Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fd99a413-23b2-3844-91db-e7249f85b48a.roa
File:                     fd99a413-23b2-3844-91db-e7249f85b48a.roa (raw, json)
Hash identifier:          8rGRhea6cLMAJnG4e5QyA/LfViEVHhSYopd8wibgALU=
Subject key identifier:   26:B6:5F:A6:A0:D1:2B:3E:5A:6A:35:31:BF:81:BB:CD:CC:DB:64:B7
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A3466FB3943C689AB632480
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fd99a413-23b2-3844-91db-e7249f85b48a.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     202
IP address blocks:        192.85.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:66:fb:39:43:c6:89:ab:63:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=bf1670cb-7230-4858-b296-7bcefee63447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:90:63:45:f1:f8:94:3e:32:1d:90:29:4e:
                    3e:8c:97:73:ae:1c:ef:1a:d6:7c:42:e0:8c:1a:ee:
                    f9:e6:c0:79:04:e7:91:04:2f:d0:9a:44:8d:85:6e:
                    27:d2:e9:78:25:d1:ef:3a:bf:06:d5:08:75:db:e7:
                    c7:b1:c9:c5:8c:17:22:53:a1:36:ee:24:11:a3:98:
                    f6:e4:61:9e:e1:8f:94:20:fa:e1:a4:f6:2d:f0:61:
                    47:2d:19:fa:15:23:51:db:dd:2c:d5:04:e3:8b:b8:
                    a2:25:8d:6e:c7:c7:d4:b2:27:4c:80:a0:1a:29:cc:
                    ea:5d:53:5c:a6:50:71:79:f8:68:f6:cf:af:b6:4c:
                    60:ac:c6:23:9c:39:50:e0:d8:88:63:f2:74:a6:26:
                    81:83:8a:d3:37:e0:9d:66:40:8d:4a:88:67:28:2d:
                    e7:2b:dc:4b:0e:1c:2b:38:a0:01:f1:1f:62:bc:58:
                    09:43:05:aa:72:81:b5:cc:fb:a8:67:de:c8:82:80:
                    c6:23:19:c9:d2:1f:b5:ff:7c:ea:30:c3:bf:80:4b:
                    d9:d0:98:3e:d9:80:46:c4:7b:48:4a:76:5b:a8:ef:
                    6e:81:de:e5:8a:76:86:d4:b2:b0:e1:a4:0b:c1:d2:
                    44:f3:83:d8:f5:da:bf:ec:c1:06:f9:f2:3e:61:c7:
                    15:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B6:5F:A6:A0:D1:2B:3E:5A:6A:35:31:BF:81:BB:CD:CC:DB:64:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fd99a413-23b2-3844-91db-e7249f85b48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:61:e4:6d:94:31:be:e4:3f:58:a6:7a:a1:f1:f4:ca:6c:2e:
         b9:e6:ad:f2:a3:a6:88:10:69:ac:0d:2b:d5:66:d4:a5:76:aa:
         81:f0:a5:71:08:71:ee:73:c6:47:da:35:57:45:ff:9c:e2:47:
         72:01:c4:b7:6e:4a:74:d3:c8:55:e1:3d:ce:4c:f6:fe:63:56:
         5b:41:8b:71:5c:28:c0:6c:c2:4a:86:75:a8:e2:5e:15:9d:e4:
         57:14:5d:f0:98:59:7d:23:4b:69:fc:49:cb:b9:57:72:f0:c9:
         81:18:04:bb:e1:01:25:1e:3e:de:62:6d:b7:43:50:06:f9:08:
         8b:c9:2c:93:61:76:fb:9a:8f:84:37:01:4e:b7:92:1a:70:52:
         87:a9:7b:b1:78:7d:95:6e:d1:ed:b6:24:75:8d:d6:69:e3:db:
         2c:46:74:62:5b:e5:07:38:17:21:4c:80:37:ac:da:cb:94:74:
         53:c7:68:34:4b:05:ca:19:fb:2c:82:81:49:16:99:9c:53:05:
         72:8f:e1:24:38:f8:34:d4:bf:d5:bd:08:8c:ab:84:35:23:96:
         ad:0e:6b:f4:d7:bb:21:88:96:c5:b0:5c:63:1a:a9:4d:8c:53:
         5a:e2:46:85:65:4d:a2:01:05:60:76:10:c8:69:df:ae:96:77:
         93:d2:9f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:06:15 2025 by rpki-client