Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b2e95913-2fdc-3351-aa1f-380f64655573.roa
File:                     b2e95913-2fdc-3351-aa1f-380f64655573.roa (raw, json)
Hash identifier:          8J4IXMOTWEjHwzmtNkJlLKL19VDStAmrK06qtHrevkk=
Subject key identifier:   23:7A:F4:57:81:36:ED:C3:94:2C:3B:BD:34:F6:CE:FC:D7:72:DE:25
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847362B51A5547922A9EACAA460
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b2e95913-2fdc-3351-aa1f-380f64655573.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     132451
IP address blocks:        168.87.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:51:a5:54:79:22:a9:ea:ca:a4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=60f55e3f-00c3-4103-8453-901456d2b149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e2:15:c7:74:2b:6e:d9:d4:ab:9f:b0:11:7e:
                    be:44:0a:78:f2:8b:f5:81:27:65:4a:da:32:f3:ba:
                    90:4b:9b:05:bf:48:f7:43:e4:0b:59:6a:4f:86:e1:
                    b5:d1:58:c0:81:8c:d6:52:84:d9:a5:0e:c9:f0:aa:
                    b4:b8:cb:c0:14:54:ec:bf:7e:b4:b5:31:f7:5b:1e:
                    1f:ee:98:13:a7:93:0e:61:f5:d7:02:ec:2c:70:c0:
                    2c:eb:77:93:ff:ec:37:2a:50:c9:a3:37:a4:5b:54:
                    2c:82:2c:5e:9b:7f:cd:73:4c:eb:08:77:27:72:11:
                    12:0e:a6:17:4f:c4:6f:cf:99:67:fe:59:6a:9b:38:
                    e4:24:1d:50:d5:37:ca:0c:1a:d3:ae:5b:c4:cb:c9:
                    6e:b1:ca:4f:f1:59:b1:ad:af:41:3f:8a:be:7e:43:
                    1a:a6:df:a2:f5:16:8d:86:38:3c:6c:c4:3c:6f:1d:
                    11:61:16:6e:a4:f8:15:5c:0b:c4:d8:9d:75:96:c0:
                    8b:62:a2:77:ad:97:ac:0d:66:1b:0b:e2:1d:10:f9:
                    77:1e:00:84:56:16:8a:f4:f7:a6:31:b9:3c:3f:09:
                    23:43:31:37:a8:1c:73:56:6c:bf:52:51:c1:d6:9d:
                    0d:c1:9a:f7:ac:1b:7b:11:21:41:7a:d3:1f:1f:49:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7A:F4:57:81:36:ED:C3:94:2C:3B:BD:34:F6:CE:FC:D7:72:DE:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b2e95913-2fdc-3351-aa1f-380f64655573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:4c:08:0d:3c:fd:6a:92:10:9d:19:14:cf:72:6e:57:f1:60:
         dd:8b:a0:88:2e:b7:69:d3:e8:c6:76:1a:81:20:e1:79:b7:66:
         dc:5e:cb:37:cf:8e:e9:05:a8:f2:0f:e2:0b:cf:b2:c4:ef:8a:
         22:4f:06:0d:41:13:07:02:e7:67:fd:b2:9d:3a:eb:d3:31:79:
         65:28:66:53:86:5e:64:ad:c5:40:39:ee:51:94:1e:04:15:2d:
         1c:2b:ad:17:01:52:e0:9d:a0:44:22:05:6e:58:53:7c:e0:b5:
         5f:31:01:e9:59:51:98:70:3f:18:9a:8c:62:36:50:7c:98:29:
         81:fc:5d:2d:a9:1f:d3:98:ba:2e:04:31:44:cc:08:36:cd:ae:
         80:49:6e:b7:56:74:1e:97:78:7d:8c:31:91:bd:6e:06:b5:6e:
         18:0e:49:73:23:b7:9e:d2:2d:6f:40:c1:c8:80:29:1e:08:19:
         74:28:70:0d:fb:55:0e:9a:07:cb:83:c3:0a:74:d8:e3:d8:15:
         ae:f6:f7:b9:b8:79:ff:76:01:3b:20:75:8f:4d:d6:e3:6b:4d:
         9c:08:a8:bf:b5:46:ac:3a:e1:33:7f:c5:4e:80:a2:d1:08:91:
         bd:a6:bc:87:ee:38:d1:96:a2:30:e1:dd:1e:82:72:b6:ea:38:
         82:f8:65:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2K1GlVHkiqerKpGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk
NjBmNTVlM2YtMDBjMy00MTAzLTg0NTMtOTAxNDU2ZDJiMTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOIVx3QrbtnUq5+wEX6+RAp48ov1gSdlStoy
87qQS5sFv0j3Q+QLWWpPhuG10VjAgYzWUoTZpQ7J8Kq0uMvAFFTsv360tTH3Wx4f
7pgTp5MOYfXXAuwscMAs63eT/+w3KlDJozekW1Qsgixem3/Nc0zrCHcnchESDqYX
T8Rvz5ln/llqmzjkJB1Q1TfKDBrTrlvEy8luscpP8Vmxra9BP4q+fkMapt+i9RaN
hjg8bMQ8bx0RYRZupPgVXAvE2J11lsCLYqJ3rZesDWYbC+IdEPl3HgCEVhaK9Pem
Mbk8PwkjQzE3qBxzVmy/UlHB1p0NwZr3rBt7ESFBetMfH0mx8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCN69FeBNu3DlCw7vTT2zvzXct4lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjJlOTU5MTMtMmZkYy0z
MzUxLWFhMWYtMzgwZjY0NjU1NTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJMCA08/WqSEJ0ZFM9yblfxYN2LoIgut2nT6MZ2GoEg4Xm3ZtxeyzfP
jukFqPIP4gvPssTviiJPBg1BEwcC52f9sp0669MxeWUoZlOGXmStxUA57lGUHgQV
LRwrrRcBUuCdoEQiBW5YU3zgtV8xAelZUZhwPxiajGI2UHyYKYH8XS2pH9OYui4E
MUTMCDbNroBJbrdWdB6XeH2MMZG9bga1bhgOSXMjt57SLW9AwciAKR4IGXQocA37
VQ6aB8uDwwp02OPYFa7297m4ef92ATsgdY9N1uNrTZwIqL+1Rqw64TN/xU6AotEI
kb2mvIfuONGWojDh3R6CcrbqOIL4Ze4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:48 2024 by rpki-client on console-ams.rpki-client.org