Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa
File:                     47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa (raw, json)
Hash identifier:          45zKOA6/TI3BIBAWasKrP6ZYNs2FDS6v2JKlE3TdI2g=
Subject key identifier:   3E:1C:5A:29:55:2B:07:F2:99:A0:92:AD:9E:F6:9E:12:E7:60:18:97
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285846C51A7785D2F40E72D0FE0860
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa
Signing time:             Mon 05 Aug 2024 01:00:29 +0000
ROA not before:           Mon 05 Aug 2024 01:00:29 +0000
ROA not after:            Sun 03 Nov 2024 01:00:29 +0000
asID:                     203
IP address blocks:        170.30.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Sep 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c5:1a:77:85:d2:f4:0e:72:d0:fe:08:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug  5 01:00:29 2024 GMT
            Not After : Nov  3 01:00:29 2024 GMT
        Subject: CN=f208f6f0-32ff-47fe-a92f-0231ae18646c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2d:40:0a:88:4c:2f:0d:f4:c5:70:5e:f0:49:
                    d1:7c:0f:45:36:68:0b:c8:03:82:28:16:ae:45:d8:
                    8d:38:f1:49:60:cc:4b:61:cf:3e:16:28:32:75:6a:
                    7e:55:46:5c:e0:b9:83:a5:86:9a:42:9e:60:58:91:
                    5b:d1:31:37:02:be:07:90:3f:b9:ea:4f:d0:43:95:
                    e6:68:ac:8c:e2:5d:29:bc:f0:37:75:1d:89:a4:e9:
                    23:61:8c:43:4a:12:94:f0:16:82:64:41:e1:d2:6f:
                    5e:26:e1:da:2b:80:92:80:a9:c5:65:62:39:cf:c2:
                    ee:66:47:7d:44:d1:60:dd:ff:b6:fc:ee:a6:25:a6:
                    e6:35:ea:96:a1:14:af:cb:8a:0a:8a:e6:42:00:2d:
                    a9:d5:63:46:1b:9d:da:2f:55:93:d8:57:0a:82:6c:
                    5c:c3:c5:17:56:0d:45:15:58:e0:0e:f8:6d:c5:cd:
                    ff:d4:2f:5d:a6:7d:71:16:76:b7:f6:24:03:b0:c5:
                    15:24:d7:fe:0a:6f:b4:07:6a:ea:4c:90:9c:e7:bf:
                    f4:2f:a3:6f:51:51:40:68:8c:a1:39:ae:96:16:34:
                    16:2e:8d:8a:82:30:b1:64:1a:e9:75:26:b9:5c:5e:
                    e0:e2:a3:93:a2:3d:4f:ec:e1:e0:5e:60:fa:59:7d:
                    d9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1C:5A:29:55:2B:07:F2:99:A0:92:AD:9E:F6:9E:12:E7:60:18:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:36:94:ee:8b:9f:a9:f5:22:9d:1f:db:d9:a1:75:b9:e0:90:
         53:62:4f:be:23:0c:68:c5:80:7f:94:67:76:d0:a0:fe:b8:f1:
         d6:cb:00:6d:5b:f2:57:27:2e:80:80:04:46:26:17:ad:e3:85:
         4f:d4:bb:ad:ff:2e:83:31:59:23:a4:e4:99:06:d8:10:9c:99:
         4a:1c:a1:c9:2f:74:df:05:01:b2:2e:c9:62:c5:dc:12:61:46:
         05:27:86:45:5c:88:eb:4b:ca:7a:bf:bc:7d:08:36:44:13:be:
         c7:12:05:c0:a2:b0:28:25:b1:de:a1:08:dc:e8:42:f3:99:cb:
         bb:6e:90:39:d2:8b:82:10:ad:42:cd:26:bc:72:9e:6b:4a:fe:
         41:35:38:34:4e:e0:09:9d:b6:ab:2a:de:93:a2:0b:9a:b4:9f:
         07:d7:e8:ea:e8:9f:6c:af:a8:85:b0:12:2d:65:53:5d:e7:0e:
         ff:79:4d:f2:33:77:2c:06:bd:00:69:5f:cd:3e:ec:dc:bf:cb:
         10:1a:c5:d9:9e:ea:b0:3a:97:9b:ff:8f:84:c2:5f:4e:7d:fa:
         0e:66:f0:dc:00:89:d2:3d:00:e7:9a:a8:0a:64:f8:78:d4:6d:
         b9:dc:56:0e:74:67:47:62:fc:19:89:9f:ed:92:f6:f4:97:eb:
         ca:a3:c3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:45:55 2024 by rpki-client on console-ams.rpki-client.org