Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fb4d1bff-f4be-36e9-b9f8-cdabbde53870.roa
File:                     fb4d1bff-f4be-36e9-b9f8-cdabbde53870.roa (raw, json)
Hash identifier:          jQNuCLs8bLna0jjtv+3HQwifqG3VqEyjtZJInpBxJTs=
Subject key identifier:   93:DE:22:DB:E3:94:8E:39:2F:49:4D:D5:40:87:99:0C:BF:13:F7:A0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A347227E233A86B6D296280
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fb4d1bff-f4be-36e9-b9f8-cdabbde53870.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     202
IP address blocks:        205.141.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:72:27:e2:33:a8:6b:6d:29:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=d0967a73-c8a3-48b3-9ca6-3aae95a261a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:aa:38:6c:ce:59:b4:26:67:78:af:04:45:
                    9b:51:58:06:5e:72:26:d9:52:e5:b2:11:2d:69:aa:
                    ec:16:24:90:36:17:d4:a8:ae:a5:1f:b2:ad:b1:c4:
                    47:f5:de:48:bb:30:74:c9:d7:17:40:f0:2e:88:b1:
                    c9:88:c0:29:ac:9f:91:5c:eb:62:82:cd:8d:21:d1:
                    5a:e8:ee:41:03:fe:61:b7:45:07:ae:16:2e:e7:5d:
                    8b:e9:8f:46:52:4a:99:f0:0a:13:3b:d3:2e:29:f7:
                    86:3e:4e:67:d4:f1:f3:08:bd:6c:4a:b0:98:28:6e:
                    a3:1e:57:6e:06:24:14:6b:e0:9e:04:f1:c8:41:e9:
                    33:07:b7:5c:04:e3:0c:ef:fd:56:50:72:48:4c:e8:
                    e3:a2:61:95:43:e2:52:eb:b0:0b:dd:08:f8:6c:fc:
                    e8:3d:c6:70:bb:43:d5:90:00:83:1f:0a:6e:8b:08:
                    de:89:46:0b:ae:27:31:de:53:57:42:a5:1a:0b:4a:
                    56:50:9e:26:cd:4f:3d:b4:68:72:94:10:16:c3:81:
                    5a:1f:8d:9c:e6:30:30:09:b2:11:60:63:e3:b9:75:
                    d4:db:9a:69:6c:c5:f3:f9:a5:8e:1f:50:5b:66:a5:
                    69:2d:1b:01:1b:82:6f:97:0d:68:ea:8e:1a:68:f4:
                    27:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DE:22:DB:E3:94:8E:39:2F:49:4D:D5:40:87:99:0C:BF:13:F7:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fb4d1bff-f4be-36e9-b9f8-cdabbde53870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:56:dc:41:eb:df:58:ee:ce:e8:f0:73:32:69:68:a5:1a:1b:
         35:50:8f:f9:81:b7:cf:33:cc:ca:a9:f5:6a:f8:f3:dc:ca:71:
         27:0b:46:e5:15:f4:96:1b:ca:16:52:24:6e:be:39:7e:63:b8:
         72:b8:f1:bc:ea:d2:67:5b:c5:60:bf:f0:f2:63:38:7b:7c:63:
         a5:52:5d:fd:5e:35:47:90:10:58:8b:4a:e9:21:ed:d7:04:2f:
         8c:8e:6c:aa:50:5c:dd:2c:e8:dc:7d:4e:7e:69:ff:7d:76:f5:
         2d:9c:e4:76:84:1a:68:e1:40:da:fd:09:e7:96:eb:c6:4c:de:
         43:a7:a8:ea:0a:f3:bd:aa:6a:56:d1:a1:e9:ed:d8:a7:16:77:
         d3:6f:47:9e:f6:0c:c9:8c:1b:b7:89:06:51:63:b6:43:0a:e1:
         35:2f:d7:08:f8:f4:04:70:b2:3f:36:dd:41:d5:3b:43:f1:d7:
         1c:78:90:a0:d9:d6:e8:43:6b:de:28:8f:88:85:5b:2e:40:70:
         08:b2:0f:62:c9:89:90:c8:23:58:3e:6e:33:6b:b9:9d:98:2f:
         a1:14:4a:1e:dc:3a:42:30:23:60:8b:e0:3b:d1:7c:f5:60:df:
         04:ec:39:4d:42:da:36:19:f3:79:b0:84:b9:ff:bb:a0:95:d0:
         53:c6:3a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:07:36 2025 by rpki-client