Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c5dd5a69-cb79-32e6-964b-8f66dd4d2b12.roa
File:                     c5dd5a69-cb79-32e6-964b-8f66dd4d2b12.roa (raw, json)
Hash identifier:          4LW/7d+FEWtYEFSMx209cHe1JVq9CVJn32Nv94l/AhE=
Subject key identifier:   13:9C:B6:0F:48:3B:62:34:32:DD:25:2C:5A:6A:98:CF:F5:73:93:62
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285844E23FD6BF7985E6F489CC8160
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c5dd5a69-cb79-32e6-964b-8f66dd4d2b12.roa
Signing time:             Wed 14 Feb 2024 02:00:25 +0000
ROA not before:           Wed 14 Feb 2024 02:00:25 +0000
ROA not after:            Tue 14 May 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        168.87.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e2:3f:d6:bf:79:85:e6:f4:89:cc:81:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb 14 02:00:25 2024 GMT
            Not After : May 14 01:00:25 2024 GMT
        Subject: CN=f2b31191-f7c3-4f9c-8e55-02353e3b9e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0b:6a:0d:20:ca:e9:1b:a5:68:ff:52:8d:0e:
                    49:0e:1a:7a:20:ae:f5:5f:87:1b:67:67:cf:83:54:
                    df:ce:20:81:2c:7d:57:66:b9:7e:c7:63:11:03:2a:
                    10:19:5d:36:8a:64:6e:8d:36:eb:6b:1e:eb:ad:38:
                    ba:02:4f:eb:ec:4a:f0:60:a1:05:0a:e4:c7:65:b8:
                    d7:28:20:31:8f:1d:fb:8e:1b:8a:16:06:87:62:ca:
                    95:2c:e3:d5:db:f1:ce:ec:1a:89:f1:03:b7:32:06:
                    e0:ae:d5:21:4d:e3:b7:71:e4:e5:55:c5:41:fa:80:
                    ff:a6:74:50:0c:12:96:57:26:4e:d6:1e:50:7d:74:
                    37:27:57:98:10:1b:08:76:5d:f5:5f:ea:b4:36:c5:
                    ae:06:ac:b9:84:ba:fb:f0:89:db:cb:1e:97:66:5c:
                    3f:00:80:a3:ea:d1:66:be:0d:72:de:1e:59:d0:1f:
                    26:18:ee:27:0a:34:87:d2:17:c6:4f:0d:3f:e0:1f:
                    b2:c2:0e:10:09:11:5a:96:2f:f2:89:e2:b1:2b:ff:
                    2c:ad:3c:07:e5:05:13:78:52:3f:c5:f1:92:fc:62:
                    41:9d:67:19:1c:84:0b:f0:da:5f:c9:d5:59:40:c0:
                    bf:4b:77:30:e3:55:9e:46:f4:d0:80:c6:5a:6a:0d:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9C:B6:0F:48:3B:62:34:32:DD:25:2C:5A:6A:98:CF:F5:73:93:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c5dd5a69-cb79-32e6-964b-8f66dd4d2b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:eb:78:b3:6c:78:d6:ac:7a:e2:d7:49:77:59:54:31:3f:e8:
         c7:93:fc:46:ec:4c:18:9c:38:c0:57:85:b1:15:f2:06:97:13:
         2e:ad:8e:e8:73:78:98:ea:99:75:4b:b1:b7:5b:f0:d7:61:42:
         31:2e:7a:62:f0:14:0c:d3:f5:92:5f:96:49:09:ce:48:f0:a4:
         47:41:9e:2b:f5:b2:9e:19:b8:2b:7d:3a:e0:ae:d0:b2:94:c1:
         e6:55:87:14:ec:0f:e0:59:4f:74:04:6e:f4:cc:24:ca:95:11:
         20:1c:ce:31:8a:bf:b2:d0:a4:f5:3e:b4:25:86:e8:31:80:6d:
         3b:46:50:ee:60:b1:bc:45:a2:cb:04:34:7f:fc:da:84:c9:1f:
         94:37:a6:f2:22:63:37:5e:8e:cd:cd:a1:d6:4c:a3:06:d1:34:
         71:2f:10:05:21:96:38:0a:d1:9b:e9:aa:fe:20:82:1d:55:16:
         50:70:8b:cb:d9:3d:43:8e:eb:b9:1f:31:c2:c5:fd:d7:db:8b:
         cc:2b:1d:72:46:1a:43:33:35:82:ae:29:0c:ab:ec:a5:33:e1:
         16:b8:87:70:8c:e8:06:f5:80:a0:72:78:cc:4a:1e:78:25:fc:
         4e:dd:ac:67:b0:69:f9:b4:c1:80:65:e3:74:0b:58:24:66:3f:
         bd:32:04:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:59:52 2024 by rpki-client on console-ams.rpki-client.org