Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a080b260-2012-373f-9010-a38709b84ea4.roa
File:                     a080b260-2012-373f-9010-a38709b84ea4.roa (raw, json)
Hash identifier:          x2MrQaxXN7nhF1SVAE4hSg8/tCaoqk8D5MrS6jACrnw=
Subject key identifier:   19:D2:5D:6D:B7:8E:A9:AF:6A:B4:2E:90:40:72:A3:3B:F7:D1:1F:C1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584752ACD785312F4CFD3D658FC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a080b260-2012-373f-9010-a38709b84ea4.roa
Signing time:             Tue 24 Sep 2024 18:04:29 +0000
ROA not before:           Tue 24 Sep 2024 18:04:29 +0000
ROA not after:            Mon 23 Dec 2024 19:04:29 +0000
asID:                     202
IP address blocks:        192.208.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:ac:d7:85:31:2f:4c:fd:3d:65:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 24 18:04:29 2024 GMT
            Not After : Dec 23 19:04:29 2024 GMT
        Subject: CN=7d07401c-3fcd-456d-a1bb-7828a9434033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:34:86:eb:16:b3:66:36:a4:c1:44:49:a8:ab:
                    e1:be:0e:d3:4a:db:8a:4d:f4:59:32:db:2d:f5:51:
                    5c:83:a1:02:44:9b:e6:84:b5:78:78:7d:d6:1d:67:
                    28:51:e7:a5:58:e1:9b:91:e6:53:9f:2e:6d:31:64:
                    c7:1b:ae:62:53:4d:bc:7b:5b:cf:75:c3:71:a6:aa:
                    c4:27:f1:e2:2f:8d:02:40:b2:3f:c7:3e:7b:b3:0b:
                    d8:6d:74:91:40:e4:7d:c4:04:83:15:85:1b:c0:1c:
                    30:74:9a:24:53:b5:e3:9b:1e:63:6c:ff:4e:bc:7e:
                    b8:32:2a:e0:04:7e:31:c9:49:35:4e:18:2c:3f:8a:
                    64:a6:8d:37:cf:4a:2d:c8:fc:4c:73:cc:99:46:dc:
                    6a:44:50:af:3b:b6:40:9e:aa:8f:5c:67:59:fe:43:
                    ad:bf:99:35:af:cb:07:c1:d6:94:f4:35:56:c4:88:
                    4a:8f:df:10:b7:32:18:5b:df:e2:4f:2c:7f:4d:66:
                    b6:70:22:bc:5b:d0:b3:b3:b7:85:70:f2:8e:ff:4d:
                    f0:cf:4b:c3:81:19:63:2f:cd:07:f7:70:2b:94:9e:
                    50:af:99:ea:42:12:62:9a:08:de:88:de:60:3c:58:
                    d7:09:57:46:16:9f:6d:f3:86:7c:2d:ee:01:7d:f5:
                    f7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D2:5D:6D:B7:8E:A9:AF:6A:B4:2E:90:40:72:A3:3B:F7:D1:1F:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a080b260-2012-373f-9010-a38709b84ea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:6a:eb:91:7d:28:86:25:60:00:a0:ec:09:ca:db:b8:76:3c:
         fb:d3:c0:61:46:68:45:ec:99:0f:ab:3a:0a:65:80:86:cb:c8:
         5a:fb:16:3d:29:01:33:20:ff:5d:de:4a:72:6d:35:06:ea:5d:
         41:39:41:e4:b2:0e:32:c1:ec:59:18:4b:a7:d3:b4:51:ef:5e:
         6d:89:ed:61:1e:43:00:09:6f:4e:6f:c9:3a:be:16:b1:ed:86:
         7a:5b:1c:96:f0:6a:db:cf:12:d6:86:89:c6:26:a8:29:33:28:
         66:c3:99:db:ae:5c:e3:92:7b:96:fb:97:b7:97:45:80:e6:35:
         90:d3:51:0b:44:45:67:00:36:20:61:aa:ee:aa:18:92:41:07:
         be:a7:d0:6d:9e:bb:ed:7b:ab:a3:c2:50:b2:24:05:ac:4e:f6:
         5e:46:ae:44:a3:73:9a:bb:fd:e4:0e:8f:ed:53:20:a7:b2:76:
         9c:48:33:89:85:6b:1b:65:d3:ae:e5:e4:4b:82:7f:d0:d3:84:
         e4:56:37:3f:9b:1f:19:34:f0:e1:39:d1:77:98:e5:2b:16:2c:
         a1:1c:b9:55:34:da:12:07:af:35:10:3e:1a:47:30:d3:05:af:
         4b:d0:2f:01:98:29:85:9e:17:d5:69:06:43:84:8f:b5:5c:98:
         b7:38:51:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:40 2024 by rpki-client on console-fra.rpki-client.org