Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/96a64392-0b0c-38bd-a73c-b41b60dace40.roa
File:                     96a64392-0b0c-38bd-a73c-b41b60dace40.roa (raw, json)
Hash identifier:          k1FZpSUvMNKP9KLRhtTkOIsYcIWeIdTDD/MdgRJoCuI=
Subject key identifier:   45:17:53:4F:E3:57:5D:69:AD:6B:4E:EB:7E:D7:83:4F:18:BB:90:72
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848B35B6B7C8C5EA31665A9B980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/96a64392-0b0c-38bd-a73c-b41b60dace40.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     3360
IP address blocks:        168.87.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:6b:7c:8c:5e:a3:16:65:a9:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=c198beea-67a9-468a-ba78-70fd0a584046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:81:61:2d:8d:b1:ad:66:7c:60:3b:b2:e4:cf:
                    80:64:32:5d:8d:61:ce:c3:10:02:af:f9:c9:15:6f:
                    6c:6b:19:59:90:bb:a3:f8:d2:8d:93:60:87:6c:4a:
                    35:1f:92:1c:c9:5e:36:d5:44:6c:e0:99:32:c9:72:
                    9c:22:d3:45:9f:45:2b:8b:30:8f:ba:44:e3:89:58:
                    81:d6:d0:3e:8e:39:cc:87:85:45:37:42:47:ae:60:
                    bf:20:1b:5a:00:ee:f4:a5:56:96:b9:ab:c9:76:02:
                    34:e1:09:1a:b0:34:76:0e:90:55:df:1f:ce:cc:e0:
                    f9:95:2d:78:67:cd:56:97:cf:54:9a:b8:13:f7:f3:
                    1f:d5:f9:fd:5c:6b:c3:51:7d:3e:1c:6d:b4:c9:63:
                    20:50:2a:84:bf:e1:eb:6c:f5:53:5a:12:5c:4a:b7:
                    d5:85:10:59:af:6f:12:db:6a:49:e0:b4:af:a8:2d:
                    88:02:67:b0:62:76:32:d7:78:69:30:35:b1:fd:b3:
                    ae:58:d7:01:d1:c4:f6:ec:36:71:27:5b:9b:84:6f:
                    13:1c:c6:a6:1e:ee:f1:e5:8e:af:5b:5a:ff:e9:04:
                    70:20:43:f5:b8:2a:6a:81:ac:ca:73:46:e8:e2:1c:
                    d0:78:87:8d:31:12:88:14:17:5e:81:5d:b6:3d:98:
                    69:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:17:53:4F:E3:57:5D:69:AD:6B:4E:EB:7E:D7:83:4F:18:BB:90:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/96a64392-0b0c-38bd-a73c-b41b60dace40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:24:d2:19:4d:9b:d8:7d:94:f0:3f:87:37:fc:18:16:4d:35:
         7e:fb:89:8f:0c:4f:5a:b6:cb:bc:dd:d2:60:05:15:ad:38:86:
         31:ec:0a:6c:ce:66:69:b6:2b:e9:da:58:44:25:a9:f5:93:1f:
         d2:83:dd:d4:4b:57:4f:46:eb:74:c6:8a:32:6b:d2:c1:87:e0:
         16:30:44:43:7f:e5:7c:12:95:dc:6d:37:1c:dc:be:ea:6c:8d:
         6c:07:e6:07:a3:12:b5:23:ba:63:06:f8:73:e5:0c:9f:73:f9:
         a6:e6:5c:4e:08:8e:20:19:ad:2d:a1:5f:f6:b3:88:c0:cf:8b:
         da:98:8f:e3:4f:7c:83:51:6a:70:56:d0:73:11:5d:ab:4a:73:
         9d:31:95:6a:88:40:44:97:f1:3c:07:24:9a:31:1f:ee:05:c7:
         90:bb:c9:42:29:96:fb:3e:d1:9e:65:b8:c8:4d:81:11:22:e6:
         37:ef:6a:80:17:1f:bd:35:de:6f:2d:75:62:de:16:34:30:53:
         ca:2d:ed:5e:9c:32:61:e0:83:3f:d1:79:d2:12:25:23:90:60:
         35:6c:d5:cc:a9:ca:2c:cf:4a:75:43:35:14:9e:9d:d3:9e:ff:
         8e:f6:af:30:33:bb:99:08:1e:87:c7:85:94:da:2b:6c:8c:9a:
         41:7c:c0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:52 2025 by rpki-client