Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/641ba864-2fd1-3793-9a93-207db100941c.roa
File:                     641ba864-2fd1-3793-9a93-207db100941c.roa (raw, json)
Hash identifier:          zmrmvjx+Ai3UN1usV8GTpaPrWf+bCWU1FHUrwX56pEw=
Subject key identifier:   5E:2C:78:F7:AD:16:CC:9F:E6:BD:33:6A:57:02:91:86:00:21:FF:42
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584752D8B671CC0D304343B69280
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/641ba864-2fd1-3793-9a93-207db100941c.roa
Signing time:             Tue 24 Sep 2024 19:32:53 +0000
ROA not before:           Tue 24 Sep 2024 19:32:53 +0000
ROA not after:            Mon 23 Dec 2024 20:32:53 +0000
asID:                     203
IP address blocks:        168.87.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:d8:b6:71:cc:0d:30:43:43:b6:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 24 19:32:53 2024 GMT
            Not After : Dec 23 20:32:53 2024 GMT
        Subject: CN=9ea2ed1f-1b5f-4398-a6ed-e1006331f641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7f:1f:bf:5c:74:ee:f3:97:e4:f1:ca:32:54:
                    c3:69:f0:b4:97:d0:a5:52:07:b9:48:c7:d5:ad:53:
                    4b:1f:c9:42:2b:84:88:4c:c7:ec:b1:88:98:fb:54:
                    d7:dd:c9:25:f4:79:6d:e0:5d:92:f0:43:57:04:4a:
                    1e:25:15:9a:9e:98:41:da:65:1e:a9:72:84:93:84:
                    71:8e:be:f3:38:a5:bc:80:6a:25:c0:51:4c:d9:25:
                    67:47:0f:e3:1e:ba:52:fc:19:49:38:30:0d:fa:e4:
                    f0:42:1c:aa:d2:43:14:70:5e:83:ed:b0:c1:d0:e6:
                    19:ef:84:9c:15:f1:3c:9b:75:3a:7c:62:20:33:1e:
                    50:af:16:fd:47:51:ee:1e:79:13:c5:c4:af:89:b9:
                    23:f6:6b:9a:9e:18:4a:b4:49:20:fa:d6:86:b1:f2:
                    70:f5:c4:d9:f3:b1:b9:de:ca:44:ea:3e:0b:6e:8a:
                    99:67:99:e2:a0:c1:e1:ed:84:02:5a:11:d7:be:18:
                    7d:85:e3:2b:25:ec:bf:81:49:d2:21:ac:c8:72:2a:
                    31:19:4d:bb:d6:25:0c:30:4b:b9:e6:89:bf:83:5a:
                    48:79:ee:d8:81:e9:5d:40:ea:ca:37:ae:a4:cb:b4:
                    e2:f9:2f:76:0e:13:20:b0:9f:03:03:fd:c0:f3:86:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2C:78:F7:AD:16:CC:9F:E6:BD:33:6A:57:02:91:86:00:21:FF:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/641ba864-2fd1-3793-9a93-207db100941c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:04:6c:1f:44:7c:41:d0:01:48:ff:8d:40:9a:a1:0d:1e:ca:
         eb:c8:ff:b1:13:36:04:16:21:5d:73:12:97:a4:9c:5c:7b:81:
         d7:76:3d:6f:54:1a:20:2a:f2:24:d9:fa:0b:a8:2e:41:88:5e:
         45:b2:2e:0f:66:f5:af:c2:40:ca:a1:c0:1b:b7:b6:79:60:ad:
         06:d6:c9:dc:51:dd:7d:19:86:39:bd:53:12:d7:6a:b1:13:3d:
         0a:cb:9a:3f:54:d2:e2:fc:a1:d4:b0:09:2a:44:22:a0:da:53:
         89:3c:be:9e:b2:e9:ce:5d:48:3e:69:58:ae:c0:49:ae:05:d5:
         4b:d5:36:3e:bf:c0:0b:74:b5:b7:32:bd:e8:4d:fa:b6:9f:fa:
         b8:97:34:33:f0:41:00:ff:68:a9:89:1e:bc:07:28:ea:5a:0a:
         95:14:98:72:7a:10:b1:6e:cd:63:40:2b:bb:c7:97:3e:1d:13:
         b6:d8:13:6c:7d:63:d6:85:86:af:40:5d:ef:b6:cb:8b:ff:85:
         84:a4:34:95:b6:0c:e4:10:1f:bb:69:0f:f4:04:a8:84:2d:93:
         2c:f2:83:3b:4a:6a:95:b1:6d:71:14:02:10:17:9b:4a:88:42:
         d3:32:3d:6a:92:74:97:6c:de:eb:11:ad:31:c7:a8:3e:72:e1:
         a4:4c:45:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:39 2024 by rpki-client on console-fra.rpki-client.org