Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1838690d-f3a0-35fa-9624-1e158147f08c.roa
File:                     1838690d-f3a0-35fa-9624-1e158147f08c.roa (raw, json)
Hash identifier:          cmA0iTKKJyjipSNY4ihUYZBxTgXfn//atMOyJxbzMcA=
Subject key identifier:   EC:24:96:BA:6D:B4:9D:18:B3:36:CE:DD:01:68:E5:8A:84:81:66:76
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584752B0AA99FFF5CFCE63817100
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1838690d-f3a0-35fa-9624-1e158147f08c.roa
Signing time:             Tue 24 Sep 2024 18:12:12 +0000
ROA not before:           Tue 24 Sep 2024 18:12:12 +0000
ROA not after:            Mon 23 Dec 2024 19:12:12 +0000
asID:                     203
IP address blocks:        204.105.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:b0:aa:99:ff:f5:cf:ce:63:81:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 24 18:12:12 2024 GMT
            Not After : Dec 23 19:12:12 2024 GMT
        Subject: CN=be428bb1-8969-47f4-b765-2edef0e71152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:6a:76:f6:f5:9a:1d:5d:b3:e6:04:bc:38:
                    8b:6e:1e:48:2f:3e:46:e5:ce:c3:ef:96:8a:f4:7c:
                    01:51:f5:06:2f:d5:c8:8b:a0:c6:09:e5:46:fa:49:
                    c4:f1:90:2d:4a:b7:35:a2:75:43:fe:83:1c:81:9a:
                    cf:28:f4:ff:e9:14:bb:ab:2c:61:0f:d0:d3:62:f8:
                    79:d1:9c:ea:3f:9a:4e:26:67:44:96:16:ba:31:fd:
                    90:11:7c:a3:ae:38:a9:3e:20:ec:f6:0a:93:36:ec:
                    b5:cc:49:01:07:7c:5c:3b:69:0f:ce:62:d1:42:22:
                    7c:d7:50:b6:0e:db:ee:df:3b:5b:df:ee:30:da:ce:
                    6f:b9:cf:ec:81:38:62:e8:ed:d2:ab:05:8b:48:2f:
                    2c:e6:b1:f7:55:c6:e6:10:11:61:09:9a:03:91:08:
                    94:6c:09:50:40:1e:32:9e:ba:2c:c6:2f:2d:01:13:
                    90:ca:7d:93:52:60:e0:3b:10:ed:c8:c0:d6:9c:cc:
                    1a:4e:05:56:2c:17:5a:3f:3e:12:92:10:63:b6:22:
                    49:fb:d3:8b:81:c2:03:16:f2:7d:9e:48:75:d9:7f:
                    09:82:20:5a:a1:5e:b8:cf:29:d2:c6:81:2f:12:99:
                    ac:de:44:bd:7d:3f:97:51:c9:3e:e8:d9:ec:6a:ed:
                    94:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:24:96:BA:6D:B4:9D:18:B3:36:CE:DD:01:68:E5:8A:84:81:66:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1838690d-f3a0-35fa-9624-1e158147f08c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d4:94:b1:cd:1d:fc:6a:ef:17:0e:18:f1:f9:4e:e1:1b:f4:
         32:f7:a1:c6:c0:dc:61:42:f8:33:6d:dc:69:2a:bf:ac:7d:6f:
         75:ca:96:6e:9f:ff:32:5d:76:0d:ea:a5:0c:6e:4b:66:01:a3:
         a2:9c:f3:38:47:9c:2f:7b:a1:61:e7:42:de:0c:30:97:ee:06:
         a0:54:57:a6:ca:42:7c:fc:3e:b2:70:10:97:7d:23:27:ac:21:
         20:71:a9:45:77:ea:9d:ae:59:94:c8:0e:16:e3:c9:33:76:84:
         0f:4c:a7:77:e4:a4:2b:05:78:1d:37:7b:75:80:a7:c2:ca:33:
         bd:5c:8a:c7:1e:be:9a:c1:8e:a1:10:a4:b4:4d:97:b0:a1:23:
         c3:71:e1:b2:b3:ef:8c:b0:47:48:32:3e:0d:3b:6d:fc:ed:73:
         2b:0e:12:a7:65:73:96:61:c8:0e:fe:5e:47:4d:35:24:9a:40:
         28:84:85:d5:85:12:bf:91:96:54:41:65:22:00:45:4e:9a:4b:
         4f:23:93:37:ab:83:e7:77:47:f6:94:0e:86:64:e6:86:f0:de:
         3e:94:c0:bb:86:a8:a2:c2:37:d6:48:6b:57:41:ed:76:66:9e:
         b9:9c:2a:c1:ee:fe:d2:f5:2a:ad:c0:3f:95:48:f3:48:dc:bd:
         11:4a:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:38 2024 by rpki-client on console-fra.rpki-client.org