Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61e9979b-9caf-3322-a78b-335e07f4e309.roa
File:                     61e9979b-9caf-3322-a78b-335e07f4e309.roa (raw, json)
Hash identifier:          xV3dnBxHvAkwQCtogmSWRMiPjjYRNGAKJk3pW97U8mo=
Subject key identifier:   B4:FF:BA:8C:8B:AC:DB:56:0A:23:BB:12:34:16:CA:B2:8F:5C:D2:29
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847CE6F4C08D98445924A516080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61e9979b-9caf-3322-a78b-335e07f4e309.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     202
IP address blocks:        204.104.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:4c:08:d9:84:45:92:4a:51:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=94e0cd4b-b03c-4c3e-b775-9361be600d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f1:27:0a:09:73:e5:44:91:b4:b4:42:1f:d4:
                    af:7e:72:9f:f3:35:e8:88:b2:35:31:ce:29:d5:b4:
                    7e:d1:ba:78:c9:33:4b:83:8f:5a:d7:64:c5:be:f6:
                    d2:c1:1f:cd:27:1e:fa:75:21:48:6a:3f:e5:bc:4e:
                    3a:86:99:af:34:92:79:bc:97:93:b7:11:9c:71:e4:
                    d4:56:71:a2:e7:2d:d3:3f:d0:25:06:e3:51:2b:31:
                    5a:63:7b:1e:91:88:d2:18:34:10:ea:d6:c0:0a:84:
                    94:df:2f:ae:b6:a2:52:07:ea:80:69:73:2d:64:0c:
                    98:9a:ae:98:cc:ad:fe:08:48:a0:8e:b5:da:6a:e1:
                    72:73:9e:31:98:86:f7:0b:93:82:04:5c:46:c0:0e:
                    17:95:d3:3d:7b:c8:47:1e:20:19:61:4f:5a:82:47:
                    2a:ed:22:d5:65:77:cb:52:cb:9b:10:ba:d2:f2:88:
                    48:c8:15:12:f2:3e:29:0b:39:30:a8:d8:cc:f3:c9:
                    a8:ce:f6:cf:bc:29:ba:6b:9d:70:67:cd:0e:c6:fa:
                    9b:ee:8d:69:e2:b2:87:ba:fe:18:ef:8e:de:5a:a0:
                    bd:48:1b:90:00:16:f7:00:71:7b:4d:2c:ee:3a:10:
                    d3:ee:59:80:49:ff:46:93:b7:8d:8e:ed:8e:a8:2c:
                    2a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FF:BA:8C:8B:AC:DB:56:0A:23:BB:12:34:16:CA:B2:8F:5C:D2:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61e9979b-9caf-3322-a78b-335e07f4e309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c5:4c:d3:1b:01:a8:27:34:06:51:1f:78:79:b5:c1:3a:77:
         02:86:c0:0d:6b:b5:bb:d0:8f:17:cb:cf:31:68:e8:88:bb:9c:
         a8:35:23:5d:89:13:27:ef:02:c3:91:5d:2d:72:b6:7a:16:d4:
         06:d6:d4:b7:6d:ca:cf:24:bb:4c:78:a3:46:d8:a8:c1:d1:d8:
         b0:66:d2:8b:08:3c:40:e5:2c:3b:12:a1:ac:2d:e6:65:f7:9c:
         eb:9a:d8:a1:38:3a:f2:de:1a:b4:e9:67:11:d7:42:be:85:a3:
         df:ab:57:12:d2:46:c6:28:0d:bf:79:cf:47:52:d2:69:65:62:
         c4:dd:c5:08:00:6b:46:ca:57:0f:03:1c:9b:9b:58:d8:8d:b6:
         5f:31:59:2d:95:56:09:66:33:d9:9a:61:78:0b:cf:eb:b3:24:
         1f:ed:8a:d2:f8:a8:b2:c3:dc:fd:9c:5b:e8:f3:3b:3c:c4:3d:
         4c:0b:2e:5b:70:4d:9f:c6:23:92:65:46:4b:95:9e:77:5a:a4:
         fa:91:06:8c:16:2a:9b:58:4e:ce:9d:47:1d:23:73:5f:5d:38:
         d2:29:1f:e4:32:eb:4f:f2:af:48:68:46:e2:cf:41:55:9d:3f:
         15:8b:2c:08:df:4a:93:b4:b1:f2:d3:0c:c2:af:ff:db:67:c7:
         76:6a:e6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:34 2024 by rpki-client on console-ams.rpki-client.org