Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c31c0e68-cb58-3b27-98be-258a8c64e534.roa
File:                     c31c0e68-cb58-3b27-98be-258a8c64e534.roa (raw, json)
Hash identifier:          s7YbnTkWOQFpGTKipou8FU06PIzY9jaj6YYgRxY9M/o=
Subject key identifier:   79:0D:E8:CD:09:F8:CE:02:16:94:24:9D:C6:56:C9:2F:F5:4D:6C:EB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584546A2AFC37C5A2D0554A24E60
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c31c0e68-cb58-3b27-98be-258a8c64e534.roa
Signing time:             Thu 21 Mar 2024 01:00:25 +0000
ROA not before:           Thu 21 Mar 2024 01:00:25 +0000
ROA not after:            Wed 19 Jun 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        168.87.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:a2:af:c3:7c:5a:2d:05:54:a2:4e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar 21 01:00:25 2024 GMT
            Not After : Jun 19 01:00:25 2024 GMT
        Subject: CN=fc2080ba-9f4d-4709-8283-fb06e9b06e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:01:ba:bb:73:32:ba:4d:cf:e6:c5:76:ec:f9:
                    8f:06:1e:30:bd:b9:0d:2a:56:38:ac:66:0b:87:ac:
                    48:21:be:5d:18:34:d0:41:da:cf:a6:fc:b1:db:6c:
                    1e:56:d4:3a:46:db:a8:1b:38:92:0f:f6:f8:dc:11:
                    9b:70:03:4d:d3:f1:48:46:b1:2a:71:9d:b5:79:ff:
                    41:94:f0:13:41:18:7d:51:ad:a3:c0:09:03:fb:84:
                    95:e3:d4:0f:0c:62:27:a3:c8:9b:1b:4a:be:56:2a:
                    ba:c3:71:6f:ee:a8:7d:ec:68:7c:36:4f:1a:b1:8b:
                    49:ef:16:f1:0d:28:c5:32:25:b2:02:9c:6f:85:0d:
                    77:83:cc:97:05:ea:68:15:da:d0:59:be:66:07:24:
                    e0:12:32:bc:fb:df:3d:17:42:76:88:16:59:9d:23:
                    1d:22:20:31:d9:ca:2b:1d:a1:72:01:48:4a:62:cd:
                    4a:ad:6e:40:97:d6:02:a5:05:1f:dc:e3:5f:bb:db:
                    66:a6:6a:18:7c:dc:b1:b9:07:29:21:4e:fc:36:25:
                    f5:ed:87:dc:22:0f:78:fd:04:e4:67:6b:21:bf:02:
                    10:f6:85:43:a0:75:65:91:47:f1:c6:11:73:63:17:
                    e5:ba:3c:e9:dd:53:45:6f:f4:9a:7f:65:f3:eb:4e:
                    2a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0D:E8:CD:09:F8:CE:02:16:94:24:9D:C6:56:C9:2F:F5:4D:6C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c31c0e68-cb58-3b27-98be-258a8c64e534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:3c:65:6b:0a:a8:e9:a6:c5:da:75:ae:12:4b:54:08:b7:dd:
         8e:86:16:0e:ad:69:15:fe:68:d8:3c:12:37:6a:14:31:2b:71:
         ed:1a:3e:bd:97:42:9f:25:c1:38:a1:bd:78:f3:61:db:18:87:
         e6:a6:f7:fa:b0:f3:ae:3f:59:f7:1b:f3:6e:16:99:07:1a:b5:
         04:1f:66:1b:6c:80:10:94:00:ca:b7:c2:d7:f7:ac:e7:6b:a4:
         48:f7:2b:24:24:8b:8c:cc:e8:6c:74:50:af:3f:a0:28:df:88:
         b4:12:ec:b6:e4:46:8a:f1:6f:71:46:6f:0c:91:15:57:cb:02:
         1a:62:48:fe:51:6c:7c:05:e2:67:b9:2e:92:c9:21:11:9e:b8:
         51:38:e7:f8:8c:ed:54:9a:21:e6:29:22:4c:ae:fd:79:e6:1b:
         55:06:a3:74:0d:f5:7a:1f:3b:71:77:c3:4d:b3:52:0c:21:98:
         ec:13:e7:a7:05:3a:d2:b6:d4:8a:73:01:dc:fc:5b:5e:48:3d:
         44:94:0c:e8:b9:00:11:c9:13:64:0e:b6:6f:75:de:33:4c:1b:
         07:fd:34:a1:d0:77:34:0a:e4:e7:5a:48:23:84:1a:da:6a:b9:
         49:f4:35:6a:ee:ac:44:4c:c1:e0:85:78:d1:33:02:4f:86:6e:
         f1:e6:e3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:10:56 2024 by rpki-client on console-fra.rpki-client.org