Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/50088c3c-2618-34c1-9f91-6a41c2cc8222.roa
File:                     50088c3c-2618-34c1-9f91-6a41c2cc8222.roa (raw, json)
Hash identifier:          LfINmQCtTmhoOrTIo/ze1Hk0R1ddmGPPaQoa38dZXwM=
Subject key identifier:   F9:39:4C:9E:36:86:39:E6:3D:E8:C0:45:9E:63:F9:7A:E1:24:60:15
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584752C5E8870FF13A9B66D305C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/50088c3c-2618-34c1-9f91-6a41c2cc8222.roa
Signing time:             Tue 24 Sep 2024 18:55:00 +0000
ROA not before:           Tue 24 Sep 2024 18:55:00 +0000
ROA not after:            Mon 23 Dec 2024 19:55:00 +0000
asID:                     202
IP address blocks:        168.87.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:c5:e8:87:0f:f1:3a:9b:66:d3:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 24 18:55:00 2024 GMT
            Not After : Dec 23 19:55:00 2024 GMT
        Subject: CN=bf5501d8-d5ad-4f41-b32c-adaf06dd0e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:87:61:82:ee:9e:ff:50:30:9f:4d:0c:1a:4c:
                    41:85:9b:3b:28:80:35:67:f3:d5:e4:c4:ef:97:d4:
                    ec:12:65:2a:5a:89:d2:e7:b1:4b:8d:c6:1e:03:a5:
                    c1:82:f4:ae:22:59:9d:17:3c:79:d1:ec:bb:96:81:
                    9b:40:0c:5c:7f:e7:db:6d:51:e3:59:d3:bb:0a:24:
                    c1:3d:38:97:2d:5d:a2:af:fc:82:5e:28:e0:e4:d2:
                    8d:18:a5:cc:c6:03:fb:45:90:8d:97:cd:2a:a4:f0:
                    fc:af:1e:8f:29:af:81:b4:da:27:af:64:36:bb:a2:
                    97:0b:71:bf:f1:79:47:12:79:f6:73:28:c7:3b:2a:
                    e3:80:49:d3:4d:97:7c:cb:6a:a4:57:ef:a6:3d:96:
                    5a:f5:ff:bd:a1:8a:53:85:9a:b1:48:f0:39:0f:46:
                    3f:d4:af:02:b6:db:36:d9:72:5f:19:71:5c:1f:98:
                    03:38:6b:07:37:f4:0c:e2:3e:2d:30:e0:3b:1c:31:
                    e4:45:9c:1b:ad:7c:34:a4:c6:16:26:ef:d6:e0:4f:
                    24:ef:79:a3:ff:1b:42:61:45:01:bb:25:f0:9f:c3:
                    af:48:23:0a:ae:14:3f:24:3a:9d:e1:db:d0:cc:a5:
                    56:a1:e8:a9:39:99:cb:f4:f5:b3:ca:b8:38:5b:c9:
                    2a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:39:4C:9E:36:86:39:E6:3D:E8:C0:45:9E:63:F9:7A:E1:24:60:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/50088c3c-2618-34c1-9f91-6a41c2cc8222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1c:33:9f:07:d9:e8:c6:af:f5:ba:92:f7:0b:3f:cf:d0:69:
         3c:ef:37:f9:9e:8c:bd:dd:ec:92:da:23:f1:6e:d0:73:76:5c:
         a2:9a:8e:39:cc:5b:32:ac:9a:57:8d:a0:d5:60:b5:5f:d2:6f:
         02:0d:3e:25:58:7c:d5:af:bd:2c:bb:8e:7f:e4:54:fd:6a:a1:
         51:5e:7d:2d:7e:e3:61:b9:d6:c4:78:eb:67:28:fc:48:7f:c2:
         1b:7b:d0:87:6b:bc:9c:86:b4:79:f9:f0:d7:f8:ce:1a:79:bc:
         d7:89:ab:00:9c:0c:05:76:26:9d:cb:ee:23:64:de:be:3d:ac:
         1d:84:54:bb:22:91:03:29:f8:b0:05:86:21:bf:18:8a:de:b1:
         a6:f0:e9:22:d5:9e:40:12:86:5d:a2:2c:cc:18:de:ab:01:25:
         43:2d:53:12:63:2e:f5:bb:be:7c:1a:0c:c6:68:1e:68:b4:c5:
         cb:5e:4b:54:ab:ed:ee:37:76:56:88:01:36:b5:41:5d:23:57:
         85:5d:8d:c4:3e:eb:e8:42:53:c1:d5:9e:69:9d:8a:d7:7d:c7:
         84:bc:42:1d:52:7a:3e:f7:28:f7:da:d1:9b:a5:11:5a:59:45:
         2f:d6:f8:3e:b3:46:31:de:a4:08:c8:39:27:94:b4:b3:92:e7:
         a5:66:e4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:44 2024 by rpki-client on console-ams.rpki-client.org