Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e28bed8-a4dc-3ce0-a256-7a50b77655c3.roa
File:                     4e28bed8-a4dc-3ce0-a256-7a50b77655c3.roa (raw, json)
Hash identifier:          BrWZFQDRtFcnN8723OqZbUMwpZYMr1vkvntKY6oJIao=
Subject key identifier:   1F:1B:5E:F1:2E:B7:32:21:C0:0E:51:2A:33:0C:7D:23:73:87:15:11
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847CAFA5B02126E171567CFA880
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e28bed8-a4dc-3ce0-a256-7a50b77655c3.roa
Signing time:             Wed 06 Nov 2024 20:17:40 +0000
ROA not before:           Wed 06 Nov 2024 20:17:40 +0000
ROA not after:            Tue 04 Feb 2025 20:17:40 +0000
asID:                     3356
IP address blocks:        204.104.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:fa:5b:02:12:6e:17:15:67:cf:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov  6 20:17:40 2024 GMT
            Not After : Feb  4 20:17:40 2025 GMT
        Subject: CN=e19c6a43-4294-471a-bffd-7ead217ec556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:66:59:ac:17:45:98:d1:8e:e9:5a:63:12:
                    f4:10:43:3e:6b:3a:06:4e:d2:04:fb:f4:bd:fe:51:
                    25:f5:7d:fa:01:32:99:9f:32:db:b8:35:6c:43:39:
                    fb:f0:31:1e:e9:93:8b:48:00:75:cc:8a:68:d6:01:
                    c1:b8:86:33:e5:9c:52:04:82:38:43:12:2c:c2:62:
                    37:9a:09:86:ff:54:c9:57:96:56:6c:de:36:a3:7e:
                    84:e7:5b:1f:b4:d1:ca:f4:4e:0e:cb:72:e6:b8:6a:
                    05:a0:08:91:4c:38:2e:60:ed:f7:6b:81:06:f3:39:
                    10:2b:7b:a5:6e:e0:39:bb:f6:0b:1e:af:a7:b2:96:
                    5d:7d:d1:76:4e:7e:f2:90:bc:d8:85:a8:a9:a2:4b:
                    ad:a2:ea:9b:77:c2:83:45:45:eb:47:5c:2b:bf:c6:
                    55:86:5a:f3:a2:61:69:ee:ee:d7:fe:12:9a:67:22:
                    a0:f5:d6:73:e2:71:0f:a5:71:50:70:9d:f8:a9:e7:
                    15:a5:b3:60:74:1d:d7:f1:5c:bb:c5:4c:03:70:bc:
                    14:52:ae:81:9b:fc:19:6d:90:49:d3:38:27:df:cd:
                    78:7f:5c:84:59:8f:46:5a:bc:21:c7:9e:f9:a4:a8:
                    b5:57:cc:84:a7:74:a2:d7:e8:74:b4:d7:b7:64:c5:
                    c6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1B:5E:F1:2E:B7:32:21:C0:0E:51:2A:33:0C:7D:23:73:87:15:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e28bed8-a4dc-3ce0-a256-7a50b77655c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:38:ea:e8:22:89:d4:57:3b:8e:c1:5c:a1:4a:a7:f5:92:69:
         68:99:ce:89:04:52:15:da:72:04:fa:55:39:99:f6:7b:66:c4:
         4e:55:ed:ad:2d:04:da:93:45:3c:82:30:ad:fb:ef:88:1b:6c:
         46:eb:35:d4:6e:6b:70:f4:82:40:eb:6b:55:92:a9:5e:ee:ac:
         0d:ec:a9:65:d8:e1:0b:f4:f7:16:7a:e4:08:5f:0b:32:72:42:
         b1:78:f6:ca:0a:31:43:00:97:b5:8a:b2:59:64:de:b6:e2:2e:
         b5:9e:c3:f5:ef:27:ea:ae:78:fe:79:f5:4a:76:49:e6:80:52:
         44:d8:cd:10:af:d4:1d:79:fa:95:52:c5:f1:13:3c:85:be:9c:
         47:12:02:66:4f:58:ef:36:85:e4:4e:d4:7a:57:11:65:67:80:
         c2:e3:12:2e:ba:d9:35:00:49:41:ab:f2:16:f8:64:97:db:4e:
         79:5f:a2:5c:67:43:0b:0f:c8:bc:11:0a:8e:c6:02:30:2f:dc:
         d4:40:97:67:f4:c2:34:b0:3d:8e:d7:bc:90:33:d3:0d:27:f5:
         18:be:46:1c:84:a5:6e:9a:17:41:79:e4:b2:64:60:32:23:15:
         9f:99:23:30:63:b7:cd:b8:cd:a0:e1:2c:d6:9a:61:20:c1:cb:
         60:0a:1f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:43 2024 by rpki-client on console-fra.rpki-client.org