Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ab7af931-8943-3129-8728-e91d112e0a40.roa
File:                     ab7af931-8943-3129-8728-e91d112e0a40.roa (raw, json)
Hash identifier:          b8yU8YHGE22kLE4KZ8pjDzYwVjXkaYltrdGNmdneec8=
Subject key identifier:   B5:70:7C:2E:74:77:6F:A8:C7:58:F3:47:7C:05:62:4F:1E:C8:94:F1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584752ADEED56A3AFB046D94F240
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ab7af931-8943-3129-8728-e91d112e0a40.roa
Signing time:             Tue 24 Sep 2024 18:06:41 +0000
ROA not before:           Tue 24 Sep 2024 18:06:41 +0000
ROA not after:            Mon 23 Dec 2024 19:06:41 +0000
asID:                     3360
IP address blocks:        204.105.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:ad:ee:d5:6a:3a:fb:04:6d:94:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 24 18:06:41 2024 GMT
            Not After : Dec 23 19:06:41 2024 GMT
        Subject: CN=b3d17072-31a0-4d90-82c5-05297a8d7098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ab:d7:08:4e:91:44:6e:e5:64:ca:ca:1d:31:
                    ae:d8:66:8a:fc:11:51:78:80:c9:59:39:0f:44:65:
                    70:e3:42:f3:8a:96:b5:20:23:06:85:88:30:11:f5:
                    ee:22:ff:4d:cf:32:a1:53:89:88:9b:eb:a1:5b:5e:
                    c9:cf:a7:cd:80:ad:1c:93:b8:5b:1d:23:5c:a0:12:
                    9b:6d:b4:03:7b:41:c6:04:2d:fc:e6:dc:a0:2f:e2:
                    4e:58:1c:20:e9:1a:f7:37:93:65:2d:8d:15:28:8c:
                    6d:9d:02:e8:01:90:be:39:17:75:41:0a:f2:46:75:
                    3a:9c:57:75:a9:f7:d2:31:16:15:b3:64:6d:39:37:
                    2f:28:4a:59:65:ef:14:a5:e3:1f:7d:08:61:28:f7:
                    b4:32:51:64:28:42:8a:97:75:d1:12:02:39:12:f4:
                    ad:f5:05:84:ea:1d:44:08:5e:1c:d3:f0:22:3c:0e:
                    b8:16:f4:cd:98:c7:e3:94:9f:6c:40:2f:47:a1:08:
                    92:1c:2a:ff:2f:9b:27:0d:a8:33:72:d7:7e:c9:3a:
                    04:30:92:fa:a3:8a:c7:1c:46:21:ef:c6:f7:e0:4d:
                    58:97:af:67:55:be:2d:0f:23:7c:d5:1f:af:c4:0a:
                    ec:05:07:c7:4d:a0:d1:64:8a:e5:d6:b6:0f:3c:94:
                    8d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:70:7C:2E:74:77:6F:A8:C7:58:F3:47:7C:05:62:4F:1E:C8:94:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ab7af931-8943-3129-8728-e91d112e0a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:14:39:ec:69:38:23:30:2b:6c:ec:bd:8a:96:f5:ec:1c:3b:
         51:ed:5d:62:23:fc:55:a2:6e:4e:02:2c:32:21:44:d1:a0:d1:
         a8:50:0b:b3:00:9e:bd:fe:e5:7e:b3:ff:0f:36:05:70:2c:06:
         16:41:aa:20:e8:49:57:a5:c3:f5:74:12:69:58:ef:25:84:cf:
         c0:08:ca:d3:aa:ba:60:9d:03:a5:63:e9:64:4c:48:e0:4e:71:
         e6:b1:05:89:c0:e0:62:9b:74:fe:5a:fb:40:b5:24:a3:08:b4:
         c3:f7:54:12:1e:c5:81:c1:94:a0:80:5f:9f:57:a6:63:6a:d6:
         87:a3:f6:93:37:bc:36:a8:b7:bc:fe:0b:01:6c:da:03:89:3d:
         8d:36:bb:b9:4d:c4:9e:ef:a5:c3:7d:c4:94:b7:45:dd:df:ef:
         f6:e0:5b:29:6a:67:f7:39:33:a4:6e:ef:ca:52:36:e3:05:0a:
         8d:6d:91:9d:b4:c7:63:a9:d4:30:b4:5e:87:03:6b:93:f4:df:
         ad:6f:a5:56:a1:24:ef:f9:3e:e8:73:7c:d5:5a:8b:00:54:97:
         67:98:39:f3:de:0a:3e:8f:1d:fc:33:57:01:0e:40:54:4c:21:
         0d:a6:ad:9d:e4:dd:71:d2:b5:79:31:bd:c4:05:7e:d6:61:97:
         43:aa:c5:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSre7Vajr7BG2U8kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MDkyNDE4MDY0MVoXDTI0MTIyMzE5MDY0MVowLzEtMCsGA1UEAxMk
YjNkMTcwNzItMzFhMC00ZDkwLTgyYzUtMDUyOTdhOGQ3MDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKvXCE6RRG7lZMrKHTGu2GaK/BFReIDJWTkP
RGVw40Lzipa1ICMGhYgwEfXuIv9NzzKhU4mIm+uhW17Jz6fNgK0ck7hbHSNcoBKb
bbQDe0HGBC385tygL+JOWBwg6Rr3N5NlLY0VKIxtnQLoAZC+ORd1QQryRnU6nFd1
qffSMRYVs2RtOTcvKEpZZe8UpeMffQhhKPe0MlFkKEKKl3XREgI5EvSt9QWE6h1E
CF4c0/AiPA64FvTNmMfjlJ9sQC9HoQiSHCr/L5snDagzctd+yToEMJL6o4rHHEYh
78b34E1Yl69nVb4tDyN81R+vxArsBQfHTaDRZIrl1rYPPJSN2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLVwfC50d2+ox1jzR3wFYk8eyJTxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWI3YWY5MzEtODk0My0z
MTI5LTg3MjgtZTkxZDExMmUwYTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGl1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUUOexpOCMwK2zsvYqW9ewcO1HtXWIj/FWibk4CLDIhRNGg0ahQC7MA
nr3+5X6z/w82BXAsBhZBqiDoSVelw/V0EmlY7yWEz8AIytOqumCdA6Vj6WRMSOBO
ceaxBYnA4GKbdP5a+0C1JKMItMP3VBIexYHBlKCAX59XpmNq1oej9pM3vDaot7z+
CwFs2gOJPY02u7lNxJ7vpcN9xJS3Rd3f7/bgWylqZ/c5M6Ru78pSNuMFCo1tkZ20
x2Op1DC0XocDa5P0361vpVahJO/5PuhzfNVaiwBUl2eYOfPeCj6PHfwzVwEOQFRM
IQ2mrZ3k3XHStXkxvcQFftZhl0OqxYY=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:41 2024 by rpki-client on console-fra.rpki-client.org