Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d06bb3d9-6000-3aae-addd-5b7bd965fa6b.roa
File:                     d06bb3d9-6000-3aae-addd-5b7bd965fa6b.roa (raw, json)
Hash identifier:          pCkItSGI8jrSXeD7XilQ1KzFY4idvk1Zx2L4PzAgH+o=
Subject key identifier:   C1:51:41:C2:F1:E4:72:FA:1D:79:C8:61:05:87:80:06:65:C9:D4:EE
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847CA3F438C908696931327C5A0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d06bb3d9-6000-3aae-addd-5b7bd965fa6b.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     3360
IP address blocks:        192.57.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:43:8c:90:86:96:93:13:27:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=8bdba644-8463-42d7-929a-23222a43f03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:01:d7:a5:d5:d0:14:32:bd:f5:36:79:86:b7:
                    7c:82:9a:3e:6b:37:e3:28:95:f0:a4:a5:4c:13:98:
                    99:00:ef:b2:94:d2:ca:f2:ba:5b:ad:a7:96:5a:af:
                    9a:59:45:cc:80:bb:7b:88:a6:cb:8c:67:32:e3:3b:
                    19:d0:d1:5a:60:62:df:75:6e:42:1c:ab:3c:16:1a:
                    64:42:16:af:ec:0b:83:99:ef:27:ec:73:39:ee:9d:
                    06:0e:7c:e7:c7:ab:cf:65:18:d9:1e:9c:a4:4b:08:
                    70:ac:2a:31:3a:e4:30:f2:f8:4b:9d:22:fb:91:a7:
                    bf:f0:6e:dd:60:0f:2a:19:c6:44:66:47:25:b5:b6:
                    94:dc:29:e4:e1:79:61:63:af:39:11:f9:31:78:f2:
                    15:10:f0:e7:2d:34:bc:9b:81:67:99:48:2b:94:95:
                    38:ea:dd:c6:45:a1:80:0c:6e:7a:37:75:b8:8a:b9:
                    e0:13:ee:7a:56:69:4a:b6:10:f0:5a:c4:a8:bd:cd:
                    1e:85:4b:7b:f5:b9:60:70:ff:58:b8:98:0f:72:d3:
                    32:57:d7:f8:30:42:df:4e:81:b4:f0:fe:9d:6e:1d:
                    72:12:c7:82:2e:e3:c8:8c:7a:6d:eb:34:bf:e4:6b:
                    8c:c7:47:a7:c9:75:2c:0d:93:81:04:8f:dd:8e:86:
                    63:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:51:41:C2:F1:E4:72:FA:1D:79:C8:61:05:87:80:06:65:C9:D4:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d06bb3d9-6000-3aae-addd-5b7bd965fa6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1f:b0:5d:16:f7:d1:99:20:dc:1a:96:7a:c3:f7:93:a4:67:
         32:3d:c0:42:f3:05:8f:f7:4d:7b:25:24:65:4c:0a:7c:69:10:
         8b:9c:2f:23:b8:dc:da:3f:ef:f9:84:32:fc:81:4d:2e:29:9a:
         85:3b:c8:f4:91:a2:78:7d:89:9c:f2:f3:d4:30:60:bd:79:e8:
         b2:68:20:df:5c:0a:24:40:2f:4f:80:f0:32:9e:db:0f:85:b2:
         59:0a:c5:3d:21:3d:17:7a:4c:aa:da:a8:91:9c:6d:df:3a:1a:
         7b:07:99:a6:f9:ae:da:c3:9f:6c:a4:f3:57:f6:7b:76:de:f9:
         7a:98:7c:72:a4:7f:8b:c2:b5:59:31:68:16:cc:55:f6:bf:f0:
         dd:a2:25:06:95:ad:db:fd:da:eb:82:8f:d2:e3:02:a8:bd:aa:
         0c:c3:26:d6:5d:39:3f:4e:2d:13:c7:b9:20:5c:4c:9b:22:4e:
         be:1c:c6:0b:ab:e7:02:44:af:d7:b2:b1:2e:15:a3:3a:8f:34:
         9b:b9:af:0d:19:27:01:0f:b3:76:30:5c:27:c0:4f:25:ee:4c:
         f3:ad:7b:dc:d2:30:36:e9:3f:e4:b1:16:f3:14:fe:a5:2d:a2:
         5d:2f:b6:33:86:18:7b:b6:49:07:36:e7:03:e6:91:87:16:4a:
         11:9d:0b:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP0OMkIaWkxMnxaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
OGJkYmE2NDQtODQ2My00MmQ3LTkyOWEtMjMyMjJhNDNmMDNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwHXpdXQFDK99TZ5hrd8gpo+azfjKJXwpKVM
E5iZAO+ylNLK8rpbraeWWq+aWUXMgLt7iKbLjGcy4zsZ0NFaYGLfdW5CHKs8Fhpk
Qhav7AuDme8n7HM57p0GDnznx6vPZRjZHpykSwhwrCoxOuQw8vhLnSL7kae/8G7d
YA8qGcZEZkcltbaU3Cnk4XlhY685EfkxePIVEPDnLTS8m4FnmUgrlJU46t3GRaGA
DG56N3W4irngE+56VmlKthDwWsSovc0ehUt79blgcP9YuJgPctMyV9f4MELfToG0
8P6dbh1yEseCLuPIjHpt6zS/5GuMx0enyXUsDZOBBI/djoZjwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMFRQcLx5HL6HXnIYQWHgAZlydTuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDA2YmIzZDktNjAwMC0z
YWFlLWFkZGQtNWI3YmQ5NjVmYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwDkoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgfsF0W99GZINwalnrD95OkZzI9wELzBY/3TXslJGVMCnxpEIucLyO4
3No/7/mEMvyBTS4pmoU7yPSRonh9iZzy89QwYL156LJoIN9cCiRAL0+A8DKe2w+F
slkKxT0hPRd6TKraqJGcbd86GnsHmab5rtrDn2yk81f2e3be+XqYfHKkf4vCtVkx
aBbMVfa/8N2iJQaVrdv92uuCj9LjAqi9qgzDJtZdOT9OLRPHuSBcTJsiTr4cxgur
5wJEr9eysS4VozqPNJu5rw0ZJwEPs3YwXCfATyXuTPOte9zSMDbpP+SxFvMU/qUt
ol0vtjOGGHu2SQc25wPmkYcWShGdC3M=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:49 2024 by rpki-client on console-ams.rpki-client.org