d2:a2:d4:89:13:1c:d4:da:93:c6:16:72:b6:92:3b:a8:
         8a:53:76:fe:55:08:cf:b8:1a:32:47:ff:76:c2:08:87:7c:e7:
         38:86:9b:80:79:bf:70:fe:6b:b4:4a:f0:40:19:f9:5d:f4:53:
         4e:13:1b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:30:39 2025 by rpki-client