Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/867519c4-fa80-3285-91eb-5c354edeb74a.roa
File:                     867519c4-fa80-3285-91eb-5c354edeb74a.roa (raw, json)
Hash identifier:          FgBQPhvbaZujR61uUxCSRr/xzGHdGXvx+9YGopSpNJ4=
Subject key identifier:   C1:25:D7:94:52:35:30:B1:11:2F:E6:FB:41:00:46:11:96:3E:78:5D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB5613C011B15FBDD4E300
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/867519c4-fa80-3285-91eb-5c354edeb74a.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     202
IP address blocks:        192.57.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:56:13:c0:11:b1:5f:bd:d4:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=7f77691c-c149-46f6-a320-5ef67fe0576a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a4:ab:d0:e1:0d:29:6e:ff:1f:0c:77:72:d8:
                    93:3d:6a:99:fd:f0:a4:91:09:6e:38:a3:0a:9e:f8:
                    2a:51:9b:ec:28:27:7d:dd:e1:1f:4d:12:51:b1:e8:
                    5b:5a:22:50:67:48:56:de:f4:dd:6f:7d:3e:5f:f2:
                    45:21:15:b4:98:d5:84:3d:14:fd:47:36:04:2e:79:
                    57:5d:6d:d3:c3:8a:6c:02:48:e8:02:0e:74:b5:ea:
                    e0:97:45:a6:33:98:bd:4e:3c:ae:1e:36:6a:84:e8:
                    5b:5b:f3:1e:46:b8:f2:6f:c4:60:06:d1:21:3b:66:
                    88:2d:5b:ca:5b:f1:e2:ec:54:dd:ef:1f:9b:a1:5a:
                    4f:bb:22:8e:cd:40:ca:b5:8a:f5:10:07:3f:fe:15:
                    0c:64:93:bc:fd:fa:f7:11:37:75:61:0c:21:09:ce:
                    69:bb:a7:1b:dd:74:c7:d3:bc:0b:ba:d3:b6:a1:16:
                    f3:05:47:d9:4d:30:a2:ae:12:ca:13:4f:d7:f8:1a:
                    66:c4:b8:75:e9:d9:d0:fb:cb:5b:f7:d8:8c:26:c8:
                    e0:cb:bf:51:42:6d:5a:03:dc:66:41:8d:ec:79:1c:
                    e6:89:ff:b4:10:9a:b1:11:0f:81:9e:d7:23:3b:6c:
                    b7:44:43:2b:e8:a1:4a:93:0a:58:01:3c:03:35:a2:
                    f4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:25:D7:94:52:35:30:B1:11:2F:E6:FB:41:00:46:11:96:3E:78:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/867519c4-fa80-3285-91eb-5c354edeb74a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:10:ef:b8:cb:72:56:d9:ea:7e:40:9a:01:17:f6:0e:2d:18:
         b5:c3:ad:58:11:ac:01:e2:ce:05:bf:b0:c6:88:6f:cd:e0:48:
         9c:fd:d0:fd:f0:f6:b0:32:4d:6f:fc:3f:be:20:98:84:b0:56:
         88:c6:16:af:f8:ef:a7:d5:7b:0d:44:7a:6c:fa:fb:13:6d:c6:
         6a:0c:b5:dd:47:1e:07:2e:56:96:37:b1:50:e2:61:62:3c:09:
         74:3f:03:26:92:ec:e4:c6:92:a6:55:b2:45:d9:3d:3a:a1:9c:
         ab:73:0a:d9:1a:94:49:e7:da:82:09:fe:0a:de:4d:4b:e6:d0:
         7c:8a:a1:fa:1b:6a:56:3b:2e:9f:ae:42:b6:88:3e:79:67:e4:
         7b:b9:35:9f:4e:bd:30:23:36:37:05:61:22:9b:be:2a:44:a2:
         ba:3b:fd:83:b2:fc:69:c9:38:5b:ef:01:57:4b:1c:b4:66:eb:
         7e:37:69:e9:87:36:72:73:d8:d0:d5:fa:72:d9:ad:a4:6a:e4:
         c1:08:18:62:29:fa:14:38:3b:48:9d:d0:b9:40:01:58:d6:a2:
         ac:d7:22:5f:9a:d7:80:57:d3:16:a3:0e:25:f8:72:c1:78:e3:
         4a:64:27:b5:ef:02:ff:16:e3:66:9c:11:11:46:b6:52:aa:ec:
         d1:1d:c1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:25 2025 by rpki-client