Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94de0a52-c6eb-3fbb-9b83-e51e3984f5ac.roa
File:                     94de0a52-c6eb-3fbb-9b83-e51e3984f5ac.roa (raw, json)
Hash identifier:          PrGb59ZwrF56F+/l9w3zu2TxwlzMIm5g2+y8xLXEQ5k=
Subject key identifier:   C5:8D:26:B7:E9:F7:7F:AF:30:80:D1:F8:D2:EF:9C:06:4B:33:82:88
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847CE6F4E384747B1D29C9934F0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94de0a52-c6eb-3fbb-9b83-e51e3984f5ac.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     3356
IP address blocks:        216.240.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:4e:38:47:47:b1:d2:9c:99:34:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=dc3a1c39-bb05-492f-bcc5-15bb2fe06d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:0b:ba:e2:8d:7b:84:46:11:7e:e1:80:87:
                    4f:71:0c:03:ab:13:4b:9a:67:2d:62:b7:43:60:d3:
                    f1:d8:a4:4c:d0:9d:bc:9f:d7:71:ab:24:08:57:41:
                    3b:04:17:34:94:4b:cb:d7:df:16:98:57:22:d9:ed:
                    bf:3a:a7:1a:e5:a5:fb:b5:e5:6e:7e:e3:da:a3:bf:
                    f5:28:eb:9c:59:a8:1e:6c:c3:6c:7a:3a:27:4c:0f:
                    2b:39:e8:8d:b8:29:15:67:06:42:cd:d8:78:01:ea:
                    1b:e0:f0:6d:05:00:ec:5d:bd:b5:c7:91:00:b1:a7:
                    b3:b7:26:c6:72:82:99:97:46:5f:a9:c2:05:f6:91:
                    80:3e:74:a5:62:3f:b5:ad:fa:56:d9:81:fc:04:48:
                    88:e0:aa:df:a6:4c:a8:a9:84:6d:e6:16:4d:a2:69:
                    e9:41:7a:ea:04:e4:58:ec:6e:f8:2c:1a:d4:87:63:
                    96:27:9c:6d:0f:ab:26:e0:43:dd:97:30:ca:8d:6f:
                    9e:9c:e2:c4:8d:49:d3:fa:fa:73:88:d0:0f:28:44:
                    4b:c6:c3:24:53:f1:72:eb:47:31:97:7e:bd:a8:f2:
                    cd:d8:ec:91:a0:c6:f2:77:19:5e:10:5f:f5:c1:b1:
                    71:e9:3c:4c:c1:cb:4c:21:13:2c:57:d2:84:f0:8b:
                    e3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8D:26:B7:E9:F7:7F:AF:30:80:D1:F8:D2:EF:9C:06:4B:33:82:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/94de0a52-c6eb-3fbb-9b83-e51e3984f5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.240.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:56:6a:a0:3c:2e:95:d3:67:59:de:96:5d:38:30:39:56:ed:
         af:9f:81:28:60:e6:83:f4:09:36:73:d1:66:0e:57:7f:c3:48:
         74:d2:97:42:f9:ce:a5:98:4f:7f:3a:cc:6c:6c:73:d6:87:4c:
         4a:1a:fb:6d:c6:e7:ab:ea:db:a2:74:d0:91:70:cf:c8:88:60:
         f7:82:b2:e9:e3:85:30:12:fd:de:16:ff:19:d0:5f:39:fa:79:
         f0:f7:67:c2:27:6d:68:d7:b5:11:df:e6:2d:4e:22:df:99:fa:
         d2:2c:9c:13:0c:cd:e6:e8:74:67:f5:fb:f3:e6:24:ac:d5:4c:
         03:c6:0f:49:ef:06:68:96:71:da:40:dc:d8:6d:ef:2a:62:d4:
         94:cb:c5:d3:0f:3b:4c:29:ca:0b:60:12:17:45:94:d2:14:92:
         99:88:f7:b3:84:bc:13:b5:36:51:89:e0:0b:20:b8:c1:2d:fe:
         4f:3b:64:f3:3b:92:9f:98:46:2f:45:83:f4:1d:c5:41:01:16:
         ef:24:83:ad:08:f4:36:ad:c9:74:73:93:62:ce:bf:95:9c:43:
         84:77:a3:86:56:9d:cf:49:d1:d3:75:1f:3c:06:bb:cd:86:7e:
         15:bb:50:bf:86:05:31:44:f0:63:ed:63:64:18:08:f6:ce:46:
         1e:36:da:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:44 2024 by rpki-client on console-fra.rpki-client.org