Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a6c01821-fbe9-38fd-8414-96b313f4fedc.roa
File:                     a6c01821-fbe9-38fd-8414-96b313f4fedc.roa (raw, json)
Hash identifier:          mq7+dY8oERJSZlkR2DzjeX8L1VxPgwsxcMEYzTQ0wjo=
Subject key identifier:   6F:7A:59:62:C9:45:1D:B3:51:40:A9:1A:77:FE:24:A4:77:A9:3C:E4
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858472B8AB700BFD97AC9384615C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a6c01821-fbe9-38fd-8414-96b313f4fedc.roa
Signing time:             Tue 10 Sep 2024 17:39:12 +0000
ROA not before:           Tue 10 Sep 2024 17:39:12 +0000
ROA not after:            Mon 09 Dec 2024 18:39:12 +0000
asID:                     3356
IP address blocks:        206.122.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:8a:b7:00:bf:d9:7a:c9:38:46:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 10 17:39:12 2024 GMT
            Not After : Dec  9 18:39:12 2024 GMT
        Subject: CN=3cc0d9b5-8c39-41fe-900a-4fb9032a28b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:78:59:4d:72:e2:ae:9b:17:fd:ed:da:9a:ec:
                    25:85:d0:ef:0b:f6:80:6c:d0:1e:50:61:72:52:67:
                    8c:53:d5:9d:58:1b:de:26:d2:86:4c:53:26:54:09:
                    43:3b:49:7d:57:84:d2:2b:cb:fe:22:58:06:7d:83:
                    20:7f:01:b5:98:28:ae:32:6f:f0:0c:51:40:d5:63:
                    e7:7d:c1:00:16:83:26:42:c8:c2:15:bd:c5:9b:83:
                    26:5b:54:b8:78:f3:fe:b5:3e:aa:98:38:b5:fb:5f:
                    56:6d:8a:32:80:86:ec:8f:c4:a1:01:02:73:b2:84:
                    db:24:3e:6a:0d:21:d3:9f:cc:a2:61:b4:92:2b:15:
                    cf:16:1c:ef:52:48:63:5f:ac:8c:0c:68:36:ab:14:
                    e0:0a:5c:4a:18:9d:ec:0b:b4:17:68:9a:dc:0e:bb:
                    f4:ac:57:66:20:51:91:91:24:e1:3a:5c:03:60:65:
                    64:65:dd:a2:3a:ff:64:8c:f9:a3:8b:06:5b:58:7c:
                    f1:8e:84:f3:df:be:11:f1:cd:b6:88:75:65:65:bd:
                    b5:8c:e8:b8:85:65:09:ea:ab:78:4e:28:70:8c:c6:
                    e6:45:a1:cf:d0:d0:ba:91:ef:41:ff:ef:b4:b3:3b:
                    d0:2e:12:06:d5:7d:05:35:06:2e:a9:e4:90:48:3e:
                    3d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7A:59:62:C9:45:1D:B3:51:40:A9:1A:77:FE:24:A4:77:A9:3C:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a6c01821-fbe9-38fd-8414-96b313f4fedc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.122.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5c:00:27:d7:89:57:ae:83:92:62:ba:08:c4:69:b1:45:4e:
         73:a9:c5:ad:72:0b:51:92:f7:76:14:55:c5:8b:7b:ab:97:1f:
         55:fe:bc:ad:c6:c0:7b:e3:42:c5:e7:68:74:da:bd:44:f1:8d:
         63:72:f2:e9:7a:25:e3:26:ad:6c:8d:74:b0:0c:ba:49:e8:76:
         36:c9:d2:40:c9:c1:6d:55:4c:f8:cc:04:ab:b5:80:ae:dd:d7:
         65:e2:d0:f5:57:7d:15:d9:9f:2e:b5:a9:cb:ac:94:24:85:9d:
         3c:21:a5:35:8f:7f:2e:ef:c6:8b:4e:49:f6:2f:33:e7:3e:58:
         cf:d2:dc:10:eb:cc:ae:00:10:74:5b:c9:c7:1e:56:6e:1a:4c:
         86:1a:e6:d5:48:80:df:7d:2a:fc:2b:86:98:0f:b8:b2:99:d2:
         ab:90:e5:76:9d:22:51:61:7e:e2:35:3a:61:96:63:21:9c:00:
         1a:e3:92:7d:72:69:36:cb:09:ca:fe:9d:94:99:9f:e5:88:13:
         5a:46:09:3d:05:05:55:11:19:b3:d1:ba:34:18:83:25:39:2c:
         a7:4c:2a:7f:aa:71:fc:73:de:91:2a:8a:a8:89:f8:39:7b:98:
         f8:8e:8b:0a:79:15:a2:a2:22:ca:ba:36:a5:76:80:46:18:98:
         b4:4f:7e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:48 2024 by rpki-client on console-ams.rpki-client.org