Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6732bb33-89b4-3063-b515-c3f9e2515ca0.roa
File:                     6732bb33-89b4-3063-b515-c3f9e2515ca0.roa (raw, json)
Hash identifier:          x15lMJRG7NEaBUDbuE/hR9C54wTni6FSV0wfodUjYg0=
Subject key identifier:   30:79:74:96:B0:30:18:02:4C:B6:E3:D2:53:3C:02:80:BE:F0:02:27
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584832F01EEB41010FECBF54FD80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6732bb33-89b4-3063-b515-c3f9e2515ca0.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     3356
IP address blocks:        192.208.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:1e:eb:41:01:0f:ec:bf:54:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=667648f4-5f23-4ccc-84e3-358579723aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:1b:a2:f4:c0:f1:3d:a2:74:08:27:4f:96:
                    66:38:32:26:e1:4f:be:72:6d:f1:58:92:be:32:0d:
                    7c:e1:15:7b:af:26:1b:31:07:d1:64:79:5a:39:81:
                    1f:01:b4:8b:a0:73:39:8b:c9:00:de:3f:f9:0a:d6:
                    2e:3f:a9:38:10:ff:36:b7:47:00:d4:3e:37:3d:a6:
                    ba:68:69:9c:2a:1c:da:8d:7d:fa:ac:ea:5f:23:e4:
                    31:64:65:6d:ca:b4:5a:72:63:93:d6:a4:94:19:e8:
                    b1:b6:5e:b3:46:16:0e:ba:e3:43:29:3d:b9:56:db:
                    ec:9d:2b:de:0f:db:1f:5c:05:3b:bb:1e:5d:15:3d:
                    f4:f4:d8:00:49:c9:ab:7e:4f:e1:b4:e3:60:9d:87:
                    24:36:a2:b0:f4:31:a9:7c:1a:04:70:b7:15:88:53:
                    eb:33:62:35:09:ca:bd:8c:1f:72:f3:88:fb:0c:ef:
                    46:88:15:c7:d5:06:06:8c:39:b7:29:d4:86:ad:38:
                    1e:f7:26:1f:f7:e8:ec:9b:3c:06:c8:88:75:22:2f:
                    8b:12:dd:57:9e:fb:01:f9:3e:3f:a2:7a:ba:a5:47:
                    db:bd:53:c5:e4:03:3d:df:cc:5f:b9:dc:23:d2:22:
                    55:4e:71:16:78:77:73:87:95:9f:5c:f9:db:62:78:
                    91:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:79:74:96:B0:30:18:02:4C:B6:E3:D2:53:3C:02:80:BE:F0:02:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6732bb33-89b4-3063-b515-c3f9e2515ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c7:66:c2:33:15:d8:fd:5e:89:58:9a:82:3c:f8:91:0b:44:
         2d:72:1b:c1:ac:30:88:17:99:62:d8:f7:1e:d1:73:a9:a3:ed:
         b2:8d:14:56:ec:ae:c1:09:e8:bc:dc:ea:af:4b:7c:67:cd:e3:
         7d:f2:7f:5e:04:61:92:08:8e:5a:8e:85:81:b7:ed:cf:89:e5:
         04:75:15:b0:ab:66:2f:ac:99:67:22:43:15:d9:92:f9:3e:d9:
         f8:d6:9b:d3:9d:13:15:a0:9f:c8:99:d2:a0:bd:1d:f0:fa:59:
         fa:95:81:ec:95:49:35:2a:1e:13:d5:72:2b:52:05:bd:84:74:
         d7:3f:5d:36:da:d5:61:dc:d7:4f:36:3f:12:00:24:68:a8:08:
         db:c7:f4:9e:c9:9d:b6:99:7e:44:fe:3a:b5:66:f6:77:42:5b:
         fe:20:f6:88:77:8b:ee:93:f0:aa:59:f5:f3:d1:ef:6e:d8:bb:
         49:da:ba:c0:b0:ae:26:70:c4:71:8d:5f:0c:33:75:f5:0a:99:
         1c:40:83:de:69:1a:0f:0b:69:b9:d8:21:0b:8f:72:71:38:67:
         3f:0a:20:7a:64:a6:cd:51:b2:9c:e1:b6:40:45:36:ad:f5:0e:
         cc:2e:9f:c3:cf:de:bd:a1:9b:0f:7c:9d:3e:7b:da:93:32:02:
         03:40:c3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:37 2025 by rpki-client