Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/82d9ffc6-8251-3778-bfcc-671c7bbffbb7.roa
File:                     82d9ffc6-8251-3778-bfcc-671c7bbffbb7.roa (raw, json)
Hash identifier:          lQzeDg+UnsPH6cs7tf+4yLgYT+GMRVc83gACuUcHcsw=
Subject key identifier:   A4:B7:F9:25:95:77:95:F5:CB:FC:3D:8D:7D:22:7B:B5:05:63:6E:DF
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584752A3D971017DFF33619550E0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/82d9ffc6-8251-3778-bfcc-671c7bbffbb7.roa
Signing time:             Tue 24 Sep 2024 17:46:22 +0000
ROA not before:           Tue 24 Sep 2024 17:46:22 +0000
ROA not after:            Mon 23 Dec 2024 18:46:22 +0000
asID:                     3356
IP address blocks:        192.85.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:a3:d9:71:01:7d:ff:33:61:95:50:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 24 17:46:22 2024 GMT
            Not After : Dec 23 18:46:22 2024 GMT
        Subject: CN=1e8f79ec-f0b1-4399-9af9-d7bfea88b3d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:93:77:50:36:62:58:58:16:f6:bb:ec:00:ae:
                    78:a2:2c:b7:71:09:a2:c3:9b:85:12:61:55:11:86:
                    17:23:15:e1:90:92:ca:c3:69:38:51:3f:d3:94:06:
                    d9:15:f2:4f:99:37:2a:84:e8:52:1d:d6:5a:21:6d:
                    a7:07:6b:21:87:d7:d2:f4:13:bb:2b:b2:e7:9b:ff:
                    7a:46:4b:c4:ea:e2:8e:52:f7:c6:2b:48:dd:4d:a2:
                    27:34:41:4e:f8:cf:85:80:e6:cb:ae:71:51:6f:8b:
                    86:3f:43:fb:e4:33:d3:b7:47:82:8c:67:0d:db:c6:
                    ba:23:b3:77:14:2e:df:02:ff:2e:48:d3:34:a7:e6:
                    1f:57:03:97:04:70:8f:1c:d7:58:86:c7:ce:ba:8b:
                    fe:ce:d3:a6:e4:cf:cf:8d:5d:b7:8a:94:b1:51:21:
                    66:8a:b3:7a:e2:62:63:1d:ff:6c:e4:89:19:6f:46:
                    03:39:8a:95:6f:eb:b0:d6:95:82:9e:0b:46:29:f8:
                    aa:ec:56:06:c0:58:fb:af:00:3e:e0:fe:24:06:87:
                    37:6c:1b:04:85:2e:66:d0:0e:88:a6:cf:bf:e2:f7:
                    6d:90:6b:91:9a:32:24:e1:33:28:c0:99:31:d7:34:
                    ad:de:b7:48:00:eb:3c:60:08:87:5f:ef:96:9b:af:
                    45:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B7:F9:25:95:77:95:F5:CB:FC:3D:8D:7D:22:7B:B5:05:63:6E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/82d9ffc6-8251-3778-bfcc-671c7bbffbb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:40:e2:14:69:83:6d:01:e4:ec:75:fc:5a:85:d0:1a:67:13:
         97:31:78:20:6b:ef:fe:7a:50:03:ff:fa:7b:39:1a:0e:a3:3d:
         fc:b9:71:d0:12:a3:61:04:3c:34:b2:73:04:82:fe:1f:51:a0:
         83:3f:67:90:18:2f:f8:17:24:56:3a:8e:5e:23:66:cf:ab:dc:
         d7:8d:3e:1e:03:23:9d:08:bd:48:a1:ce:29:93:1e:f8:25:65:
         57:99:c5:1b:04:1c:b8:de:eb:0c:8d:01:91:40:0b:15:ea:dc:
         dd:44:e8:19:cb:34:3e:bb:0a:04:63:98:11:a6:0f:b1:be:75:
         16:95:c6:ae:64:e0:ce:76:0a:39:0e:5b:4c:35:7c:47:d7:fd:
         fb:d6:b4:5e:ce:06:45:38:3a:1b:9b:17:60:e1:b0:35:01:16:
         b0:1c:7c:c4:b7:3c:e1:b1:95:cb:5f:de:6c:25:ce:7a:3c:ee:
         a6:b6:c5:1e:d3:5b:bc:97:7a:41:d6:1c:36:f1:1a:7f:89:63:
         fc:dd:76:5f:a5:3d:ce:64:b2:b7:20:2a:0a:09:99:6f:ca:31:
         9b:fe:cb:7b:47:fd:7b:10:e2:4e:f4:cd:ac:8b:68:ea:73:9e:
         2c:57:fc:0e:0c:88:69:1c:ec:0e:57:8f:20:28:8b:8c:43:d6:
         9a:6f:0f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:44 2024 by rpki-client on console-fra.rpki-client.org