Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/307b584c-1081-36f3-b51a-7a63765ebc3e.roa
File:                     307b584c-1081-36f3-b51a-7a63765ebc3e.roa (raw, json)
Hash identifier:          XqjBbo0D4V8EN+cgN+DnDNuVU3OO6NEbeGtpihmmSo4=
Subject key identifier:   76:C5:B4:57:75:94:3E:95:50:E7:2B:FE:F4:0F:59:4E:3B:BA:F5:81
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F43285846EE3289C018B04F38F4599620
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/307b584c-1081-36f3-b51a-7a63765ebc3e.roa
Signing time:             Mon 19 Aug 2024 18:17:14 +0000
ROA not before:           Mon 19 Aug 2024 18:17:14 +0000
ROA not after:            Sun 17 Nov 2024 19:17:14 +0000
asID:                     14793
IP address blocks:        76.164.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ee:32:89:c0:18:b0:4f:38:f4:59:96:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Aug 19 18:17:14 2024 GMT
            Not After : Nov 17 19:17:14 2024 GMT
        Subject: CN=95e45553-c2a5-4b0b-ac6f-4fc2fa46efe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2c:34:48:9d:4a:7d:4e:29:d7:24:db:27:fd:
                    a6:2d:58:c9:10:a8:28:c7:34:f2:62:4d:a8:9e:ae:
                    1d:12:90:08:65:4f:86:0d:6b:e3:9d:6e:1d:f8:82:
                    31:d3:24:1a:e6:09:e6:f2:76:18:08:83:23:15:da:
                    9e:9c:4e:f6:26:58:c6:60:59:a8:d5:0c:1d:6e:02:
                    1d:56:12:eb:59:6d:3e:7b:9f:c8:fc:97:14:e9:ad:
                    ef:f0:d7:0b:18:18:a8:64:06:1c:e8:a9:00:82:bb:
                    c0:c7:35:16:6c:1c:15:54:15:3c:6c:ce:9c:60:4d:
                    96:7f:21:e7:68:84:cb:31:19:36:8d:8d:3a:34:ff:
                    8b:76:f5:71:f6:cb:ef:24:ad:9d:9d:df:40:1a:9e:
                    a8:eb:6c:f8:64:45:83:04:68:ca:27:f6:e3:41:90:
                    7e:67:cd:4f:7a:f5:d3:9e:f6:88:c2:a8:70:09:4a:
                    d3:42:fb:d2:df:69:fc:e6:9e:f9:bf:0d:81:fd:66:
                    49:3d:90:a5:b0:84:32:70:fe:a9:8a:0a:68:88:50:
                    db:18:8d:e6:df:dd:cf:9e:aa:f7:22:92:94:24:4c:
                    6a:a8:3d:f9:c0:63:a4:74:61:76:e3:47:44:24:8b:
                    f9:1b:dc:41:2a:db:c6:91:f9:0e:50:d9:98:03:e8:
                    c3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C5:B4:57:75:94:3E:95:50:E7:2B:FE:F4:0F:59:4E:3B:BA:F5:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/307b584c-1081-36f3-b51a-7a63765ebc3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f1:77:62:44:4c:cd:c8:7b:5f:68:02:af:c7:f7:6f:ed:64:
         3e:98:1a:76:0a:d5:aa:e3:a3:8d:0c:12:d3:0b:72:29:ce:71:
         81:63:c2:cf:4a:d4:84:44:08:63:f7:41:f8:92:0d:fd:1e:6b:
         1b:c8:dd:43:98:81:80:0a:41:7c:6e:be:ec:e1:16:9c:6d:cb:
         33:88:ff:03:41:8f:38:f0:aa:c7:0c:b1:3f:fa:a6:f4:2e:d9:
         5b:b8:d8:c2:77:91:74:fd:26:22:d6:f2:6b:9c:fc:79:03:8d:
         35:c4:4e:fb:3d:72:49:bd:f5:6d:7d:ef:44:41:78:14:ea:af:
         d9:65:d5:96:bf:b7:56:90:45:a8:66:68:b2:f0:8e:7a:0d:28:
         f4:96:75:5a:69:3d:64:90:71:90:f2:17:76:b2:d8:f1:3f:ca:
         3f:84:d0:ae:c3:7c:ad:83:1a:d7:97:88:e8:89:41:a7:31:de:
         05:20:db:03:88:13:37:09:c8:86:30:af:cd:ee:d5:16:6f:04:
         f1:f3:d9:04:a7:23:43:4d:b6:4d:83:79:97:52:c8:a3:56:89:
         1b:66:24:4f:c3:b2:3c:94:b6:bf:a1:30:5e:16:ef:ae:9e:f8:
         94:75:ac:54:84:86:7c:b2:f3:27:50:ea:7d:72:1c:1a:80:cb:
         66:55:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 17:09:46 2024 by rpki-client on console-fra.rpki-client.org