Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/58a16033-bdc4-3821-9ddd-77772dcc3e41.roa
File:                     58a16033-bdc4-3821-9ddd-77772dcc3e41.roa (raw, json)
Hash identifier:          L2wtMkQHHiNbgolWL07ZIKuV+D7fTS9VZC+o8ko6+zA=
Subject key identifier:   9A:12:FF:1C:83:5D:DA:BD:04:48:0B:0A:70:E6:9B:D8:E0:42:60:07
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285846EDA157075B57C3A5FC65B670
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/58a16033-bdc4-3821-9ddd-77772dcc3e41.roa
Signing time:             Mon 19 Aug 2024 13:24:40 +0000
ROA not before:           Mon 19 Aug 2024 13:24:40 +0000
ROA not after:            Sun 17 Nov 2024 14:24:40 +0000
asID:                     203
IP address blocks:        168.87.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ed:a1:57:07:5b:57:c3:a5:fc:65:b6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 19 13:24:40 2024 GMT
            Not After : Nov 17 14:24:40 2024 GMT
        Subject: CN=c6f894ea-98e7-4674-aee7-5d9dc41707be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:19:05:3f:b9:e3:ef:6f:9d:b6:0d:84:6d:c6:
                    79:21:f4:4f:b0:6b:95:98:a0:58:5a:7a:12:da:e5:
                    40:70:9a:c4:82:2b:f8:40:7f:e1:1b:e4:fe:53:59:
                    9b:69:4d:10:d8:60:6a:6b:1e:0b:a6:4a:a2:94:e6:
                    1a:c9:22:42:4f:b1:06:ae:86:f9:e6:62:5c:04:1f:
                    0c:65:af:2b:dc:ff:e1:47:21:2a:09:3c:03:9f:63:
                    93:ae:e0:fd:21:d7:53:46:77:9d:1f:12:29:cf:e1:
                    0d:d8:e7:a7:98:fa:55:bf:56:7c:a1:58:e8:d3:af:
                    9d:ec:79:fc:2a:ed:bf:8f:68:64:af:21:96:f4:fe:
                    df:40:c7:67:66:83:7f:1d:10:17:2e:10:8f:b8:06:
                    65:a7:36:75:12:ea:2f:61:81:a5:72:fb:43:13:db:
                    de:63:fa:f8:40:a9:64:8b:e4:b9:70:83:1c:fc:c0:
                    10:77:0d:a9:a9:87:3a:92:32:dc:d2:2f:85:9a:fd:
                    4c:38:6c:c1:a8:b3:48:44:93:2c:02:e7:64:ce:2f:
                    09:7d:29:02:29:a0:b2:f3:10:ea:6a:48:9e:80:3c:
                    f8:cf:bc:49:a7:c6:31:21:6d:6c:a3:64:1f:33:17:
                    5b:51:e3:aa:61:d6:ba:7a:4f:f5:3d:fb:84:9a:1f:
                    01:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:12:FF:1C:83:5D:DA:BD:04:48:0B:0A:70:E6:9B:D8:E0:42:60:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/58a16033-bdc4-3821-9ddd-77772dcc3e41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:57:72:fc:c6:ed:5a:d0:8d:ef:ac:53:32:a5:36:7c:e3:ed:
         9a:7c:0f:55:62:a9:e5:d4:e9:b8:3c:0d:eb:bd:85:d8:5a:fb:
         77:b3:6a:80:c6:fb:fe:17:9d:5d:62:fb:22:b6:e0:ce:1a:bf:
         93:e1:d1:88:3f:9b:40:f4:11:ac:44:94:60:bb:83:9e:db:0e:
         f5:e0:a7:2a:f3:42:75:c2:d0:0c:05:a8:79:24:ea:68:e2:d7:
         e6:0a:64:78:9f:b6:01:f7:f4:d5:23:27:b3:0e:08:fa:8b:2b:
         ac:94:7d:d2:c8:f3:3d:9c:e2:e1:e0:1e:80:80:02:35:fe:17:
         8b:14:42:8c:c1:2c:0f:45:29:5a:eb:7f:a5:89:81:f5:0f:40:
         63:80:43:3e:bd:67:67:62:e1:cb:14:a4:48:34:a9:5c:b7:96:
         6c:e8:93:c0:25:85:29:c4:d6:ce:ba:3a:e3:dc:53:bf:97:03:
         ad:23:d6:d0:1f:d6:5e:42:11:cb:c0:45:b9:b9:03:09:66:60:
         7f:ce:18:c7:37:fb:88:47:7f:f4:8d:01:5d:de:d6:b1:64:9e:
         4d:97:44:85:87:e2:c6:39:8d:62:48:d7:18:60:8e:0e:33:83:
         b5:2e:f4:19:21:55:93:24:db:af:e3:b4:de:38:b2:f9:80:d9:
         d0:5d:fd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 03:07:38 2024 by rpki-client on console-fra.rpki-client.org