Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/52e0c708-d581-338b-a618-cc5c3a9caf20.roa
File:                     52e0c708-d581-338b-a618-cc5c3a9caf20.roa (raw, json)
Hash identifier:          cXRCjt5sCrAeTrVfOwMlY5kAWnnsNc1lJhJJ72wMz4g=
Subject key identifier:   DD:DD:57:AC:F2:0D:69:6E:70:4F:14:57:B6:97:6E:B7:E1:C7:9C:86
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584752A4954701F54D3F21099940
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/52e0c708-d581-338b-a618-cc5c3a9caf20.roa
Signing time:             Tue 24 Sep 2024 17:47:51 +0000
ROA not before:           Tue 24 Sep 2024 17:47:51 +0000
ROA not after:            Mon 23 Dec 2024 18:47:51 +0000
asID:                     202
IP address blocks:        192.85.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:a4:95:47:01:f5:4d:3f:21:09:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 24 17:47:51 2024 GMT
            Not After : Dec 23 18:47:51 2024 GMT
        Subject: CN=79180e72-387c-4bc9-a0db-217320a76ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:82:f8:00:e2:5a:8d:b9:4d:9b:16:b9:ca:44:
                    2c:a2:62:0d:14:b2:b8:8f:45:fa:46:99:96:56:62:
                    eb:61:17:1f:13:ca:86:97:a3:40:63:62:30:66:71:
                    07:96:86:54:0e:84:db:29:fb:fe:02:cc:74:b6:c7:
                    d4:3b:90:bb:88:ad:9b:e3:5d:bd:54:64:3a:ec:f1:
                    4d:27:54:49:16:4d:ec:8c:50:82:7d:34:46:84:bd:
                    59:51:0c:2a:74:19:ed:ca:3e:1d:e4:1b:d0:21:77:
                    90:4e:20:8e:9c:eb:1d:c7:be:d3:00:79:f9:41:f9:
                    49:4c:b5:93:8a:e1:25:ca:38:bf:8f:22:99:82:26:
                    97:38:45:2a:28:37:4a:8c:62:2a:cb:ea:77:42:71:
                    b8:38:6a:03:91:ca:12:c1:3b:d6:a0:94:9d:0d:92:
                    22:a5:99:de:32:f8:73:b9:74:9f:87:c6:ad:a5:22:
                    fb:64:61:ed:88:ee:8d:25:47:93:25:78:fb:0d:85:
                    d2:06:06:6d:86:3a:7f:0a:6d:25:ad:34:95:dd:36:
                    a7:7e:14:fc:2f:64:a4:38:5a:79:46:e5:6f:94:88:
                    86:08:ee:4c:dd:2d:41:53:50:cd:e4:eb:1b:0e:bf:
                    5e:18:e5:d5:93:7f:59:17:5a:a7:61:a1:19:61:2f:
                    7d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DD:57:AC:F2:0D:69:6E:70:4F:14:57:B6:97:6E:B7:E1:C7:9C:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/52e0c708-d581-338b-a618-cc5c3a9caf20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:c9:1a:df:f3:27:26:3a:e7:95:12:b1:ad:98:57:2b:3f:0b:
         b9:08:fc:81:72:dd:62:28:9a:fb:99:29:a1:f9:b8:02:90:b0:
         1d:02:22:58:20:dc:60:63:b8:2b:49:8c:e8:75:e9:8e:53:7a:
         56:2c:87:b4:a1:7f:2a:30:2b:52:de:4f:54:c6:c4:9a:a6:bd:
         5a:19:56:3f:71:be:4d:81:c0:3f:9a:ea:5e:da:c3:ec:14:ef:
         a1:fc:c1:df:67:bf:ae:1a:9b:81:84:19:e6:93:e0:d2:1c:43:
         6f:aa:c2:5d:71:e3:38:0d:3f:01:15:17:37:11:3f:37:6c:df:
         0a:6c:af:a9:7b:d6:25:8f:b5:1d:9a:ad:4c:45:58:12:0b:fe:
         00:d8:e7:dc:27:a5:65:b3:6f:57:cd:b5:7b:6a:96:74:e3:91:
         3e:27:9d:61:9a:e9:09:c6:92:aa:5c:4f:6c:42:62:44:2f:5e:
         93:b4:15:15:0d:9a:07:2a:1d:7c:4c:5b:fa:c6:91:a7:29:b1:
         bd:b9:fd:59:82:e0:9d:18:5d:4f:36:cd:9e:8b:a6:04:43:04:
         53:04:8d:8c:8b:3c:24:ce:34:fe:3f:2b:8f:bd:60:ff:20:5a:
         9d:0e:26:ae:ee:69:41:04:44:39:8e:f1:d3:73:0c:b7:a4:eb:
         44:1c:a7:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSpJVHAfVNPyEJmUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MDkyNDE3NDc1MVoXDTI0MTIyMzE4NDc1MVowLzEtMCsGA1UEAxMk
NzkxODBlNzItMzg3Yy00YmM5LWEwZGItMjE3MzIwYTc2ZWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4L4AOJajblNmxa5ykQsomINFLK4j0X6RpmW
VmLrYRcfE8qGl6NAY2IwZnEHloZUDoTbKfv+Asx0tsfUO5C7iK2b4129VGQ67PFN
J1RJFk3sjFCCfTRGhL1ZUQwqdBntyj4d5BvQIXeQTiCOnOsdx77TAHn5QflJTLWT
iuElyji/jyKZgiaXOEUqKDdKjGIqy+p3QnG4OGoDkcoSwTvWoJSdDZIipZneMvhz
uXSfh8atpSL7ZGHtiO6NJUeTJXj7DYXSBgZthjp/Cm0lrTSV3TanfhT8L2SkOFp5
RuVvlIiGCO5M3S1BU1DN5OsbDr9eGOXVk39ZF1qnYaEZYS99tQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3dV6zyDWlucE8UV7aXbrfhx5yGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTJlMGM3MDgtZDU4MS0z
MzhiLWE2MTgtY2M1YzNhOWNhZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFU7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDJGt/zJyY655USsa2YVys/C7kI/IFy3WIomvuZKaH5uAKQsB0CIlgg
3GBjuCtJjOh16Y5TelYsh7ShfyowK1LeT1TGxJqmvVoZVj9xvk2BwD+a6l7aw+wU
76H8wd9nv64am4GEGeaT4NIcQ2+qwl1x4zgNPwEVFzcRPzds3wpsr6l71iWPtR2a
rUxFWBIL/gDY59wnpWWzb1fNtXtqlnTjkT4nnWGa6QnGkqpcT2xCYkQvXpO0FRUN
mgcqHXxMW/rGkacpsb25/VmC4J0YXU82zZ6LpgRDBFMEjYyLPCTONP4/K4+9YP8g
Wp0OJq7uaUEERDmO8dNzDLek60Qcp18=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:44 2024 by rpki-client on console-ams.rpki-client.org