Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c642e874-a694-334d-9aa4-bfdab06be950.roa
File:                     c642e874-a694-334d-9aa4-bfdab06be950.roa (raw, json)
Hash identifier:          1r3hSdZ0uhBfUShzAu+FX09yyJlajgZb46UaZl3nKao=
Subject key identifier:   A1:4E:A1:67:9C:8D:4B:33:86:F1:0B:B9:15:02:26:1B:36:CD:55:AB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847CB06EBFEA5377B3B94B6F9C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c642e874-a694-334d-9aa4-bfdab06be950.roa
Signing time:             Wed 06 Nov 2024 20:42:59 +0000
ROA not before:           Wed 06 Nov 2024 20:42:59 +0000
ROA not after:            Tue 04 Feb 2025 20:42:59 +0000
asID:                     5714
IP address blocks:        204.105.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cb:06:eb:fe:a5:37:7b:3b:94:b6:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov  6 20:42:59 2024 GMT
            Not After : Feb  4 20:42:59 2025 GMT
        Subject: CN=6e9c257d-7d76-4f79-bda8-0ebe5ac7cf48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d0:20:63:34:16:23:2b:7b:3b:78:73:9f:a5:
                    38:9b:27:20:b7:0c:12:f7:99:d4:d2:66:a2:11:bb:
                    33:18:12:65:a8:1f:9a:57:3c:35:7f:2b:20:1f:e4:
                    ca:00:69:ad:17:97:d4:57:f9:57:1a:1c:6f:c3:38:
                    1b:3f:77:65:de:5d:88:89:ce:8f:a3:ec:ca:bd:5d:
                    99:81:80:59:c1:41:36:4f:dd:c6:13:36:b9:aa:24:
                    df:a0:33:5b:5c:da:86:57:2c:d8:7e:81:d0:92:e3:
                    fe:1f:72:ef:52:6b:e8:1a:70:64:3c:e8:eb:26:0c:
                    59:d0:f4:0d:bc:59:ed:c1:e8:4b:e5:b0:39:f4:e1:
                    f1:c4:71:35:8d:22:3a:1b:61:c2:fa:a2:92:7b:46:
                    30:54:62:dd:d6:9c:bb:9d:fe:16:57:ef:29:2c:fa:
                    c7:9b:e2:7f:2c:61:d9:f2:e2:52:03:67:cb:5b:a1:
                    92:1e:ed:9d:3d:6b:83:9d:ca:72:b5:49:25:fc:0c:
                    89:31:77:d6:69:e6:bd:54:e1:0c:d1:45:d9:d3:f7:
                    86:7f:65:bf:32:68:8a:da:c2:21:ef:d7:41:bc:c1:
                    f6:5e:35:1b:77:50:98:b2:6f:c1:9f:4e:9c:9e:8f:
                    3a:64:b0:96:4b:cd:b2:e2:af:31:73:e5:0d:55:03:
                    b6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4E:A1:67:9C:8D:4B:33:86:F1:0B:B9:15:02:26:1B:36:CD:55:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c642e874-a694-334d-9aa4-bfdab06be950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:3f:5a:14:f6:81:a9:4e:a1:23:18:d0:e6:05:ec:d4:62:c5:
         75:19:93:12:8c:bc:30:4a:29:cb:2b:95:68:7a:f2:9a:d3:ed:
         6f:2a:23:e9:44:2c:1c:2a:3c:6d:61:35:da:af:90:d7:96:b1:
         bb:a4:91:06:03:a4:f5:fb:da:55:f8:07:b9:33:fe:c0:f1:0c:
         62:6d:93:38:da:33:02:c0:a7:79:7a:44:2d:c1:17:73:4d:05:
         50:ff:c9:5b:28:7d:88:b8:9d:18:05:e1:44:e7:67:c8:a4:ff:
         19:25:43:c9:b9:5c:60:41:46:a8:a0:81:d1:3a:49:45:a6:92:
         bd:84:05:34:a8:5f:3b:d1:13:28:94:2a:52:ff:15:35:c7:e5:
         7d:da:93:99:51:c6:11:f6:f9:bf:39:f1:96:41:43:3e:30:8a:
         f4:64:54:df:c5:c0:13:79:50:96:33:d7:47:c6:bb:da:35:3d:
         da:76:b8:5a:45:95:6d:7e:dc:1e:dc:a8:33:44:b1:f7:77:8d:
         cc:db:27:e4:e6:99:ff:39:26:33:32:d6:0d:4f:0f:7a:ed:25:
         38:75:87:03:90:79:c7:f9:b6:db:a0:09:25:fc:cc:c7:7f:19:
         19:00:bd:0f:c4:94:23:67:99:a7:1b:14:f0:58:1b:25:a5:73:
         78:66:a7:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfLBuv+pTd7O5S2+cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTEwNjIwNDI1OVoXDTI1MDIwNDIwNDI1OVowLzEtMCsGA1UEAxMk
NmU5YzI1N2QtN2Q3Ni00Zjc5LWJkYTgtMGViZTVhYzdjZjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tAgYzQWIyt7O3hzn6U4mycgtwwS95nU0mai
EbszGBJlqB+aVzw1fysgH+TKAGmtF5fUV/lXGhxvwzgbP3dl3l2Iic6Po+zKvV2Z
gYBZwUE2T93GEza5qiTfoDNbXNqGVyzYfoHQkuP+H3LvUmvoGnBkPOjrJgxZ0PQN
vFntwehL5bA59OHxxHE1jSI6G2HC+qKSe0YwVGLd1py7nf4WV+8pLPrHm+J/LGHZ
8uJSA2fLW6GSHu2dPWuDncpytUkl/AyJMXfWaea9VOEM0UXZ0/eGf2W/MmiK2sIh
79dBvMH2XjUbd1CYsm/Bn06cno86ZLCWS82y4q8xc+UNVQO2yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKFOoWecjUszhvELuRUCJhs2zVWrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzY0MmU4NzQtYTY5NC0z
MzRkLTlhYTQtYmZkYWIwNmJlOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGkgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4/WhT2galOoSMY0OYF7NRixXUZkxKMvDBKKcsrlWh68prT7W8qI+lE
LBwqPG1hNdqvkNeWsbukkQYDpPX72lX4B7kz/sDxDGJtkzjaMwLAp3l6RC3BF3NN
BVD/yVsofYi4nRgF4UTnZ8ik/xklQ8m5XGBBRqiggdE6SUWmkr2EBTSoXzvREyiU
KlL/FTXH5X3ak5lRxhH2+b858ZZBQz4wivRkVN/FwBN5UJYz10fGu9o1Pdp2uFpF
lW1+3B7cqDNEsfd3jczbJ+Tmmf85JjMy1g1PD3rtJTh1hwOQecf5ttugCSX8zMd/
GRkAvQ/ElCNnmacbFPBYGyWlc3hmp5I=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:49 2024 by rpki-client on console-ams.rpki-client.org