Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6da3bf09-afdc-3d26-bc2a-8b2cc59a94a8.roa
File:                     6da3bf09-afdc-3d26-bc2a-8b2cc59a94a8.roa (raw, json)
Hash identifier:          aKj8WtqDiyA/TqKBYBC7tXEp7aeWvzBhfOO2JHR5sZY=
Subject key identifier:   26:93:70:4A:C0:83:6A:E0:DF:C9:03:68:1E:10:04:AD:7D:CD:A6:8F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847DAFC08BFB0C0D6CC7D2DEA00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6da3bf09-afdc-3d26-bc2a-8b2cc59a94a8.roa
Signing time:             Tue 12 Nov 2024 13:53:59 +0000
ROA not before:           Tue 12 Nov 2024 13:53:59 +0000
ROA not after:            Mon 10 Feb 2025 13:53:59 +0000
asID:                     3360
IP address blocks:        192.57.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:fc:08:bf:b0:c0:d6:cc:7d:2d:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov 12 13:53:59 2024 GMT
            Not After : Feb 10 13:53:59 2025 GMT
        Subject: CN=fafbfcf4-d0e7-4397-96a4-74ca922c0b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:f4:da:dd:b5:cd:9c:7e:20:e4:95:77:1f:
                    17:80:4b:49:b9:ce:e0:25:a8:d8:8c:76:fb:2e:66:
                    64:07:62:59:41:fe:be:06:cc:41:79:6e:ec:d4:99:
                    39:cc:1a:3a:4e:60:06:49:49:bd:57:e8:45:d0:13:
                    dd:4a:d8:e1:a8:f9:a8:22:a4:b6:59:a3:34:c8:73:
                    ba:e9:c0:e9:34:f9:ad:d7:dc:a5:44:dc:fe:64:87:
                    a0:cf:f9:16:7a:e0:56:19:55:c3:ac:75:dd:03:10:
                    eb:68:83:44:e6:27:66:b0:cb:0b:58:f7:af:40:da:
                    6a:28:1b:ef:83:84:1c:6f:8c:e8:f5:b9:72:41:ec:
                    b2:4f:d6:6e:5e:8f:5f:cf:6a:f5:00:61:18:da:0c:
                    f1:46:8a:48:c5:33:96:fb:9b:50:a9:f2:94:19:66:
                    55:b9:c1:26:5c:89:f4:73:b3:e8:54:bd:eb:1c:f4:
                    ca:75:a1:03:51:3c:90:1c:8b:0b:24:bf:81:9a:cd:
                    54:3b:83:66:77:fc:3a:35:6c:58:ab:2d:6c:a9:a2:
                    1d:74:c1:4c:38:c3:42:2f:1c:f9:9e:80:67:04:9d:
                    e8:84:81:ef:dd:29:33:db:7a:55:09:b2:97:ee:b0:
                    b2:d1:fa:3c:c5:1e:31:18:49:fa:e3:ab:b5:11:7a:
                    c3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:93:70:4A:C0:83:6A:E0:DF:C9:03:68:1E:10:04:AD:7D:CD:A6:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6da3bf09-afdc-3d26-bc2a-8b2cc59a94a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ce:29:2e:93:f5:36:8d:c4:a3:32:c4:f4:57:ba:98:fc:ea:
         5a:fc:fd:48:40:85:6e:29:5a:6a:1a:82:43:18:f7:98:c4:60:
         8c:64:2a:8c:41:a5:6e:d9:c9:d0:61:0a:2a:f2:e7:b5:17:af:
         fd:f3:e1:2a:06:d9:01:cc:80:0a:17:65:87:d2:dc:c3:55:09:
         13:81:92:60:a7:78:fa:7c:0d:5e:56:fc:2b:7b:90:7a:6d:ce:
         72:87:ca:f4:fd:b5:9b:4f:24:0a:25:8d:a9:af:c7:64:24:4d:
         ab:6d:d4:f6:ef:74:a2:cc:e4:44:a3:52:94:1a:d7:de:60:66:
         72:23:00:e6:d3:2f:f8:4c:f5:e3:3b:8d:2c:a7:69:21:8f:ba:
         ea:c7:c6:73:0d:0b:2f:55:4d:58:93:1e:71:0b:64:c4:b1:40:
         3b:d5:71:de:db:00:9f:97:66:27:e4:10:d6:23:55:84:85:f0:
         88:bb:b7:e8:bf:10:a4:41:a4:67:6c:9f:1f:8e:7f:0f:c0:b8:
         ab:28:e5:51:bd:a9:81:ab:e5:43:e5:6d:c2:b5:d0:c3:1a:10:
         c7:78:96:fa:6e:8a:5d:4c:a8:6c:34:42:25:91:36:27:1e:34:
         06:71:44:58:69:24:18:d7:13:06:f6:30:12:dc:2b:95:f5:4d:
         c1:5a:5e:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfa/Ai/sMDWzH0t6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTExMjEzNTM1OVoXDTI1MDIxMDEzNTM1OVowLzEtMCsGA1UEAxMk
ZmFmYmZjZjQtZDBlNy00Mzk3LTk2YTQtNzRjYTkyMmMwYjkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3H02t21zZx+IOSVdx8XgEtJuc7gJajYjHb7
LmZkB2JZQf6+BsxBeW7s1Jk5zBo6TmAGSUm9V+hF0BPdStjhqPmoIqS2WaM0yHO6
6cDpNPmt19ylRNz+ZIegz/kWeuBWGVXDrHXdAxDraINE5idmsMsLWPevQNpqKBvv
g4Qcb4zo9blyQeyyT9ZuXo9fz2r1AGEY2gzxRopIxTOW+5tQqfKUGWZVucEmXIn0
c7PoVL3rHPTKdaEDUTyQHIsLJL+Bms1UO4Nmd/w6NWxYqy1sqaIddMFMOMNCLxz5
noBnBJ3ohIHv3Skz23pVCbKX7rCy0fo8xR4xGEn646u1EXrDuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCaTcErAg2rg38kDaB4QBK19zaaPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmRhM2JmMDktYWZkYy0z
ZDI2LWJjMmEtOGIyY2M1OWE5NGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDl0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbOKS6T9TaNxKMyxPRXupj86lr8/UhAhW4pWmoagkMY95jEYIxkKoxB
pW7ZydBhCiry57UXr/3z4SoG2QHMgAoXZYfS3MNVCROBkmCnePp8DV5W/Ct7kHpt
znKHyvT9tZtPJAoljamvx2QkTatt1PbvdKLM5ESjUpQa195gZnIjAObTL/hM9eM7
jSynaSGPuurHxnMNCy9VTViTHnELZMSxQDvVcd7bAJ+XZifkENYjVYSF8Ii7t+i/
EKRBpGdsnx+Ofw/AuKso5VG9qYGr5UPlbcK10MMaEMd4lvpuil1MqGw0QiWRNice
NAZxRFhpJBjXEwb2MBLcK5X1TcFaXvo=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:39 2024 by rpki-client on console-fra.rpki-client.org