Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6eeaed7a-4a3c-3ecb-9ca9-3c00b84693a7.roa
File:                     6eeaed7a-4a3c-3ecb-9ca9-3c00b84693a7.roa (raw, json)
Hash identifier:          u+eUaim9/bQu0oB0EwPRHKx/ZfCz5PLDAHzR/8LqA60=
Subject key identifier:   5F:A0:C8:F8:51:37:58:C7:87:D3:D9:1C:76:1F:87:EF:F1:32:7C:6A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858461906A54B19FE2F99B995DA80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6eeaed7a-4a3c-3ecb-9ca9-3c00b84693a7.roa
Signing time:             Tue 04 Jun 2024 09:41:37 +0000
ROA not before:           Tue 04 Jun 2024 09:41:37 +0000
ROA not after:            Mon 02 Sep 2024 09:41:37 +0000
asID:                     3360
IP address blocks:        168.87.4.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:19:06:a5:4b:19:fe:2f:99:b9:95:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun  4 09:41:37 2024 GMT
            Not After : Sep  2 09:41:37 2024 GMT
        Subject: CN=239b137c-8f74-4cb7-8590-8901ebd566f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:c7:0e:54:0c:7d:7d:1b:8d:e5:60:bf:ba:
                    d6:e2:96:70:39:49:1f:8a:40:80:73:cc:95:2c:b1:
                    eb:4f:3b:ea:6c:1d:47:e2:69:64:0a:ec:73:15:a2:
                    c7:bd:60:3f:84:71:91:a4:ed:3d:74:b9:f9:9c:a6:
                    7f:c8:41:e3:06:b8:fd:50:e2:aa:71:24:72:54:d5:
                    6d:cb:eb:13:32:ea:d2:8c:df:9e:09:fa:eb:39:98:
                    40:24:00:3c:56:b6:84:43:03:be:76:d7:d3:6f:db:
                    7b:4d:fc:25:25:17:01:af:ec:23:28:c5:00:aa:39:
                    c0:f4:1e:06:c6:81:c4:1e:6d:41:52:ff:78:e5:d3:
                    b7:6f:f8:ce:77:21:fc:fb:69:c6:4b:12:d8:b3:73:
                    3e:ad:3d:47:8e:fe:17:cd:be:3c:7d:69:fd:21:cc:
                    6f:1a:ac:02:be:20:aa:53:c8:54:ea:e9:b9:fc:10:
                    9a:9c:aa:5a:af:1c:f5:0f:f5:cc:b2:47:a5:2c:56:
                    c6:be:93:e9:68:83:24:bc:7f:a8:ff:fc:e0:8e:c7:
                    6b:c9:02:24:fd:3b:79:3c:3a:b4:6e:68:15:13:f2:
                    83:2b:a7:4e:72:9c:a4:93:bc:3f:ba:f6:65:58:5f:
                    f4:ed:36:a0:17:b5:6e:23:8b:a6:b1:5f:69:d2:f3:
                    c5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A0:C8:F8:51:37:58:C7:87:D3:D9:1C:76:1F:87:EF:F1:32:7C:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6eeaed7a-4a3c-3ecb-9ca9-3c00b84693a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:bb:11:d8:af:b6:a3:f2:1e:a9:57:d6:c7:ab:8b:d7:62:6d:
         3a:d8:6d:39:fa:54:a3:db:c7:bc:99:c0:e3:7a:88:a6:89:1d:
         52:ca:24:7b:11:6d:31:09:b7:73:6f:8d:b1:03:fa:58:81:fe:
         2a:3d:e0:c1:94:d6:4d:e0:c5:ed:f7:bc:85:5b:65:ae:e0:bd:
         f4:82:95:a8:8f:ec:df:2e:1b:0a:20:78:28:0a:ca:f9:d8:d8:
         22:08:59:2c:70:e8:21:a2:b8:2b:53:0c:b0:ae:4f:7c:23:29:
         25:09:70:53:18:48:40:15:9a:a1:fa:a6:73:c9:28:86:a7:d3:
         a5:fd:d0:40:b2:9a:b4:bd:6f:90:a6:bf:36:33:d8:3f:f3:74:
         c5:54:44:aa:8f:51:6a:4a:ec:4b:2d:ec:d2:0c:d5:bc:2e:b5:
         53:13:6e:5e:cb:26:6e:f3:70:3c:13:3c:8e:8b:f1:b0:35:f7:
         c4:bf:df:2b:ed:cb:0d:f7:27:73:38:bf:11:d9:ea:3b:5a:5e:
         53:67:cf:8f:a4:df:49:82:99:62:cd:2c:db:52:1a:12:fb:cb:
         81:ff:a2:f8:24:d6:ea:03:15:d4:2d:38:34:bd:72:d3:93:bb:
         91:c1:db:14:a9:1c:32:85:49:91:4f:a8:15:a4:d6:b0:b7:6a:
         a4:8b:b6:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYZBqVLGf4vmbmV2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MDYwNDA5NDEzN1oXDTI0MDkwMjA5NDEzN1owLzEtMCsGA1UEAxMk
MjM5YjEzN2MtOGY3NC00Y2I3LTg1OTAtODkwMWViZDU2NmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3DHDlQMfX0bjeVgv7rW4pZwOUkfikCAc8yV
LLHrTzvqbB1H4mlkCuxzFaLHvWA/hHGRpO09dLn5nKZ/yEHjBrj9UOKqcSRyVNVt
y+sTMurSjN+eCfrrOZhAJAA8VraEQwO+dtfTb9t7TfwlJRcBr+wjKMUAqjnA9B4G
xoHEHm1BUv945dO3b/jOdyH8+2nGSxLYs3M+rT1Hjv4Xzb48fWn9IcxvGqwCviCq
U8hU6um5/BCanKparxz1D/XMskelLFbGvpPpaIMkvH+o//zgjsdryQIk/Tt5PDq0
bmgVE/KDK6dOcpykk7w/uvZlWF/07TagF7VuI4umsV9p0vPFPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF+gyPhRN1jHh9PZHHYfh+/xMnxqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmVlYWVkN2EtNGEzYy0z
ZWNiLTljYTktM2MwMGI4NDY5M2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFcEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACG7EdivtqPyHqlX1seri9dibTrYbTn6VKPbx7yZwON6iKaJHVLKJHsR
bTEJt3NvjbED+liB/io94MGU1k3gxe33vIVbZa7gvfSClaiP7N8uGwogeCgKyvnY
2CIIWSxw6CGiuCtTDLCuT3wjKSUJcFMYSEAVmqH6pnPJKIan06X90ECymrS9b5Cm
vzYz2D/zdMVURKqPUWpK7Est7NIM1bwutVMTbl7LJm7zcDwTPI6L8bA198S/3yvt
yw33J3M4vxHZ6jtaXlNnz4+k30mCmWLNLNtSGhL7y4H/ovgk1uoDFdQtODS9ctOT
u5HB2xSpHDKFSZFPqBWk1rC3aqSLtmw=
-----END CERTIFICATE-----
Generated at Mon Jun 24 04:00:22 2024 by rpki-client on console-fra.rpki-client.org