Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d2298a8e-cf78-387e-b47b-3e16d3a9a535.roa
File:                     d2298a8e-cf78-387e-b47b-3e16d3a9a535.roa (raw, json)
Hash identifier:          2y6qaFHZc6N6DejewSkxoRFgwCx8AZyHTPdHoQHz1k0=
Subject key identifier:   F2:6D:2A:BF:F0:75:E8:AF:CE:77:0D:20:92:33:7C:45:39:38:84:10
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847CE6F4C5A2E276493DD1B2300
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d2298a8e-cf78-387e-b47b-3e16d3a9a535.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     203
IP address blocks:        204.104.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:4c:5a:2e:27:64:93:dd:1b:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=11b8d0c8-924e-4556-84a7-3f443be0bf81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:72:b3:8e:20:b3:50:e8:3c:00:81:f7:46:85:
                    19:1b:b2:4b:f7:96:73:c3:c9:59:ed:00:c5:d2:5c:
                    35:d1:64:22:b3:02:5f:dd:6d:ae:e0:f5:ec:59:05:
                    ef:60:67:13:17:08:d5:8f:91:47:4a:79:c1:53:ce:
                    d0:22:73:ff:48:b0:ee:6f:24:2c:92:57:44:f0:6b:
                    16:ce:b1:33:51:df:bf:e6:9f:cb:15:a8:50:c9:45:
                    9c:28:77:e2:58:19:37:6e:0b:f8:92:19:59:87:3c:
                    18:cd:45:0c:4a:3b:6d:26:ea:76:61:c3:9d:1a:eb:
                    41:54:8c:0f:7b:c0:b4:a4:01:86:d5:06:5a:e4:8b:
                    09:12:b5:38:c4:e0:84:cc:1d:32:1f:55:23:f6:58:
                    e7:0e:bb:d5:8e:1a:b5:7b:1e:36:ac:1f:64:57:8e:
                    d8:6b:ec:1d:8c:3d:60:cf:c7:14:eb:c1:e1:8e:da:
                    34:f4:2a:19:61:8c:0e:a7:c3:09:65:75:8b:78:6d:
                    a6:a1:20:34:d8:95:64:0f:a7:ab:50:a0:b9:93:fc:
                    94:bd:89:04:89:9a:bb:5d:14:ff:56:a2:68:5e:f8:
                    21:df:49:fe:a9:8e:94:77:89:04:c7:d3:db:3f:96:
                    62:25:0f:a5:85:fe:43:5d:71:7c:b6:21:7b:68:1c:
                    b4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6D:2A:BF:F0:75:E8:AF:CE:77:0D:20:92:33:7C:45:39:38:84:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d2298a8e-cf78-387e-b47b-3e16d3a9a535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:86:09:65:40:31:41:d4:a9:9b:b2:f5:82:c6:1f:21:c4:51:
         95:11:e5:17:40:c3:3a:7b:ca:a0:a8:f6:d3:ae:46:6a:a3:51:
         bc:0c:d0:c8:fb:37:cb:21:e3:65:89:7a:a2:96:35:43:c1:a9:
         08:b6:86:09:49:2e:7c:2f:ca:e3:df:2d:ea:21:a2:bd:62:bd:
         05:0a:51:7a:b8:ae:55:92:ec:55:f8:9b:fd:40:f8:72:47:06:
         f8:07:80:86:1f:63:61:5e:e0:92:d0:6b:46:e1:b9:62:5c:ec:
         31:d3:da:1d:15:91:d5:dd:71:bb:47:ee:ca:19:6d:2f:0a:9f:
         13:53:5d:63:0c:d4:9b:c9:8a:b3:54:1a:b4:72:91:0e:9f:74:
         8e:d6:2e:0a:5a:24:ab:50:dc:8e:fe:5d:5d:5c:7b:80:6d:73:
         62:ed:f5:68:4a:31:1c:dc:8a:5d:5c:4c:ed:30:aa:57:1a:66:
         21:08:23:e6:53:a8:ae:55:f8:14:bc:37:f6:f4:bc:7e:9d:9e:
         0b:a5:6e:86:2c:58:b3:26:3d:f9:dd:d2:15:4a:a1:e5:22:06:
         12:57:2a:ed:b8:8d:96:b5:6b:3e:d8:0f:cc:36:2f:70:28:13:
         54:82:3b:da:21:b8:13:7f:10:7b:4d:98:54:39:1c:24:0a:88:
         5f:33:ad:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:38 2024 by rpki-client on console-ams.rpki-client.org