Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6bac8b53-0cc8-352c-a809-b567ebf49b0c.roa
File:                     6bac8b53-0cc8-352c-a809-b567ebf49b0c.roa (raw, json)
Hash identifier:          6r54kzqjPcmhI2AV8liNRxvyGC4+Ke5UyILreV8q4Ik=
Subject key identifier:   BC:56:4C:B4:30:D3:98:58:DC:06:04:C7:01:19:51:5F:D2:B9:90:B9
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847DAFC2F56E7536FD7DD17C508
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6bac8b53-0cc8-352c-a809-b567ebf49b0c.roa
Signing time:             Tue 12 Nov 2024 13:54:17 +0000
ROA not before:           Tue 12 Nov 2024 13:54:17 +0000
ROA not after:            Mon 10 Feb 2025 13:54:17 +0000
asID:                     3356
IP address blocks:        192.57.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:fc:2f:56:e7:53:6f:d7:dd:17:c5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov 12 13:54:17 2024 GMT
            Not After : Feb 10 13:54:17 2025 GMT
        Subject: CN=08683b59-4db2-42e8-9edf-3f4635c56dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ec:4e:e7:39:da:94:48:45:60:c0:c4:37:41:
                    1d:c1:0c:8b:e5:0a:ec:a8:31:ee:e1:9c:a8:6f:47:
                    8f:5e:8c:ab:71:ed:f6:fd:26:4c:bc:fa:b0:38:59:
                    ba:7e:34:6a:d3:02:8e:20:ed:7d:31:25:fe:00:44:
                    3a:d4:11:7f:47:f6:f2:8f:30:6b:ed:78:6d:7d:b7:
                    da:0d:9e:e0:05:8b:d7:68:40:3e:cb:fa:dd:d9:8a:
                    36:81:8b:05:51:bf:50:01:31:fc:c3:0c:76:80:f9:
                    42:18:1f:9d:3f:fd:ad:bc:b2:c8:8e:a0:9f:dc:5f:
                    60:23:79:1b:e1:dc:de:38:3a:85:10:38:f2:30:45:
                    73:ae:46:18:dd:fb:39:98:40:db:a8:a3:d3:ad:2d:
                    3e:0e:27:ed:23:32:42:3f:01:63:56:4f:73:fc:ea:
                    92:4f:4e:f5:89:47:95:b0:03:9d:e8:2a:e1:6e:4e:
                    8e:a6:5a:58:99:c4:df:fa:37:4d:99:c3:c4:77:a9:
                    a5:46:2c:79:2e:c5:e3:aa:41:21:7a:1e:83:19:3c:
                    bf:25:90:31:bd:c2:51:5c:64:30:d4:e5:44:af:d3:
                    90:a6:81:9f:52:96:e1:3b:64:5a:05:41:60:20:38:
                    c0:ab:fe:c1:cb:a3:bb:1a:ef:7d:3b:b7:67:2c:e0:
                    3d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:56:4C:B4:30:D3:98:58:DC:06:04:C7:01:19:51:5F:D2:B9:90:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6bac8b53-0cc8-352c-a809-b567ebf49b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:0a:23:48:03:ca:26:cb:28:c1:f7:97:e4:d0:47:77:f8:eb:
         cc:8e:a6:6e:b5:18:36:91:dd:68:ca:c0:35:f7:d9:4f:e0:f3:
         d5:2b:d5:6e:e6:ae:de:1f:32:43:72:d2:73:9a:4f:c5:fd:cf:
         d8:bd:8d:a4:42:2e:86:7d:e8:e8:57:37:91:06:58:7c:eb:e9:
         47:7f:b2:27:e3:02:eb:67:37:45:41:72:28:b3:ef:ee:92:4b:
         56:d4:33:81:46:26:f9:6b:c2:3e:75:52:66:9f:3f:3b:27:15:
         61:05:b4:10:d2:66:bf:c0:48:ba:e5:62:fa:f8:e6:45:05:ad:
         73:52:34:ee:27:ad:35:59:30:e4:07:30:43:6b:d6:92:73:d9:
         dc:67:4b:ee:08:f3:14:d5:27:a7:4c:d3:10:c3:56:c5:50:f2:
         33:6a:b9:2e:1d:6f:b5:d2:d0:5b:64:ad:44:c4:62:6c:9f:2a:
         36:e9:5a:52:8f:ab:dd:dc:f9:91:e8:f7:c8:e5:8f:72:3a:82:
         99:8a:62:7a:11:99:62:d4:19:a9:2c:1f:b4:4d:a1:4c:d0:c8:
         e9:4d:80:f6:60:77:00:70:5f:32:c2:3c:dd:5f:e2:9b:45:fc:
         f3:e9:70:fc:11:bb:e3:01:54:08:9b:b6:62:1f:89:4d:ff:5b:
         6c:3c:05:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:39 2024 by rpki-client on console-fra.rpki-client.org