Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa
File:                     34510429-d958-3a78-990a-f80264d9221e.roa (raw, json)
Hash identifier:          EmoUVfYUZ11+v3fH3yM1fO9Mi9PtfsLMM7Epr6LU2i8=
Subject key identifier:   77:BB:B4:B7:D7:F0:7F:E2:27:36:1F:A8:27:ED:44:70:1E:ED:05:7F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584608C02C3602555104B7722DC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa
Signing time:             Wed 29 May 2024 13:46:41 +0000
ROA not before:           Wed 29 May 2024 13:46:41 +0000
ROA not after:            Tue 27 Aug 2024 13:46:41 +0000
asID:                     3360
IP address blocks:        168.87.72.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:08:c0:2c:36:02:55:51:04:b7:72:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 29 13:46:41 2024 GMT
            Not After : Aug 27 13:46:41 2024 GMT
        Subject: CN=3e08953a-cd42-469a-b45b-5aad12240681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:09:5a:d7:3d:14:3c:0b:90:3f:91:4d:4f:
                    0b:80:c4:be:35:99:82:4a:48:84:06:f9:0c:de:80:
                    3a:38:88:b0:c4:7b:c0:26:7c:38:b6:45:bb:b2:14:
                    a9:ca:5a:10:a3:db:25:79:b7:37:36:d7:ed:dd:89:
                    82:7c:bd:f1:1d:66:5c:31:e1:e5:1f:85:1b:9c:f5:
                    91:71:1f:1b:26:c6:f0:53:da:bb:6a:ad:01:1b:e9:
                    65:51:8a:9b:3c:ac:c1:3f:47:d1:2c:fa:fc:91:98:
                    35:04:37:25:95:8d:fc:05:c6:81:c8:c0:e1:e9:34:
                    e8:4b:72:b3:a2:b1:b4:cb:0e:26:6f:f5:37:06:6d:
                    46:c6:23:b8:97:6a:2a:09:f6:d2:b7:d5:0b:ba:d0:
                    d3:2b:25:4b:43:48:7c:0b:95:23:b5:8a:74:19:43:
                    6c:c8:a5:f1:84:7d:02:23:4a:f8:11:e9:e9:2a:0c:
                    2e:34:c6:93:d9:58:99:b5:dd:a4:0e:85:08:8d:61:
                    93:7c:9a:c5:fc:b9:50:72:41:8c:1f:e0:2f:26:f0:
                    b1:4b:be:ab:c0:25:f2:01:91:62:29:a4:bb:7d:0d:
                    84:27:08:21:59:f2:b2:54:6c:a5:bb:c1:cc:f4:f8:
                    fe:f8:24:17:4b:8d:90:82:64:9c:74:de:73:fe:4a:
                    ff:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BB:B4:B7:D7:F0:7F:E2:27:36:1F:A8:27:ED:44:70:1E:ED:05:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c3:9c:f5:12:5f:75:7e:0d:f7:98:35:9e:6c:47:cc:90:f7:
         2b:d6:d6:2a:89:22:35:22:53:2a:dc:b7:b1:44:f7:6e:9e:82:
         3b:0f:6c:93:23:f4:70:1d:57:f6:ca:65:30:51:84:5b:57:05:
         fc:69:97:ac:81:65:85:4e:c9:cf:da:2f:24:fc:6f:29:0b:4e:
         87:96:7f:0a:e2:27:38:5b:20:57:fe:0a:52:b4:ad:65:91:d5:
         84:f8:ca:bc:49:fd:f3:ac:08:bf:72:e0:c1:fc:22:4a:b0:f1:
         e6:75:06:6f:c7:8e:27:18:d6:89:95:0e:fa:e0:c5:15:bd:e9:
         92:91:b1:8e:d8:34:65:ae:09:05:f2:bf:60:70:0c:79:b6:b9:
         df:b7:72:85:72:d7:98:04:0d:44:10:31:a5:52:12:cd:2e:27:
         32:f5:44:10:9e:02:fd:b9:ca:b5:d5:b9:4c:f0:71:5f:86:d7:
         14:d1:ba:bc:b4:19:a5:eb:0b:32:57:1c:98:6d:bc:5e:bb:99:
         75:8c:44:51:05:38:52:73:b2:5d:89:6d:4b:0f:b2:66:03:40:
         16:c6:8f:00:64:33:d7:66:26:19:1a:22:7c:9c:b9:23:6d:fc:
         fd:1b:07:8b:db:0e:20:96:38:05:09:4a:05:65:f6:5b:d8:d2:
         45:05:f2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 02:54:32 2024 by rpki-client on console-ams.rpki-client.org