Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/31d5406d-914b-30c9-b5d3-8d6fc3f41d43.roa
File:                     31d5406d-914b-30c9-b5d3-8d6fc3f41d43.roa (raw, json)
Hash identifier:          4FeCRNUGxAgeVk84pYvW+V+WUVq2/cRF6d/W2ZGf0rU=
Subject key identifier:   82:B4:17:B4:72:D3:EC:28:2D:00:DA:7A:8B:ED:46:62:F0:BB:81:52
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584752D9EE56C235A10605562B54
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/31d5406d-914b-30c9-b5d3-8d6fc3f41d43.roa
Signing time:             Tue 24 Sep 2024 19:35:20 +0000
ROA not before:           Tue 24 Sep 2024 19:35:20 +0000
ROA not after:            Mon 23 Dec 2024 20:35:20 +0000
asID:                     3356
IP address blocks:        168.87.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:d9:ee:56:c2:35:a1:06:05:56:2b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 24 19:35:20 2024 GMT
            Not After : Dec 23 20:35:20 2024 GMT
        Subject: CN=6f13f2b3-a2eb-4203-820a-57828697ef44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:10:3f:e5:9a:f1:3f:11:ab:27:bd:3f:7f:
                    3f:77:36:12:d5:0c:da:01:aa:f6:87:54:9d:e8:3d:
                    06:9a:d7:f3:32:0a:c7:1e:27:61:27:30:86:f9:51:
                    19:1b:ad:2c:99:bb:ef:e8:59:ef:f1:d8:ad:cf:4a:
                    be:07:61:13:0a:a8:7d:c3:d7:f0:43:95:b4:32:ed:
                    5d:e4:7f:0b:fb:ca:c6:6f:6e:23:1e:37:01:d2:d1:
                    42:cb:57:00:dd:c5:e3:e9:fa:f4:02:0a:d9:d8:2b:
                    fd:9a:ad:e3:1d:b5:96:5c:9f:f9:01:6c:7c:df:66:
                    8c:da:ec:a0:bc:8c:15:d5:c1:0d:88:66:c8:76:a2:
                    70:cc:5a:f3:8f:05:93:f7:67:0d:b1:1a:5b:c5:56:
                    10:c8:9b:bc:f3:af:93:78:38:02:71:87:d2:dd:0c:
                    5b:15:45:f6:80:17:c6:07:dd:fb:ff:03:0e:c5:a1:
                    f9:35:41:7d:23:bb:1f:e6:33:0f:f0:34:93:66:2d:
                    a4:e1:1b:e9:74:79:a1:a8:42:13:60:6a:f7:1d:19:
                    b7:56:f3:b0:ac:8d:13:01:31:c1:50:15:5e:8c:f2:
                    41:b1:ea:9a:44:ab:04:19:87:8f:50:03:b2:92:31:
                    a3:a1:47:ba:aa:7d:67:17:c4:d3:5e:c9:03:43:0a:
                    00:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B4:17:B4:72:D3:EC:28:2D:00:DA:7A:8B:ED:46:62:F0:BB:81:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/31d5406d-914b-30c9-b5d3-8d6fc3f41d43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a1:71:6b:8a:77:27:6e:32:7c:cb:13:50:08:13:27:29:af:
         94:af:ad:14:37:7d:cd:ae:bb:6b:a4:3f:a1:e5:4c:d3:d6:51:
         c7:3d:08:28:56:1c:5e:6d:5c:8e:44:32:b6:88:01:e9:5b:b6:
         49:c8:46:39:16:fb:ac:ba:77:41:0a:eb:82:a0:c0:81:25:fe:
         18:05:cf:91:df:46:8c:71:de:89:41:ea:61:6e:09:62:c5:c4:
         34:51:a1:8c:63:a3:42:0d:5c:df:61:5d:d2:41:aa:3d:81:19:
         3d:f8:96:9a:f1:cc:47:c3:e3:0b:e5:ff:56:b6:f0:6e:d9:cc:
         0f:fb:2f:d4:23:a6:a9:40:5c:e8:a0:a6:af:17:4c:90:3f:b4:
         30:92:42:5d:44:7e:24:24:93:b5:1d:f4:e1:77:6d:7e:fe:9e:
         5b:46:96:8e:de:f9:c1:9c:fc:ef:49:80:8a:42:99:14:e7:2b:
         66:a4:1f:2a:86:85:3e:47:c0:d5:8d:dd:d7:94:cc:00:65:d3:
         d7:77:da:f0:35:84:aa:26:f9:d0:35:cb:db:5c:13:82:6c:72:
         68:ae:ed:16:b2:0d:4a:89:72:81:a4:36:95:18:7c:17:95:f7:
         18:24:82:7b:c2:cb:75:f7:bd:09:00:b6:84:8c:cd:54:62:3e:
         d4:87:65:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:42 2024 by rpki-client on console-fra.rpki-client.org