Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4e902ef-3861-3de8-9e6b-51aa1b246987.roa
File:                     b4e902ef-3861-3de8-9e6b-51aa1b246987.roa (raw, json)
Hash identifier:          QJBwYWp7VfAtJoHtwCHW0qfBUZLmu0KHxTqttLBzJ9I=
Subject key identifier:   65:E8:28:60:2C:54:0C:11:30:25:7E:F1:42:07:D2:6D:6B:02:8D:65
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847CAB0A135500249064325A380
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4e902ef-3861-3de8-9e6b-51aa1b246987.roa
Signing time:             Wed 06 Nov 2024 17:49:07 +0000
ROA not before:           Wed 06 Nov 2024 17:49:07 +0000
ROA not after:            Tue 04 Feb 2025 17:49:07 +0000
asID:                     3360
IP address blocks:        192.57.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:b0:a1:35:50:02:49:06:43:25:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov  6 17:49:07 2024 GMT
            Not After : Feb  4 17:49:07 2025 GMT
        Subject: CN=059de89c-0873-45c6-a44d-2ec4e0dce434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d1:10:4f:07:66:d5:5a:20:e0:8b:6b:00:c6:
                    76:86:7b:c7:55:1a:f4:4a:1a:b2:5c:ab:3d:53:f5:
                    aa:c3:35:65:76:95:cb:7b:7f:83:89:9f:2e:6e:96:
                    ab:2f:22:07:2e:17:b9:1c:b5:cd:1a:38:e9:1c:be:
                    77:30:07:df:92:df:ee:d3:18:9e:1e:43:95:ae:90:
                    e2:e5:3a:b4:18:41:36:22:bd:d0:5c:cf:7f:59:b7:
                    d7:eb:51:f0:df:74:03:45:7c:10:18:97:ab:4e:ba:
                    51:6f:e7:a6:6a:e5:ae:ed:87:13:e9:71:a4:7f:3f:
                    d9:5f:e8:fb:e7:c8:f0:e1:60:96:8a:b3:b3:fc:00:
                    60:38:d3:8d:84:77:55:f0:7e:61:12:0c:23:d5:cc:
                    92:20:15:1e:e3:b9:ba:16:17:3c:86:26:85:6c:1f:
                    0d:ae:7e:6a:04:8d:a9:e9:5e:cd:f5:f1:79:9d:db:
                    2d:02:cd:af:3e:90:85:c5:7d:c0:4a:02:ca:fb:7b:
                    0b:7e:b7:4c:eb:86:0e:eb:ee:3e:d2:b1:6f:52:aa:
                    dd:24:0c:09:0e:7a:2c:f1:b6:a6:91:fd:41:4c:de:
                    e2:e4:75:26:60:00:a8:a1:45:d4:2a:0e:50:5c:46:
                    1a:77:5d:d9:32:bf:52:03:5c:b0:14:8e:59:aa:86:
                    de:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E8:28:60:2C:54:0C:11:30:25:7E:F1:42:07:D2:6D:6B:02:8D:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4e902ef-3861-3de8-9e6b-51aa1b246987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3a:2a:35:51:f9:13:f1:ce:d1:fe:12:f2:44:7a:0f:e6:b3:
         8b:14:99:48:b9:1a:c8:20:23:23:b7:d6:ff:29:dc:2d:24:63:
         1a:e7:89:89:b8:76:6a:e0:02:a6:69:45:22:a6:2e:69:84:42:
         6f:14:2d:20:37:0a:79:6a:b1:b4:ff:af:f2:82:94:fb:da:6b:
         9c:27:2e:7e:06:fc:05:bb:d3:39:1e:20:21:14:d3:1a:31:49:
         66:f2:ae:74:b7:56:de:38:fe:77:e8:05:d0:ae:68:ab:7d:2d:
         96:e1:f5:36:01:21:88:5f:23:5f:05:3d:d1:d7:ab:5e:2a:f7:
         1b:f8:91:76:06:bd:30:0d:d8:3b:49:e1:2b:a8:3a:a1:75:22:
         55:6d:a6:f5:93:66:a1:4e:0a:c5:d2:6b:ec:42:c1:9d:71:c3:
         35:5a:62:40:74:b5:90:9c:f5:96:35:41:b5:79:f6:fe:57:ba:
         c6:e3:1d:b8:94:9a:2a:6a:06:ef:26:5a:45:80:eb:49:a9:9a:
         77:d6:2d:38:34:54:ab:63:ea:92:0b:c8:38:50:5a:bd:40:ab:
         3e:9d:03:67:40:cd:18:b2:6c:1e:74:c7:7d:95:29:2c:56:ca:
         87:28:ad:e6:7b:cd:b8:d4:58:18:fb:31:ec:37:60:28:be:38:
         15:1a:fb:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKsKE1UAJJBkMlo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTEwNjE3NDkwN1oXDTI1MDIwNDE3NDkwN1owLzEtMCsGA1UEAxMk
MDU5ZGU4OWMtMDg3My00NWM2LWE0NGQtMmVjNGUwZGNlNDM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39EQTwdm1Vog4ItrAMZ2hnvHVRr0ShqyXKs9
U/WqwzVldpXLe3+DiZ8ubparLyIHLhe5HLXNGjjpHL53MAffkt/u0xieHkOVrpDi
5Tq0GEE2Ir3QXM9/WbfX61Hw33QDRXwQGJerTrpRb+emauWu7YcT6XGkfz/ZX+j7
58jw4WCWirOz/ABgONONhHdV8H5hEgwj1cySIBUe47m6Fhc8hiaFbB8Nrn5qBI2p
6V7N9fF5ndstAs2vPpCFxX3ASgLK+3sLfrdM64YO6+4+0rFvUqrdJAwJDnos8bam
kf1BTN7i5HUmYACooUXUKg5QXEYad13ZMr9SA1ywFI5ZqobexwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGXoKGAsVAwRMCV+8UIH0m1rAo1lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjRlOTAyZWYtMzg2MS0z
ZGU4LTllNmItNTFhYTFiMjQ2OTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwDmQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACI6KjVR+RPxztH+EvJEeg/ms4sUmUi5GsggIyO31v8p3C0kYxrniYm4
dmrgAqZpRSKmLmmEQm8ULSA3CnlqsbT/r/KClPvaa5wnLn4G/AW70zkeICEU0xox
SWbyrnS3Vt44/nfoBdCuaKt9LZbh9TYBIYhfI18FPdHXq14q9xv4kXYGvTAN2DtJ
4SuoOqF1IlVtpvWTZqFOCsXSa+xCwZ1xwzVaYkB0tZCc9ZY1QbV59v5XusbjHbiU
mipqBu8mWkWA60mpmnfWLTg0VKtj6pILyDhQWr1Aqz6dA2dAzRiybB50x32VKSxW
yocoreZ7zbjUWBj7Mew3YCi+OBUa+wo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:48 2024 by rpki-client on console-ams.rpki-client.org