Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cdb04995-8302-375c-beee-100d3030fccd.roa
File:                     cdb04995-8302-375c-beee-100d3030fccd.roa (raw, json)
Hash identifier:          6+Kbf2SSf0uo3ZQHS4TO+1aCE9QS0WbJwCi9VlESjXA=
Subject key identifier:   57:83:16:23:F4:85:7F:9A:4E:CC:A4:88:F2:19:00:36:98:1F:DB:A3
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847DB017DBDBCAA6A8D8F088080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cdb04995-8302-375c-beee-100d3030fccd.roa
Signing time:             Tue 12 Nov 2024 14:04:59 +0000
ROA not before:           Tue 12 Nov 2024 14:04:59 +0000
ROA not after:            Mon 10 Feb 2025 14:04:59 +0000
asID:                     2158
IP address blocks:        168.87.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:db:01:7d:bd:bc:aa:6a:8d:8f:08:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov 12 14:04:59 2024 GMT
            Not After : Feb 10 14:04:59 2025 GMT
        Subject: CN=6c45a7d6-46cb-4950-8ff8-4341271aeee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dd:aa:98:1d:84:03:44:77:6a:d1:22:bb:0c:
                    fc:d0:6d:25:92:de:94:a3:e8:7c:3a:a8:28:56:2c:
                    90:c7:cf:39:e4:34:4f:bc:0c:3a:a9:33:e4:9f:1c:
                    82:0e:d9:f8:5a:eb:0d:5f:f5:6a:ab:c8:a3:ba:6d:
                    1b:91:1f:42:56:34:24:4c:35:c8:b7:66:d6:a2:68:
                    65:c8:3c:67:92:f4:e6:82:97:79:28:a0:37:2b:93:
                    3e:9e:22:49:62:53:61:b3:8b:76:54:d7:3a:76:d1:
                    93:29:2b:e7:34:d6:cc:0a:fd:0c:74:10:87:55:dc:
                    38:d9:8a:0a:f7:3c:ae:fb:df:b8:11:7f:7e:84:e6:
                    c0:ed:5a:e1:a2:fd:8b:8d:45:74:fb:05:4c:d1:ec:
                    ad:a8:b7:f5:22:8e:59:ec:be:ef:24:35:28:47:3d:
                    1b:64:8d:53:94:5c:49:03:4b:96:15:2b:e4:0d:bf:
                    68:2e:a8:b9:e4:2f:97:c8:81:de:f8:19:a8:b4:c3:
                    12:20:46:10:42:cf:5e:dd:33:c7:33:bf:0c:28:74:
                    51:cb:1e:8a:75:85:1d:6b:50:c8:8c:88:c2:07:79:
                    91:98:26:88:64:0a:5f:e7:c7:ec:19:7e:01:ad:66:
                    00:f1:ca:bc:32:b0:6b:f0:8b:dc:57:f1:7b:60:52:
                    a2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:83:16:23:F4:85:7F:9A:4E:CC:A4:88:F2:19:00:36:98:1F:DB:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cdb04995-8302-375c-beee-100d3030fccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:94:41:5d:bd:c8:10:2f:9d:3d:14:b0:62:9c:be:84:5b:80:
         31:ed:85:ad:15:83:e1:dc:3a:16:d9:e6:d9:a0:87:d6:7d:3f:
         1d:c7:6d:b5:4b:58:b5:b1:af:c8:b0:67:4f:41:f2:17:89:51:
         48:42:39:99:62:cc:9e:f3:da:4d:2d:4b:a8:25:97:b3:fa:f7:
         5f:b2:c7:4c:d3:2b:dc:6b:57:09:d9:b1:26:76:7d:36:1f:4f:
         52:5a:a2:d9:8b:ea:f3:f1:43:ad:2d:9f:d8:d3:86:f4:ba:83:
         ca:aa:3c:d4:33:5b:b3:bc:cb:b9:4a:ef:c0:d1:e0:87:57:48:
         90:84:3f:80:c2:a7:2c:cc:a1:fd:54:ba:22:b0:ed:d8:21:3a:
         b3:8d:48:42:63:35:83:bf:0a:31:5d:92:1f:ca:47:eb:07:f9:
         f8:d5:83:eb:e7:c8:9a:9d:0c:16:ca:94:36:36:05:e5:86:79:
         6a:72:bd:68:30:c4:cb:6c:49:a6:ff:ef:de:25:37:d1:4f:22:
         18:89:f9:fa:80:28:5e:7e:00:ae:6f:27:50:da:c3:53:20:6e:
         41:fb:c4:1f:d1:95:21:07:fe:c0:8b:02:70:81:47:73:c1:48:
         30:b3:20:dc:11:94:97:7b:be:3e:a4:d9:a5:7b:2d:ef:e1:ce:
         67:15:e0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:46 2024 by rpki-client on console-fra.rpki-client.org