Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fdcfffb1-a77d-3440-b483-416848e118a5.roa
File:                     fdcfffb1-a77d-3440-b483-416848e118a5.roa (raw, json)
Hash identifier:          3dP6oM24hrOPEs3EN52RqNFnBYDwbG3ggX9ZxTLhj/g=
Subject key identifier:   42:D5:E2:16:C7:B4:E6:B3:76:61:A1:8D:D3:B1:2C:9E:01:E5:22:EA
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A346A2E591ECEF3D75A6300
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fdcfffb1-a77d-3440-b483-416848e118a5.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     5714
IP address blocks:        204.104.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:6a:2e:59:1e:ce:f3:d7:5a:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=4355e6c3-52e9-497b-8108-29e0d6b8bce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ac:e1:f6:d6:b6:bc:b2:40:d4:bf:8e:f0:ea:
                    ba:0f:9f:9c:15:fe:78:ee:12:d0:4a:40:79:a2:e4:
                    4f:9b:5b:e3:7e:ad:e6:9e:01:7c:76:a0:dd:ea:e8:
                    2c:5c:c9:92:a2:80:13:3f:df:2a:fc:74:8a:b8:dd:
                    8f:68:ce:de:3b:ba:d1:1e:6d:d2:ba:98:66:ea:65:
                    da:c3:a8:83:7b:aa:97:f2:2f:c7:82:b4:af:34:b5:
                    dd:63:8c:12:32:bc:c9:be:1b:00:5c:4f:d8:39:c7:
                    8d:61:78:c6:55:0b:2d:59:c8:1b:e8:3a:af:29:49:
                    ec:9e:bd:f3:c5:81:ff:10:49:f9:ca:e6:97:1c:a7:
                    2f:38:7b:07:ac:85:81:37:87:46:ac:1e:30:57:63:
                    f3:cf:27:6d:06:88:d6:b3:1c:45:db:d2:09:bb:73:
                    4d:bb:06:03:11:c8:84:69:06:d7:3a:b5:b2:da:bc:
                    d6:32:c7:a4:27:48:11:83:b3:8a:81:69:9a:d9:99:
                    0b:4e:1a:48:ca:ae:bd:74:df:80:e3:6a:27:7f:9e:
                    9e:ce:2d:44:8a:c0:27:a5:9d:4c:89:c6:8a:5a:7d:
                    5f:8c:85:90:7a:81:f1:30:91:3d:a1:42:f2:30:c0:
                    fb:5b:3c:4f:af:54:d1:ac:68:c8:eb:44:e6:dd:d9:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D5:E2:16:C7:B4:E6:B3:76:61:A1:8D:D3:B1:2C:9E:01:E5:22:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fdcfffb1-a77d-3440-b483-416848e118a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:fd:4e:72:f3:cf:3d:04:40:06:ae:9b:63:c1:7a:48:83:c3:
         52:15:8d:4b:36:ef:a7:d3:60:b7:7f:34:7e:f5:c9:96:92:30:
         97:50:67:c1:79:3a:fd:63:4a:f2:f7:b5:fa:59:eb:3d:63:22:
         31:96:8d:5d:f9:5d:28:46:49:4f:57:3e:fa:15:62:85:2d:8a:
         07:c8:21:52:38:b7:e1:1f:e8:b9:06:a7:21:6f:ea:bb:80:03:
         22:6e:91:6c:a9:72:87:06:e7:c8:1e:28:27:c9:51:0f:ae:f7:
         f5:ac:32:9c:8e:88:8a:9b:ad:7a:77:b3:36:b9:1f:1f:0b:bf:
         a5:90:be:d4:80:47:dd:e1:32:e9:1e:07:b8:10:e2:22:e1:fc:
         43:b8:29:31:11:35:53:9a:35:d4:88:6f:61:a0:ca:71:9f:fe:
         72:7e:63:1a:fb:d8:5a:64:a4:8e:88:c1:7a:cb:05:ef:3b:78:
         88:89:06:fa:44:f6:de:65:5a:02:7c:59:32:9b:af:47:18:bd:
         d3:3b:53:5b:4f:e0:9b:b9:6c:b5:e9:e8:17:8f:db:0a:cd:8d:
         50:fc:3c:bc:47:b0:d3:00:7e:2d:0f:3c:c3:8a:7e:24:d5:fc:
         6d:85:d1:1c:25:fd:d2:63:a7:42:93:49:cb:49:88:56:fa:2d:
         62:41:96:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:09:11 2025 by rpki-client