Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/53056f5a-e0bd-3846-bf36-0e3d1ab87d37.roa
File:                     53056f5a-e0bd-3846-bf36-0e3d1ab87d37.roa (raw, json)
Hash identifier:          kp9cFOG+u9c0m37TQx6xTVNEDeJ6uCsxHWgKzqjMgRQ=
Subject key identifier:   C7:E8:F1:17:70:99:E1:5A:B3:C2:95:3B:A3:06:3F:C0:FD:BD:99:00
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584785BBA49C1BE0DE892F1D5E40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/53056f5a-e0bd-3846-bf36-0e3d1ab87d37.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     203
IP address blocks:        168.87.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:a4:9c:1b:e0:de:89:2f:1d:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=2c61b313-1d50-4e96-8d45-a2597ed438c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a1:69:1b:a1:6c:8f:e8:b3:6a:e4:07:b9:f7:
                    96:d4:14:56:f2:f0:99:49:a0:dc:59:73:21:f0:bb:
                    a6:93:46:57:93:65:f4:59:07:ce:f1:9f:55:4b:91:
                    65:04:76:ee:67:9f:b0:61:22:3c:d8:e6:1e:78:f4:
                    8f:97:77:01:07:f3:c0:f9:67:94:4b:57:8a:9a:5f:
                    d2:25:94:3a:04:fa:7d:a0:23:86:b2:fc:51:22:ac:
                    d2:be:70:59:eb:72:3d:1a:5f:0f:bd:f9:00:35:20:
                    44:01:df:5f:ef:8f:30:d5:8e:e0:39:55:92:5c:20:
                    51:b7:69:3e:70:b7:f5:79:a5:b2:e9:de:63:a0:ac:
                    55:1c:e2:f7:b2:2c:e4:07:bc:ea:41:8c:e7:6d:b7:
                    a2:3d:5b:86:e6:2c:0b:2a:c0:ce:20:25:ee:7d:c9:
                    98:77:c9:d4:17:4a:96:32:07:c8:bf:61:f7:f9:21:
                    89:72:d3:34:71:c4:a1:4f:3e:50:4c:1d:aa:44:3f:
                    f2:2c:26:35:c3:b9:59:8b:cd:8b:9b:7a:7b:6c:a4:
                    65:89:6d:3f:c4:0c:48:fc:aa:ee:ad:4e:1b:06:1e:
                    58:e5:bb:70:2a:af:41:21:84:3e:9e:6f:74:2d:43:
                    cd:95:0d:07:0d:ce:33:3e:99:b3:92:32:9f:62:e4:
                    a8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E8:F1:17:70:99:E1:5A:B3:C2:95:3B:A3:06:3F:C0:FD:BD:99:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/53056f5a-e0bd-3846-bf36-0e3d1ab87d37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:94:ae:4a:be:5a:49:d1:35:aa:ba:51:e1:ed:47:fe:a9:b0:
         93:93:89:3c:9a:2f:69:40:8a:1c:ff:bd:df:3d:12:c6:3f:be:
         39:20:14:ed:69:61:c0:f5:ad:47:2a:55:b2:0a:39:cd:95:7f:
         85:e1:22:b1:1e:3e:95:90:76:82:26:1c:0b:de:a1:ce:27:99:
         30:4e:75:b1:4f:d7:3b:d0:f5:5d:92:76:ff:d8:3a:21:09:0b:
         fd:85:88:df:c3:49:2e:92:c5:e1:8d:7a:00:6e:90:d7:cf:f1:
         a3:27:10:36:56:3f:44:d6:6e:25:98:c4:ef:14:2b:c9:c6:fd:
         aa:57:c1:82:fc:fb:22:7c:ef:c1:4c:7c:73:9a:a1:90:6b:fe:
         72:db:1b:48:0f:99:76:ab:91:a8:ab:8a:6e:c8:23:c8:a1:7a:
         c6:6c:29:47:4a:a1:2e:f0:29:37:fd:a8:b2:ee:ff:f1:ff:bc:
         5c:f0:62:8b:ec:c4:68:08:a2:57:da:04:1e:71:85:19:2e:6c:
         73:e6:89:81:0c:ae:89:75:af:a1:9f:05:f8:9c:f2:8c:6a:55:
         2a:20:04:58:16:b0:d8:e3:c4:36:a9:15:96:2e:3e:a1:f2:83:
         34:10:db:85:60:ca:f1:63:3b:b5:23:7e:18:c6:08:20:44:9c:
         c6:18:b6:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeFu6ScG+DeiS8dXkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTAxMzAxMDAzMVoXDTI1MDExMTAyMDAzMVowLzEtMCsGA1UEAxMk
MmM2MWIzMTMtMWQ1MC00ZTk2LThkNDUtYTI1OTdlZDQzOGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKFpG6Fsj+izauQHufeW1BRW8vCZSaDcWXMh
8Lumk0ZXk2X0WQfO8Z9VS5FlBHbuZ5+wYSI82OYeePSPl3cBB/PA+WeUS1eKml/S
JZQ6BPp9oCOGsvxRIqzSvnBZ63I9Gl8PvfkANSBEAd9f748w1Y7gOVWSXCBRt2k+
cLf1eaWy6d5joKxVHOL3sizkB7zqQYznbbeiPVuG5iwLKsDOICXufcmYd8nUF0qW
MgfIv2H3+SGJctM0ccShTz5QTB2qRD/yLCY1w7lZi82Lm3p7bKRliW0/xAxI/Kru
rU4bBh5Y5btwKq9BIYQ+nm90LUPNlQ0HDc4zPpmzkjKfYuSoXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMfo8RdwmeFas8KVO6MGP8D9vZkAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTMwNTZmNWEtZTBiZC0z
ODQ2LWJmMzYtMGUzZDFhYjg3ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJKUrkq+WknRNaq6UeHtR/6psJOTiTyaL2lAihz/vd89EsY/vjkgFO1p
YcD1rUcqVbIKOc2Vf4XhIrEePpWQdoImHAveoc4nmTBOdbFP1zvQ9V2Sdv/YOiEJ
C/2FiN/DSS6SxeGNegBukNfP8aMnEDZWP0TWbiWYxO8UK8nG/apXwYL8+yJ878FM
fHOaoZBr/nLbG0gPmXarkairim7II8ihesZsKUdKoS7wKTf9qLLu//H/vFzwYovs
xGgIolfaBB5xhRkubHPmiYEMrol1r6GfBfic8oxqVSogBFgWsNjjxDapFZYuPqHy
gzQQ24VgyvFjO7UjfhjGCCBEnMYYtsI=
-----END CERTIFICATE-----
Generated at Sun Nov 10 20:43:13 2024 by rpki-client on console-fra.rpki-client.org