Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04749899-dca1-3b86-8e1c-cde5934e8525.roa
File:                     04749899-dca1-3b86-8e1c-cde5934e8525.roa (raw, json)
Hash identifier:          vLAREGreMChSIRLruftMQg5tq3CAtRc0SsXkF/T5T9E=
Subject key identifier:   A2:46:57:20:3B:5D:B3:FF:A3:2D:30:53:74:CE:24:50:E8:9F:34:C7
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB5B0C084335DDDE01B1F0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04749899-dca1-3b86-8e1c-cde5934e8525.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     203
IP address blocks:        192.238.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:5b:0c:08:43:35:dd:de:01:b1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=6c223975-ae00-4dda-8a3c-3dde453588e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b4:af:7e:04:c2:41:84:6b:95:35:c1:1e:08:
                    bd:bd:dc:21:92:6b:07:cc:02:69:63:d1:70:1d:08:
                    c2:b7:a2:e9:48:9d:8d:81:2a:91:51:a3:46:21:b2:
                    1a:f5:ce:91:20:ad:d0:54:02:7a:57:07:84:f0:77:
                    18:fb:46:1d:b8:a2:38:43:dd:e8:71:bf:50:c9:f8:
                    77:53:e9:09:13:e9:ae:b0:8c:d4:75:cd:cd:d6:d0:
                    1e:e7:8d:10:da:a9:1e:d5:82:3e:78:08:19:75:c4:
                    6c:d9:32:86:12:c8:a4:e5:4d:2c:b8:13:80:56:e1:
                    45:09:0a:38:98:26:7f:5c:bf:68:0c:30:ce:15:84:
                    6a:ff:12:5f:29:47:67:70:50:e2:95:e5:e8:30:0d:
                    dc:d1:a1:d7:80:b1:19:de:40:c8:3c:72:86:eb:00:
                    9a:dd:ec:d0:c9:06:93:43:9c:b4:a5:4b:61:20:57:
                    31:8f:a4:0d:79:4b:24:8b:e9:65:77:91:f3:ce:37:
                    a4:74:b9:cd:be:fd:bd:45:d9:97:6d:d4:b8:15:97:
                    e6:df:74:a5:62:55:78:7d:25:ae:01:99:f3:c6:6e:
                    5e:11:d5:6d:42:4c:f3:bc:45:22:79:77:2b:43:60:
                    07:2d:d4:98:14:29:6b:69:4c:7e:38:e6:12:76:ef:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:46:57:20:3B:5D:B3:FF:A3:2D:30:53:74:CE:24:50:E8:9F:34:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04749899-dca1-3b86-8e1c-cde5934e8525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.238.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:cc:ad:0a:5b:5e:6a:33:31:28:20:9f:51:be:7e:2f:ec:65:
         20:12:77:0e:95:5d:bd:38:e2:18:b8:8d:5d:d6:67:5c:36:b0:
         74:3a:bd:e9:35:cb:6b:ca:a1:eb:07:be:a2:af:95:75:92:5b:
         f8:d7:94:2b:53:44:c4:1d:7a:72:7b:68:9f:9b:9b:19:25:fa:
         97:aa:9b:2e:4f:ad:17:80:7e:e1:39:a0:a7:b9:85:31:a8:b0:
         68:8d:7f:db:39:04:4f:e7:e8:d5:04:67:77:e6:04:4c:57:a5:
         06:63:9c:92:fe:ba:c7:81:c9:21:b5:d0:b0:db:4b:55:a1:f9:
         33:2a:2c:ae:a5:7c:38:d5:57:33:4b:89:72:4b:1b:e5:ac:53:
         84:89:91:96:2d:94:c8:0b:5c:6c:00:7b:07:5c:f8:9b:b0:85:
         ee:c8:b7:a5:c6:4e:4a:6e:2c:a7:2d:71:63:2c:ae:bd:a2:aa:
         bd:e6:a6:d3:20:14:94:09:da:9e:69:55:4b:09:ec:d6:29:45:
         90:cf:5e:29:72:d6:31:c0:96:38:79:81:94:4d:6f:84:a2:3f:
         03:da:be:b7:e8:e1:2a:01:f4:68:b3:39:a2:c8:7f:82:14:c3:
         a1:60:ef:fd:59:89:23:a1:67:45:98:e9:52:a0:22:8d:c9:7c:
         4c:c5:20:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:05 2025 by rpki-client