Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd21da79-c196-325c-9eec-91498463fd08.roa
File:                     bd21da79-c196-325c-9eec-91498463fd08.roa (raw, json)
Hash identifier:          bdh3bSL7iTOvDpAORefoqvhr6c50p9dQyI5+59PZcfg=
Subject key identifier:   31:09:90:DC:D4:86:36:6A:47:39:98:3E:D9:72:D2:4C:43:D5:79:E9
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285844E23FD6A8B305F77BE267898B
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd21da79-c196-325c-9eec-91498463fd08.roa
Signing time:             Wed 14 Feb 2024 02:00:25 +0000
ROA not before:           Wed 14 Feb 2024 02:00:25 +0000
ROA not after:            Tue 14 May 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        168.87.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e2:3f:d6:a8:b3:05:f7:7b:e2:67:89:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb 14 02:00:25 2024 GMT
            Not After : May 14 01:00:25 2024 GMT
        Subject: CN=0f2cf9a7-bee8-4772-8ee0-c1dbfa732cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fd:52:28:31:39:8d:39:8a:3d:f7:1c:58:4f:
                    c0:a5:a0:a3:52:30:d6:54:2c:43:27:94:09:8d:49:
                    c1:4f:91:10:2d:80:0a:f6:c7:a7:5f:6f:e6:3c:a7:
                    27:7f:27:e5:ef:73:4e:a0:f2:03:1a:02:67:bc:fd:
                    67:dc:01:c0:b9:ff:d6:f9:21:3f:80:84:ef:b4:22:
                    d2:3f:60:6e:00:97:9b:ef:52:8b:78:21:c4:98:e0:
                    02:f7:c4:41:ef:61:bb:95:d3:1f:93:21:34:4b:9b:
                    1a:3c:45:0e:7b:6f:55:b7:b8:5b:f2:f8:85:f1:19:
                    ee:19:e0:3a:d5:5e:e1:36:15:3f:2b:37:7b:4e:13:
                    c7:78:e6:af:28:ee:be:1f:d2:f1:40:fe:17:c7:19:
                    fc:21:19:31:91:37:1c:c3:1b:11:e0:e1:1b:1a:58:
                    b2:5b:da:08:88:8c:bd:87:06:23:d3:2f:cf:01:dd:
                    31:af:9a:00:1e:37:f5:04:4e:f4:62:ad:57:f9:b4:
                    69:ed:ea:75:da:55:a2:06:73:be:af:5f:22:39:bf:
                    29:bd:3a:23:ba:ee:b0:43:9e:40:2b:8b:99:56:fe:
                    45:28:ce:52:e9:8e:f5:b1:b3:45:a1:50:f7:90:42:
                    2c:26:d6:33:04:2f:02:76:1a:4e:11:76:3e:87:99:
                    43:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:09:90:DC:D4:86:36:6A:47:39:98:3E:D9:72:D2:4C:43:D5:79:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd21da79-c196-325c-9eec-91498463fd08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:62:26:43:96:c2:f3:c8:b0:c6:50:7e:68:65:2b:28:cc:82:
         1a:c3:32:a4:40:bb:00:01:2d:dc:42:ad:60:c3:44:63:0d:f5:
         3e:bb:f3:30:15:a1:63:59:b1:e4:3d:55:17:39:c4:7a:d2:08:
         09:25:d8:d3:22:0f:44:20:e5:9c:47:6f:11:69:c9:c1:72:82:
         5c:2b:c4:01:95:73:15:ae:7a:56:77:93:25:33:59:8b:8f:21:
         3b:a2:b0:15:e8:91:40:0e:71:ad:c0:ea:8f:59:93:33:4b:96:
         fd:19:87:66:dc:e4:60:a1:76:ee:02:94:bb:9f:c9:58:0e:e2:
         c1:07:6e:19:d6:ad:db:37:5e:89:7d:aa:c9:ca:1a:e6:bb:e2:
         51:45:a9:50:46:45:08:f8:d1:8f:b4:59:b9:f3:0c:b0:4f:14:
         0c:b8:5d:97:6b:6e:df:59:b1:a0:78:cc:e3:63:32:81:1c:12:
         45:a5:a0:0f:11:c3:3f:ef:38:b0:bf:90:dc:32:ad:8e:06:9a:
         9e:59:88:b3:cd:84:64:50:f0:b2:8c:4f:db:ea:1b:93:c6:2c:
         95:8b:8a:29:a4:cf:dc:4b:70:fb:de:b3:1b:c9:0a:a1:61:ab:
         a5:b1:ba:88:17:3b:39:d1:45:bb:6e:c0:6d:f3:df:2c:98:82:
         fe:cf:d5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:27:56 2024 by rpki-client on console-fra.rpki-client.org