Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/637448b1-0e67-3cc1-b952-cd1398fb936b.roa
File:                     637448b1-0e67-3cc1-b952-cd1398fb936b.roa (raw, json)
Hash identifier:          UySjfO7Ji+zNFcdB9l9uw9ChHf23gFXXCFkJU7Rz2Y0=
Subject key identifier:   39:8D:33:F6:AF:00:C8:90:9D:83:23:CA:04:DB:AE:D8:71:25:4F:BB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847DE53CADC1F80C96118ED6FB0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/637448b1-0e67-3cc1-b952-cd1398fb936b.roa
Signing time:             Wed 13 Nov 2024 18:38:14 +0000
ROA not before:           Wed 13 Nov 2024 18:38:14 +0000
ROA not after:            Tue 11 Feb 2025 18:38:14 +0000
asID:                     3360
IP address blocks:        205.239.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:de:53:ca:dc:1f:80:c9:61:18:ed:6f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov 13 18:38:14 2024 GMT
            Not After : Feb 11 18:38:14 2025 GMT
        Subject: CN=c03135ec-b9a1-4cab-abbf-9e8a5fc9bebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:be:be:7a:95:0c:64:53:37:f2:fe:17:8c:
                    d0:3e:82:ea:af:93:6d:54:46:0b:19:7f:b8:68:e0:
                    ea:36:29:2c:ca:1a:85:aa:3d:2d:14:59:51:2e:e0:
                    ca:1f:a0:f4:65:3b:e1:59:b8:d2:34:83:41:7f:bb:
                    85:6d:1e:29:64:bf:8e:26:b9:ea:39:02:76:81:b4:
                    21:5f:07:4e:19:99:85:e5:87:47:86:69:57:f6:3f:
                    1d:4b:3f:86:b2:9f:5b:f7:70:91:29:d0:1b:c0:49:
                    dc:3d:c7:c8:8e:44:db:f8:9d:ef:9e:70:d4:03:6c:
                    71:df:93:7e:5c:03:0b:30:b4:a0:ff:b6:28:55:b4:
                    84:76:cf:6f:e4:a1:ad:af:a4:ca:75:fa:d8:77:b5:
                    27:98:56:e7:21:63:1d:b2:d1:84:02:71:53:9d:4e:
                    9e:52:68:b6:bb:a8:f2:fe:a0:06:b2:6d:13:38:57:
                    7b:41:2b:91:c6:8e:6c:00:75:5d:82:f5:9e:31:3e:
                    78:58:b5:43:5e:c2:3a:3b:11:81:10:26:07:37:a6:
                    50:f1:07:fe:46:0b:30:e7:5a:aa:f8:bd:a9:9f:60:
                    f9:ab:f5:bf:8c:c6:43:42:50:66:b0:f4:92:15:72:
                    75:51:37:19:94:53:36:78:0f:da:43:e2:d4:73:b5:
                    99:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8D:33:F6:AF:00:C8:90:9D:83:23:CA:04:DB:AE:D8:71:25:4F:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/637448b1-0e67-3cc1-b952-cd1398fb936b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.239.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:a5:ee:7a:0c:f5:11:c2:57:0c:d0:ea:67:6f:dc:c5:0b:7d:
         8e:f1:c8:39:5f:a6:8b:37:e2:48:61:a3:00:25:e2:a2:8c:f0:
         1c:a6:15:e7:e3:b0:e2:64:75:ba:5b:46:da:31:64:d4:e5:61:
         3a:52:ce:ae:c3:07:ef:3f:ea:ac:84:28:97:44:3d:1c:ea:2f:
         d0:5a:e7:92:f5:77:39:af:0d:78:e5:34:7a:7a:a3:67:14:55:
         b9:ad:49:2a:b1:0c:13:08:cb:06:1e:56:51:c2:5d:77:d0:4e:
         db:c2:0f:d0:fc:f9:bd:ce:d2:a9:64:3f:f7:d8:a8:4d:5a:58:
         9a:5d:2a:de:b2:1e:b2:7b:2f:ff:81:20:e5:88:36:a5:c9:67:
         fd:b5:eb:16:30:65:ad:cc:65:fd:16:60:73:12:4a:06:9b:d0:
         13:13:66:98:c4:35:f3:23:f6:18:7a:6b:a8:78:bc:e1:e4:fa:
         0c:cb:f9:c9:0f:d4:69:e2:da:51:9f:31:1e:5f:9a:5a:32:39:
         fc:72:21:2e:d0:0b:14:6f:59:02:1b:c5:ee:c1:3e:e7:7a:de:
         f9:33:ef:a0:fa:fd:c3:42:7a:a0:cd:6e:98:e9:f3:63:18:63:
         89:41:31:72:7d:da:9d:1c:b3:e6:e9:36:e5:10:c1:90:e6:d6:
         00:64:a8:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfeU8rcH4DJYRjtb7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTExMzE4MzgxNFoXDTI1MDIxMTE4MzgxNFowLzEtMCsGA1UEAxMk
YzAzMTM1ZWMtYjlhMS00Y2FiLWFiYmYtOWU4YTVmYzliZWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnG+vnqVDGRTN/L+F4zQPoLqr5NtVEYLGX+4
aODqNiksyhqFqj0tFFlRLuDKH6D0ZTvhWbjSNINBf7uFbR4pZL+OJrnqOQJ2gbQh
XwdOGZmF5YdHhmlX9j8dSz+Gsp9b93CRKdAbwEncPcfIjkTb+J3vnnDUA2xx35N+
XAMLMLSg/7YoVbSEds9v5KGtr6TKdfrYd7UnmFbnIWMdstGEAnFTnU6eUmi2u6jy
/qAGsm0TOFd7QSuRxo5sAHVdgvWeMT54WLVDXsI6OxGBECYHN6ZQ8Qf+Rgsw51qq
+L2pn2D5q/W/jMZDQlBmsPSSFXJ1UTcZlFM2eA/aQ+LUc7WZFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDmNM/avAMiQnYMjygTbrthxJU+7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjM3NDQ4YjEtMGU2Ny0z
Y2MxLWI5NTItY2QxMzk4ZmI5MzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAze9HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyl7noM9RHCVwzQ6mdv3MULfY7xyDlfpos34khhowAl4qKM8BymFefj
sOJkdbpbRtoxZNTlYTpSzq7DB+8/6qyEKJdEPRzqL9Ba55L1dzmvDXjlNHp6o2cU
VbmtSSqxDBMIywYeVlHCXXfQTtvCD9D8+b3O0qlkP/fYqE1aWJpdKt6yHrJ7L/+B
IOWINqXJZ/216xYwZa3MZf0WYHMSSgab0BMTZpjENfMj9hh6a6h4vOHk+gzL+ckP
1Gni2lGfMR5fmloyOfxyIS7QCxRvWQIbxe7BPud63vkz76D6/cNCeqDNbpjp82MY
Y4lBMXJ92p0cs+bpNuUQwZDm1gBkqF0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:44 2024 by rpki-client on console-ams.rpki-client.org