Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/32ed8778-c931-3e80-aa2c-e82a61d1ed8c.roa
File:                     32ed8778-c931-3e80-aa2c-e82a61d1ed8c.roa (raw, json)
Hash identifier:          UTTUXzBotEbV2OlNh73Uy09liRcLdt+TDdDQA4+jUQw=
Subject key identifier:   8B:FF:98:55:87:31:61:90:9E:D1:F8:77:09:24:CF:EA:B4:4C:8E:86
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584752A63FC45D8D77E8E0CB9600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/32ed8778-c931-3e80-aa2c-e82a61d1ed8c.roa
Signing time:             Tue 24 Sep 2024 17:51:12 +0000
ROA not before:           Tue 24 Sep 2024 17:51:12 +0000
ROA not after:            Mon 23 Dec 2024 18:51:12 +0000
asID:                     2164
IP address blocks:        192.85.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:a6:3f:c4:5d:8d:77:e8:e0:cb:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 24 17:51:12 2024 GMT
            Not After : Dec 23 18:51:12 2024 GMT
        Subject: CN=08dd1475-c02f-451e-a567-60aa028a1b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:99:27:8e:8b:e4:b6:59:0c:ce:16:b4:d9:a1:
                    9e:6b:86:1a:26:88:3b:65:95:29:8a:a4:33:47:9b:
                    b2:92:e2:65:4d:b8:33:9d:b3:18:48:83:92:0b:2d:
                    3c:d2:9d:b0:a9:69:5b:11:36:fc:c6:ec:03:a4:9f:
                    70:f8:4e:f6:85:93:6c:62:3d:06:55:9d:a8:f9:48:
                    40:aa:58:2c:17:52:ba:b8:e4:cc:7a:a6:f5:de:ea:
                    47:07:e0:ef:ac:45:0a:99:6c:a1:d0:7a:68:e2:f6:
                    d6:bb:aa:b7:e9:7b:e3:43:66:9e:bb:3f:17:45:39:
                    6c:7b:c4:5e:f0:01:92:a9:7d:57:f2:d7:eb:e2:05:
                    88:82:6a:55:4d:f3:42:28:13:ff:b6:99:e9:c0:cd:
                    5f:7b:78:38:5c:9e:b5:36:d7:11:36:44:59:55:b6:
                    04:c9:d8:fb:f1:57:86:5f:e5:2c:70:94:3f:bc:a9:
                    8f:87:c2:37:83:28:92:fb:c4:f2:19:fa:87:4a:8c:
                    b6:02:6e:06:c8:07:1d:cf:4f:0a:b4:eb:2b:06:56:
                    50:9a:4d:8a:c1:b7:8c:47:ae:ed:76:62:6d:4c:68:
                    e6:b5:80:99:c9:24:42:38:06:0c:ba:11:8b:f1:45:
                    e9:21:f3:16:60:7e:10:1f:3d:88:ee:c7:a9:4f:a3:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FF:98:55:87:31:61:90:9E:D1:F8:77:09:24:CF:EA:B4:4C:8E:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/32ed8778-c931-3e80-aa2c-e82a61d1ed8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:c7:71:ca:0c:2a:25:00:59:47:b7:0a:b8:70:ba:94:92:34:
         83:a2:30:a1:61:d6:7c:58:01:e6:e4:49:a3:13:ba:8f:3c:46:
         80:f5:a3:57:30:16:ab:1b:31:f1:27:97:cb:6a:c9:a0:32:7a:
         42:7d:b7:bf:45:54:d5:40:73:01:09:15:a8:19:33:71:d3:75:
         d4:72:18:e8:3d:13:ba:bb:dd:08:40:8a:66:3c:62:50:a8:4b:
         fc:11:24:12:e4:78:c8:c3:75:e1:76:34:3f:37:ea:4b:ef:1c:
         fd:60:d2:ae:54:d1:2d:01:30:af:0a:76:f6:6f:e1:91:48:3e:
         15:eb:bd:ac:d9:81:e0:5d:cf:3e:18:31:08:3b:ab:84:1a:58:
         86:3b:ed:74:6c:19:6b:3a:b5:17:0f:52:5d:23:e4:44:a2:15:
         87:1c:84:a9:0b:74:2c:54:0a:d0:0c:89:fe:e9:a2:0d:81:e3:
         97:04:0f:9a:ae:9c:d3:f2:72:b9:58:fa:ff:1d:8f:11:0f:e6:
         df:8c:64:a9:37:68:a3:7e:99:b4:c0:df:d2:bd:37:11:61:7f:
         8e:52:f4:6d:62:5d:d7:ea:84:3d:d2:31:81:5a:c6:20:22:10:
         69:60:d4:f1:87:f5:51:11:16:6e:58:dd:d0:a2:ad:bb:c6:bc:
         35:f1:3b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:38 2024 by rpki-client on console-fra.rpki-client.org