Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/32d107ad-9592-3ba6-bb31-c383da709698.roa
File:                     32d107ad-9592-3ba6-bb31-c383da709698.roa (raw, json)
Hash identifier:          jOf8BhjsxBROvDPVlJ9BGPO0d85sI5QKtClJqHjbrww=
Subject key identifier:   1B:E3:24:AE:E2:3D:5C:AC:AD:F4:3B:4F:70:F6:D7:C4:58:D7:AF:8E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848F7C140DC7AB36FFB31C93478
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/32d107ad-9592-3ba6-bb31-c383da709698.roa
Signing time:             Sat 22 Feb 2025 14:00:52 +0000
ROA not before:           Sat 22 Feb 2025 14:00:52 +0000
ROA not after:            Fri 23 May 2025 13:00:52 +0000
asID:                     60204
IP address blocks:        206.164.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f7:c1:40:dc:7a:b3:6f:fb:31:c9:34:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb 22 14:00:52 2025 GMT
            Not After : May 23 13:00:52 2025 GMT
        Subject: CN=a90067eb-49dc-4eb9-ac4e-d8fcd1ed317a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:58:99:3c:c8:bd:91:3a:b1:20:1d:1d:9f:3c:
                    8a:87:e0:c6:95:20:b7:b8:9d:5d:94:72:71:79:ab:
                    bb:eb:d1:c3:0e:04:62:cf:ee:b4:60:6a:ef:0f:c6:
                    42:e4:b1:7f:54:fe:e3:4b:d3:94:56:ca:1e:4a:00:
                    5b:70:19:e2:40:77:56:59:7a:6d:d4:ae:e7:73:97:
                    62:da:fb:28:23:ae:26:ad:b8:1b:56:6c:7e:be:65:
                    ad:af:69:41:d3:b4:27:59:9f:75:62:62:76:b1:a5:
                    d3:4d:e2:17:cf:ac:37:42:b8:c2:f5:8b:f4:85:0c:
                    58:44:cd:22:bb:ae:31:f9:83:87:23:05:fc:d3:83:
                    7f:6a:6a:06:98:2b:54:99:c6:1d:53:ad:93:cf:ba:
                    bc:76:3b:32:41:a4:f6:70:a6:3b:5f:7f:e6:b5:a1:
                    20:a9:9d:a8:fa:9a:6a:33:57:11:ea:9d:59:51:c1:
                    89:c1:21:c5:93:c2:42:3e:91:ab:f5:50:48:27:ce:
                    24:23:5d:ce:ba:3d:5d:51:57:f7:37:e2:5b:06:0e:
                    c7:24:fa:83:fc:ba:1d:98:f6:5c:0b:f4:27:1c:2a:
                    60:d9:56:98:44:6b:71:f1:2a:37:48:88:f1:31:ed:
                    18:d9:3d:da:47:40:83:57:40:80:a7:1d:6d:3f:01:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E3:24:AE:E2:3D:5C:AC:AD:F4:3B:4F:70:F6:D7:C4:58:D7:AF:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/32d107ad-9592-3ba6-bb31-c383da709698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:e4:96:11:8f:60:8c:60:00:c4:ae:17:66:ee:c9:5a:79:82:
         b1:25:d9:97:df:3d:3e:85:b3:17:de:3c:9a:ed:f7:9b:2a:89:
         b1:a0:41:f3:5d:17:d3:96:4b:62:7a:60:a6:45:ff:5d:da:58:
         bd:f4:e2:30:f3:68:be:94:70:2b:5e:21:2a:43:c1:8f:0d:80:
         6a:3f:2a:6c:4c:3c:49:2d:4f:d3:31:58:2c:15:a7:93:10:a3:
         d8:c2:ef:53:ae:54:75:e1:55:4c:04:b1:84:78:75:40:79:7c:
         2a:c4:ba:a1:12:6c:62:93:27:c9:b2:70:51:58:07:2d:e7:f5:
         2e:06:57:6b:f1:1b:de:70:fc:34:7c:db:a5:73:d2:33:1f:86:
         a0:27:88:36:d0:d7:06:aa:ed:17:95:1c:4a:27:58:ff:68:04:
         6d:b0:57:ca:a8:27:e2:9b:5f:46:f6:d9:0f:92:2d:e2:80:38:
         16:d6:80:51:9f:51:8a:50:2f:ed:8d:b3:b1:fb:6a:6d:b7:45:
         21:e5:58:aa:fb:1e:2b:39:48:b5:ef:ed:c4:c8:2c:7d:90:30:
         f6:b1:4e:5c:68:61:0d:ad:12:4d:a2:1e:7c:9e:26:34:69:d6:
         04:3c:be:7a:f9:32:e3:af:be:e2:ff:7f:d9:fb:90:59:3a:72:
         eb:42:20:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:39:20 2025 by rpki-client