Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/23fd3379-4d8b-33b5-847b-df215ef4f24e.roa
File:                     23fd3379-4d8b-33b5-847b-df215ef4f24e.roa (raw, json)
Hash identifier:          qE7Fj2BPV6jFVHNUPfrXowDsCR9RijAd+JjfT0EBSPg=
Subject key identifier:   92:A0:6B:1D:23:5D:8F:13:E8:C6:1A:DE:66:71:4F:15:7D:8B:BE:A8
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858472B8DE0A29323C050002DD290
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/23fd3379-4d8b-33b5-847b-df215ef4f24e.roa
Signing time:             Tue 10 Sep 2024 17:45:34 +0000
ROA not before:           Tue 10 Sep 2024 17:45:34 +0000
ROA not after:            Mon 09 Dec 2024 18:45:34 +0000
asID:                     202
IP address blocks:        206.164.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:8d:e0:a2:93:23:c0:50:00:2d:d2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 10 17:45:34 2024 GMT
            Not After : Dec  9 18:45:34 2024 GMT
        Subject: CN=6a8d9def-d9d1-41ea-893b-7bad244f4d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:b8:12:27:93:ef:c3:4f:75:39:99:fa:cd:
                    06:1d:c0:3e:38:b3:06:30:63:36:3e:6f:e8:98:01:
                    ab:03:9e:00:b2:99:e1:cc:9d:b0:ee:1b:21:6b:0b:
                    5e:bc:64:85:7f:24:bc:1d:1d:88:23:2a:f9:d3:88:
                    e5:67:95:ee:ab:f6:02:ac:02:0a:08:e3:44:8a:6d:
                    9b:07:46:53:f3:cf:ba:b6:1a:d7:6f:7c:8b:c7:bf:
                    2f:21:ca:94:3c:e4:b0:a6:31:e7:61:1f:0a:a4:7d:
                    58:c6:91:4b:ef:5f:d2:95:a9:80:7b:1a:af:02:3b:
                    d4:83:e0:2c:d1:28:68:d7:7e:c4:91:94:df:74:93:
                    2b:a8:36:50:c2:8e:9b:04:96:4d:98:f2:19:59:6c:
                    e9:c6:72:09:64:d4:6a:ed:2d:06:be:22:8b:c2:d7:
                    be:a4:0e:08:50:5d:d2:2b:28:36:f9:02:8b:85:c0:
                    46:ce:f9:3e:c1:11:84:f4:d4:21:22:78:e8:0d:ca:
                    1c:c7:ef:14:a5:c2:9c:8c:f7:66:3d:d2:72:91:81:
                    54:d9:af:fc:28:94:80:31:37:65:57:13:20:5f:a5:
                    3c:38:0d:bb:cf:fd:5a:51:42:cb:bf:aa:bf:3d:fe:
                    c9:91:4a:96:ef:6c:67:c8:58:d8:40:0f:c2:ad:ac:
                    c3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A0:6B:1D:23:5D:8F:13:E8:C6:1A:DE:66:71:4F:15:7D:8B:BE:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/23fd3379-4d8b-33b5-847b-df215ef4f24e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:be:a0:96:21:81:0d:b7:70:13:f1:25:da:fc:97:cc:23:fa:
         1f:fc:9f:82:d1:7d:60:6e:76:34:cf:cb:6a:11:ca:cd:49:ed:
         90:e0:dd:11:10:09:c4:84:59:8c:0e:2d:74:d2:cd:42:61:79:
         0e:0f:fe:0f:7e:89:f6:2e:6a:5a:3b:78:c9:79:4a:e7:f9:db:
         f7:04:37:86:52:da:3f:b4:20:7f:d4:42:ad:7f:fe:ac:58:45:
         9e:b9:13:4f:83:57:30:fd:fd:aa:9e:47:68:cd:8f:62:47:7b:
         d6:e1:9b:a2:c1:fe:f5:6d:d2:fa:48:ca:25:ad:b2:77:29:5a:
         9d:ee:79:83:37:56:38:56:d0:42:ad:c3:aa:a8:df:da:51:f5:
         b9:f7:e7:c7:03:09:23:f5:d6:fa:b5:04:cb:89:aa:25:39:0e:
         7b:b1:47:17:34:b2:0e:1b:6f:0e:30:ff:38:69:36:32:43:ff:
         28:ec:6f:77:b8:0a:e4:bf:65:78:d6:75:a5:f8:87:17:da:4c:
         9f:7f:1c:1d:66:90:36:54:b7:66:6a:50:a5:28:f1:61:4a:5b:
         c9:86:22:02:02:45:c2:1e:66:e6:75:32:fa:0e:0b:6f:67:02:
         19:73:92:2a:30:4f:8c:d4:47:75:dd:76:3a:42:bd:0b:a8:6f:
         09:a9:4e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:42 2024 by rpki-client on console-fra.rpki-client.org