Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/368f3518-37a0-3b77-b295-9ab86b3ca4d7.roa
File:                     368f3518-37a0-3b77-b295-9ab86b3ca4d7.roa (raw, json)
Hash identifier:          VnOxC/qxHLqYYHZTDFQiiZWVoOiO9OEGF62YeperI7c=
Subject key identifier:   E0:55:A3:40:35:1A:AF:C6:01:7C:6A:59:8C:6E:4E:70:D3:F6:E2:B5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847CE6F4E0814AF8A7F29DE6C80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/368f3518-37a0-3b77-b295-9ab86b3ca4d7.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     202
IP address blocks:        216.240.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:4e:08:14:af:8a:7f:29:de:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=513d4128-d48f-4d98-8f86-ddfafb8c7091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a6:39:8e:b0:55:81:5c:37:f7:4a:af:53:9a:
                    d5:7a:30:c8:82:c9:f9:27:13:73:09:bb:b8:7f:38:
                    d5:ab:e0:b6:e5:4b:d3:48:14:d6:65:0c:86:7c:c1:
                    10:eb:c5:3d:6a:5e:d0:5a:04:f2:48:88:e6:0d:7a:
                    72:97:3f:30:33:68:50:24:9a:36:0c:18:1e:4e:32:
                    47:e3:f6:5a:54:59:15:ea:0e:b2:df:13:61:da:4b:
                    8b:7e:38:b2:41:e6:97:3f:2d:e5:0a:fc:b0:3d:da:
                    95:e2:f8:ff:df:f3:00:3a:24:02:f6:ed:94:47:1f:
                    04:9b:59:7a:77:5c:18:30:71:3d:68:2e:e2:37:89:
                    db:4e:fc:30:23:c8:13:79:a4:be:27:a1:bd:a0:56:
                    da:61:d1:74:a6:aa:1e:18:07:9c:39:19:cd:b7:07:
                    54:91:74:02:76:61:1b:5c:f8:c4:1d:1c:48:84:23:
                    80:c6:24:b3:cf:fd:d4:3a:d6:4a:b8:1f:75:6c:be:
                    28:52:01:4d:22:05:bf:66:5b:d7:e0:c2:1b:2a:49:
                    98:b7:bc:76:8b:87:c8:0f:d9:5d:88:03:73:a3:59:
                    bf:b9:72:72:cb:17:49:79:26:89:2b:c3:8a:ed:f9:
                    0e:6b:6c:c1:74:34:9a:5d:e4:b6:0a:2c:3c:6e:70:
                    3e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:55:A3:40:35:1A:AF:C6:01:7C:6A:59:8C:6E:4E:70:D3:F6:E2:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/368f3518-37a0-3b77-b295-9ab86b3ca4d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.240.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:eb:dc:a9:57:9f:96:5e:10:3a:bf:ad:19:9c:f6:d2:ef:bd:
         da:1e:47:02:b3:42:5e:9a:8c:ec:7c:46:2c:79:5f:43:1b:cd:
         51:b2:c2:2e:10:57:54:34:3b:40:06:f1:2b:fc:b4:df:98:fb:
         c7:b5:8a:51:e8:3a:6b:ee:37:32:63:6a:28:03:2c:e1:04:52:
         99:d5:f3:a8:7f:b1:a6:06:91:48:3a:7f:3e:a7:7b:a5:b0:55:
         a2:e6:2c:fc:14:41:c0:0c:05:c5:2e:8b:f0:37:c6:47:7a:20:
         c2:e7:4e:02:49:cb:03:b9:c4:98:15:ec:9d:bf:35:58:3d:2a:
         c1:e1:c3:f5:9a:28:02:41:d9:24:52:2c:86:29:59:89:69:50:
         d5:99:dc:0c:a9:ab:65:a1:3a:0a:2f:5a:b4:13:b9:98:cf:8e:
         6d:79:23:f2:0b:a6:38:ee:00:97:a3:c8:31:08:79:a0:bf:7f:
         4e:83:45:69:ac:7e:56:bc:21:cd:4f:ac:0f:ff:5c:0b:71:3f:
         5f:09:59:e0:40:4d:1c:b7:7d:34:e0:ce:60:46:d6:b2:29:0d:
         89:6c:d5:6f:c9:3e:ac:36:9b:93:dc:5c:62:a3:d5:11:7b:b7:
         a5:cf:04:d4:20:b0:0c:31:db:02:fa:a8:cb:a0:cf:15:b8:e0:
         af:a2:3a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:42 2024 by rpki-client on console-fra.rpki-client.org