Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c890323-abb5-3bc0-8991-1963d12fd546.roa
File:                     1c890323-abb5-3bc0-8991-1963d12fd546.roa (raw, json)
Hash identifier:          JYpRIfIDyFin8iFKovG4STBOkarXd2Xc17kf/ANVopA=
Subject key identifier:   DD:F5:C5:6F:55:E7:28:13:A6:F4:30:68:76:D9:D6:71:3D:56:97:F5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285844E23FD6EE2458A0484BBC2F80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c890323-abb5-3bc0-8991-1963d12fd546.roa
Signing time:             Wed 14 Feb 2024 02:00:25 +0000
ROA not before:           Wed 14 Feb 2024 02:00:25 +0000
ROA not after:            Tue 14 May 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        168.87.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e2:3f:d6:ee:24:58:a0:48:4b:bc:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb 14 02:00:25 2024 GMT
            Not After : May 14 01:00:25 2024 GMT
        Subject: CN=5b78d9de-0ca4-4ed9-b4f8-ffa1ec7f235b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f0:fd:10:98:95:4f:75:39:41:fe:dc:d8:c5:
                    8d:82:58:5c:21:b9:06:fd:51:e0:81:c2:52:eb:8c:
                    70:f4:e7:bc:0c:16:85:8f:55:4f:68:47:90:d0:c3:
                    a7:71:eb:36:b0:d6:59:f2:7c:5f:46:05:b9:e8:61:
                    1d:59:49:8e:d0:d4:a7:5b:5c:fb:cb:e5:33:03:08:
                    72:a8:94:2c:69:53:d4:ce:b4:2b:e8:b6:ee:32:a1:
                    18:4b:0f:43:ef:7d:71:cf:ac:9b:f4:86:a8:1e:2d:
                    72:84:2c:de:19:e8:38:e4:8d:1b:34:bb:1b:cb:66:
                    99:d1:09:e5:22:09:04:1e:74:58:4f:05:f0:73:c3:
                    93:74:4c:c3:5a:38:00:de:5f:e6:36:f7:71:6a:90:
                    d8:6f:1b:69:38:f1:dc:76:13:c0:d3:d0:e5:e6:2b:
                    6b:4d:15:f2:cb:49:2c:fc:19:e8:ef:78:33:96:39:
                    b5:da:80:2f:aa:a8:b7:cc:67:35:26:05:0a:78:71:
                    bb:54:77:6d:94:ea:4f:f0:1a:ed:31:f4:36:4e:7f:
                    7a:10:00:fb:4c:eb:4a:64:10:22:35:13:64:8a:30:
                    ab:2c:cf:11:62:a0:0d:db:2f:06:8b:20:82:e0:f2:
                    09:0c:8b:96:1c:2c:21:95:76:59:74:bb:2f:3e:21:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F5:C5:6F:55:E7:28:13:A6:F4:30:68:76:D9:D6:71:3D:56:97:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c890323-abb5-3bc0-8991-1963d12fd546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:8b:2b:da:59:6b:a7:dc:1f:c9:6f:5f:08:d8:d4:c6:d8:12:
         43:1e:9f:93:91:69:52:92:e8:80:0b:b7:2e:06:c7:70:f8:82:
         71:b0:b8:67:7c:45:7e:aa:56:d7:5c:c1:ae:0e:27:6b:66:d8:
         dc:f5:66:ad:67:ff:88:85:40:8d:b7:7d:b2:20:0d:8d:e4:2a:
         3d:4a:83:ed:0c:6e:d0:9f:6e:ab:52:dc:ff:7f:66:00:70:d8:
         00:20:56:42:4e:61:a8:7d:36:1c:f7:7e:d2:07:27:50:aa:cb:
         e3:bb:d8:af:a1:75:5d:51:48:c6:5e:63:01:dd:29:53:c8:21:
         ef:c4:2d:68:a1:a9:2c:f8:a6:df:7d:17:31:4a:1f:0b:4b:84:
         35:83:7a:62:94:2a:04:ee:38:4f:53:b9:4d:65:ed:5e:91:75:
         21:93:16:af:78:33:0e:f4:f6:2e:5e:51:56:26:4f:9a:15:bb:
         d4:b1:c9:a4:1a:de:0b:88:df:37:95:29:38:01:d4:1f:89:2a:
         4d:49:ca:7f:ad:8a:54:71:8a:df:d2:85:f0:2e:72:12:49:e2:
         55:f0:8e:f4:c5:17:16:9a:14:bf:2f:9d:92:c7:95:b5:6f:1d:
         93:6e:11:ac:2d:12:b4:c3:9d:a0:b8:79:81:98:13:d9:fc:27:
         88:15:23:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:30:33 2024 by rpki-client on console-ams.rpki-client.org