Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c31c0e68-cb58-3b27-98be-258a8c64e534.roa
File:                     c31c0e68-cb58-3b27-98be-258a8c64e534.roa (raw, json)
Hash identifier:          HUeUfZdALDK/TDK2xxQE7tVk4WQODdJjqul5oCTQMSY=
Subject key identifier:   BF:62:2D:4E:FD:DC:61:72:07:84:5E:49:B9:EB:FD:90:17:C8:F4:63
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847E78F5B3A50A95F4F70907080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c31c0e68-cb58-3b27-98be-258a8c64e534.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     16509
IP address blocks:        168.87.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:5b:3a:50:a9:5f:4f:70:90:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=ee54d8dc-7470-4767-bca8-655545a0cdb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:ce:74:0d:87:7f:8d:9a:7f:b2:11:e4:62:
                    1f:bf:4f:2b:5b:95:1b:bd:ac:f2:d3:4c:03:63:5b:
                    c0:c7:8f:89:15:34:95:de:7e:43:9b:79:b9:ca:f6:
                    01:37:4a:ca:bd:7e:f9:c9:56:a4:d5:2f:33:34:97:
                    ca:a0:db:e7:50:5f:ac:c2:29:7f:7f:9e:d9:55:54:
                    eb:0f:e4:41:81:96:5e:cb:c9:9a:f2:9e:63:67:4d:
                    ef:c0:77:24:4e:6d:c9:fd:33:fb:04:48:01:7e:2c:
                    c2:95:cf:59:5e:9a:e3:8c:28:a7:19:bb:ef:60:e2:
                    5d:3e:43:18:bd:15:2a:dd:c5:48:89:a0:5f:81:00:
                    28:2d:dd:15:d0:6c:60:61:f0:85:e4:d2:c4:f3:b1:
                    25:1f:fd:54:19:a4:5d:bf:f4:e7:53:e4:3d:a1:67:
                    eb:ab:27:df:ce:b4:3e:d1:6a:42:a4:a6:32:ff:21:
                    57:61:3a:e8:09:a6:0e:e0:ae:98:99:b3:a8:08:63:
                    f3:37:1f:72:61:dd:65:96:92:8a:79:b7:01:56:0b:
                    59:54:46:d5:08:02:38:8a:4b:0d:ef:85:1b:51:db:
                    02:f6:43:35:bb:bb:bc:e8:b4:29:ce:67:5f:f9:8a:
                    0c:ae:1c:6c:50:e7:56:3d:9f:a2:84:2f:4d:dd:76:
                    2b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:62:2D:4E:FD:DC:61:72:07:84:5E:49:B9:EB:FD:90:17:C8:F4:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c31c0e68-cb58-3b27-98be-258a8c64e534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:cd:ab:72:c5:37:29:21:e9:da:46:21:b6:f6:ea:20:05:7b:
         e1:9f:66:31:2e:f5:ff:57:91:34:b3:44:f9:72:13:06:c0:9b:
         a3:ee:cd:3a:30:e8:22:51:72:a8:f8:8e:9a:7a:e5:ab:90:44:
         14:b8:37:a9:97:65:34:75:42:9a:ee:83:21:18:c7:91:3a:b0:
         38:63:17:fc:cc:da:88:8d:67:fc:70:ff:6f:fe:0f:a9:16:10:
         ce:f8:a3:b6:33:50:70:15:75:09:92:2c:b8:70:0c:9a:a3:0a:
         82:77:bd:58:c5:bc:ce:70:e4:22:20:88:ee:07:9b:0f:66:f0:
         98:01:44:cf:68:6a:10:9a:eb:6b:52:a4:92:e4:0b:80:13:30:
         38:21:bb:ac:e5:cc:00:69:9b:ff:64:a2:36:9d:a3:ef:0e:16:
         8f:75:02:63:5f:74:6e:10:01:65:51:d2:ef:eb:fd:63:f5:98:
         b4:4e:74:37:c5:b3:69:97:9e:89:74:8d:54:b3:de:71:fa:b6:
         a6:ec:fa:13:3c:fb:48:6d:2c:e1:72:08:74:8b:04:c8:fb:08:
         23:a1:67:e7:0a:a5:59:11:c3:49:5b:e8:fa:67:ac:82:c0:51:
         fd:9d:51:36:36:aa:13:06:3b:58:55:cb:a9:ac:3f:d2:7e:68:
         4f:61:9e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:42 2024 by rpki-client on console-fra.rpki-client.org