Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6c7c0aa8-3479-31d2-bbe3-1470d1c21b2f.roa
File:                     6c7c0aa8-3479-31d2-bbe3-1470d1c21b2f.roa (raw, json)
Hash identifier:          p1K1RGOZwE7+AWCu25Scttm5a2hWWhk0bsxU+3TJI50=
Subject key identifier:   2C:4E:FF:43:B6:9D:46:17:CE:52:1A:26:47:3C:96:20:06:D3:44:8C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858472B231DB00964C7FF4144F910
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6c7c0aa8-3479-31d2-bbe3-1470d1c21b2f.roa
Signing time:             Tue 10 Sep 2024 14:10:28 +0000
ROA not before:           Tue 10 Sep 2024 14:10:28 +0000
ROA not after:            Mon 09 Dec 2024 15:10:28 +0000
asID:                     203
IP address blocks:        168.87.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:23:1d:b0:09:64:c7:ff:41:44:f9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 10 14:10:28 2024 GMT
            Not After : Dec  9 15:10:28 2024 GMT
        Subject: CN=1cabb75a-ed97-45cd-976d-526bb9f7aee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6c:47:7c:2a:24:22:49:dd:78:89:d3:15:a4:
                    a9:8e:48:e2:2e:40:5e:46:46:7f:d4:2d:71:27:6c:
                    db:2f:84:04:73:22:3c:1c:b0:28:be:f5:63:13:d0:
                    1f:48:f6:18:c8:6e:23:49:b9:cb:7c:b4:c4:48:84:
                    3c:8b:20:91:58:a1:aa:6a:21:a1:14:7a:ab:9a:cd:
                    b8:1d:bd:ed:3f:29:bb:80:4b:65:2c:c3:2e:8a:5a:
                    77:3e:2f:e2:13:26:31:94:c4:54:e4:c7:58:3d:c4:
                    75:bd:1c:dc:03:0e:1b:79:a3:83:61:fc:43:da:f3:
                    19:66:10:ce:b1:d0:35:8e:74:e8:8f:86:85:60:ee:
                    c0:cf:89:c4:ab:d6:92:e3:33:72:1f:19:96:3b:f0:
                    bc:d0:4a:cd:d3:79:62:09:9c:a4:3b:b6:5c:4c:b9:
                    3f:f5:ff:39:01:4a:88:33:26:f6:af:ad:5f:53:6f:
                    12:ed:d5:b3:69:ef:eb:6b:1e:ae:2b:67:49:b7:02:
                    b3:aa:b4:a7:78:9a:99:d8:c9:a6:df:87:94:a6:fb:
                    10:35:d1:c5:b6:fa:99:b7:6d:78:5a:91:49:ce:0c:
                    ad:20:e6:dd:49:5e:7b:48:de:9b:2e:be:12:01:3b:
                    d1:e1:48:9e:8f:c6:e7:fc:2a:02:35:19:ce:ec:44:
                    c5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4E:FF:43:B6:9D:46:17:CE:52:1A:26:47:3C:96:20:06:D3:44:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6c7c0aa8-3479-31d2-bbe3-1470d1c21b2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:90:9c:5b:c8:d2:c1:7f:65:3e:db:91:2b:e8:34:46:20:16:
         47:1f:e6:82:a8:08:28:b1:bc:26:8f:cb:eb:6f:80:32:fb:d5:
         33:cf:c2:53:cf:4b:4a:55:67:87:01:ea:ec:12:6f:69:e8:70:
         e2:b8:86:ee:5d:79:87:71:5f:59:96:98:40:22:d6:ed:5f:45:
         21:9c:ea:32:bf:c9:8a:ea:08:a1:4e:75:74:94:14:3b:59:49:
         53:99:48:e1:f5:08:67:5c:ad:41:b0:9c:25:f5:8f:1d:b7:3e:
         18:80:ce:16:eb:46:20:ef:82:f7:c9:1a:36:ad:92:e5:f1:cc:
         ea:94:1c:3b:6b:f5:00:1c:31:01:ea:16:09:15:b5:85:d8:43:
         5a:d8:20:42:ee:41:82:c0:61:41:0a:87:4b:e9:d8:8d:cc:7c:
         7c:ba:0b:e6:67:66:2d:ae:02:b5:1e:25:22:70:fe:5a:07:08:
         de:9d:62:16:1b:25:22:c9:15:73:14:e4:d7:f7:b2:5e:3e:0c:
         b6:a5:2a:b9:97:82:ef:39:d2:fd:e7:49:c1:7d:02:5d:b7:d6:
         20:8c:06:d1:9a:57:4f:01:56:4b:41:5a:fb:fe:1e:ca:2b:50:
         dc:15:0c:a2:ba:1b:8d:3e:a8:37:40:e8:f9:9e:4e:d6:8b:68:
         95:ac:e9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:43 2024 by rpki-client on console-fra.rpki-client.org