Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8319cad4-82bc-3835-9262-ddb0e38ea921.roa
File:                     8319cad4-82bc-3835-9262-ddb0e38ea921.roa (raw, json)
Hash identifier:          6CjWfvU+prHpJQSrpCyQOnvrddXGJU8b7posevrTMoc=
Subject key identifier:   6B:52:C6:6D:FD:0B:BF:12:85:0A:4C:D4:C5:3D:38:79:D0:59:93:B1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285845C8739DF9B3AAB184D0328C80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8319cad4-82bc-3835-9262-ddb0e38ea921.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     3360
IP address blocks:        168.87.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:9d:f9:b3:aa:b1:84:d0:32:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=25a09336-9d06-43e8-b7d6-f330ccb2ff51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:e3:88:c1:c9:32:1b:f0:30:62:f9:23:27:
                    09:db:16:82:2d:8a:b5:fe:9f:da:88:d9:f1:46:de:
                    1e:8f:d0:be:02:7d:c8:b5:21:c7:a6:b3:aa:55:fe:
                    19:84:a8:ad:1a:92:4c:3c:5e:d7:dc:e1:4f:bd:0d:
                    c7:39:55:b8:d3:17:53:07:bb:4a:56:8a:00:11:16:
                    52:57:16:d2:90:c4:ac:ac:be:ed:d0:4b:97:27:23:
                    34:11:c2:82:60:15:72:77:27:e2:8f:29:9a:8a:b3:
                    60:94:a4:51:c6:b3:d2:b5:ed:65:f5:65:32:24:b3:
                    60:85:d9:20:09:16:ab:6d:71:48:dd:b5:0a:eb:3c:
                    e4:fb:bb:b4:6c:f4:aa:91:d1:8c:85:2b:12:f4:3f:
                    8e:d7:e5:c2:ea:60:0a:10:84:e8:20:dc:b1:53:de:
                    69:a2:15:5e:02:d3:fd:5e:98:66:ae:e8:d8:f4:32:
                    5e:fb:3d:16:9f:b6:99:a5:71:47:c3:05:7a:7c:33:
                    8d:56:98:b9:d0:a9:64:36:96:2f:fb:bf:79:e0:02:
                    99:9d:03:c1:2b:29:3f:25:98:e7:28:6d:1e:c3:a8:
                    93:81:d4:71:ec:b2:36:ac:4b:f3:a0:7b:3d:7b:ab:
                    43:6b:95:87:77:1a:2f:d1:2c:6a:10:99:0f:00:04:
                    47:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:52:C6:6D:FD:0B:BF:12:85:0A:4C:D4:C5:3D:38:79:D0:59:93:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8319cad4-82bc-3835-9262-ddb0e38ea921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:03:c6:ca:c5:a7:4d:e6:be:7e:31:a9:a5:f0:0f:d1:6f:ad:
         4c:5b:ef:74:cf:a0:6b:8b:b8:62:d9:36:3b:b5:c9:80:ef:f8:
         33:39:c6:49:11:9b:89:77:08:9b:96:95:1d:e3:e1:a8:2b:a9:
         f0:b3:ff:b6:80:9f:30:f5:d1:2c:b8:fb:98:cf:75:ba:39:c1:
         cf:39:07:8d:ac:38:1c:46:9d:12:43:6c:2b:7e:f7:37:cf:4b:
         f8:69:a0:27:b9:e2:84:46:24:94:56:2b:1e:75:91:3d:35:04:
         b6:e3:6c:aa:06:78:d8:0a:5c:2c:22:e1:e5:bc:85:bd:63:7f:
         1a:ce:24:69:fc:f5:92:00:96:e9:98:50:c0:f6:c1:8b:ca:62:
         e8:05:57:77:cb:36:ed:1b:7f:f5:1f:71:49:b7:eb:b0:94:56:
         69:39:cf:01:02:33:fc:dc:b1:16:ab:6a:fb:96:8f:61:a8:97:
         18:0a:9c:b6:a1:21:d3:07:91:95:7f:37:e0:5c:f3:22:2d:d0:
         7c:b3:8f:94:90:66:63:88:f4:16:56:57:62:c1:c4:30:c2:a5:
         29:19:73:2e:a8:13:9b:4b:7e:ba:ab:75:50:f6:b1:0c:a5:42:
         2b:5c:c2:b0:82:f6:53:99:41:ef:13:39:aa:35:26:fa:79:96:
         2e:58:06:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 01:47:51 2024 by rpki-client on console-ams.rpki-client.org