Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d8f0e064-c046-3177-84e5-e5cac5777f75.roa
File:                     d8f0e064-c046-3177-84e5-e5cac5777f75.roa (raw, json)
Hash identifier:          QmslJe2Vf4RuGdN4Y5ykvEJ2CQqayaK9Q0laDGskCkg=
Subject key identifier:   CA:0D:B0:1B:1B:F8:1D:80:46:04:EF:F2:F2:76:16:0C:52:9F:53:91
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847DE1371C6128A605B1B13FDA0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d8f0e064-c046-3177-84e5-e5cac5777f75.roa
Signing time:             Wed 13 Nov 2024 16:28:35 +0000
ROA not before:           Wed 13 Nov 2024 16:28:35 +0000
ROA not after:            Tue 11 Feb 2025 16:28:35 +0000
asID:                     3356
IP address blocks:        168.87.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:de:13:71:c6:12:8a:60:5b:1b:13:fd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov 13 16:28:35 2024 GMT
            Not After : Feb 11 16:28:35 2025 GMT
        Subject: CN=f0b5dca5-58bb-406c-865a-0a62caa69d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:77:b9:db:22:e6:09:26:a1:c0:a4:62:fc:45:
                    b0:d2:b3:1a:41:8c:1d:63:35:ce:95:8b:e7:7b:5f:
                    08:1f:88:f2:13:ee:cd:3e:a1:3e:23:54:ca:fd:72:
                    c7:f0:66:09:a5:78:45:58:19:b3:1f:f7:74:fb:8c:
                    03:4e:36:58:dc:d7:8d:56:4f:05:30:25:c1:9f:54:
                    8b:1d:4b:52:0e:b3:82:c0:7e:e3:58:d5:56:3c:73:
                    ef:d3:59:9d:bd:e6:81:4e:83:f0:27:8f:90:5b:87:
                    79:b3:28:7d:9d:15:c3:6a:74:84:89:a4:ef:91:a1:
                    9c:ca:5d:14:9c:eb:be:8f:fd:02:09:e4:23:0b:da:
                    45:06:72:18:d1:4f:c9:96:16:65:8d:18:f3:8a:57:
                    27:19:0a:06:eb:95:a5:3a:bc:1e:72:eb:78:28:68:
                    02:f4:e7:2e:a8:b2:a5:02:ff:ad:67:a3:ae:61:f5:
                    05:0f:a7:cd:92:35:05:7c:27:b1:1d:1b:a7:8b:aa:
                    58:22:69:af:0d:e4:95:ed:38:9f:fe:78:0a:a1:98:
                    47:89:5c:6a:e2:f4:b0:b1:93:d8:51:60:c6:0a:21:
                    ad:42:44:c1:8b:e4:d5:9a:67:c6:f6:b8:58:dd:f7:
                    25:db:ed:67:9b:1a:1f:74:70:cc:41:61:27:f3:27:
                    72:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0D:B0:1B:1B:F8:1D:80:46:04:EF:F2:F2:76:16:0C:52:9F:53:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d8f0e064-c046-3177-84e5-e5cac5777f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:4d:ee:1e:29:d4:da:0b:9b:b1:09:c3:e5:55:47:e4:3e:70:
         56:4b:fb:4d:9d:ba:af:64:c6:6a:b5:06:6c:f1:58:1e:8b:08:
         0e:fe:29:78:04:05:00:d4:9d:03:4b:f2:e3:94:b6:61:fb:3b:
         11:b1:3d:12:b4:97:47:73:ac:f1:c2:a7:f2:dc:3c:24:31:3b:
         3b:52:86:ec:aa:89:82:eb:1e:e0:26:5d:55:0f:c8:62:04:ed:
         a0:2e:cc:f0:28:ba:a4:b1:b0:7e:19:1c:30:71:df:7a:5e:d1:
         fe:be:69:fa:0b:8c:f5:ea:c2:b1:55:32:7a:06:9a:f0:ca:e0:
         17:11:47:42:fd:ad:fb:15:80:9f:04:8c:9a:4a:34:64:26:e6:
         02:c2:8b:61:bd:19:7b:29:39:86:2e:6e:c5:2a:7c:05:6d:72:
         4c:d0:74:03:f2:59:2a:73:d7:75:0e:fd:a1:60:7f:8d:4d:83:
         37:6d:75:c9:86:3d:35:05:2a:42:9b:82:a7:01:2c:b3:5c:c2:
         bb:ae:52:bc:43:ce:6b:83:13:12:cc:44:7c:67:fe:e7:90:f6:
         b0:04:07:b2:af:ee:98:b9:75:a7:04:0c:45:7e:28:66:1d:2c:
         3a:b3:63:36:8e:ec:fc:29:9e:1c:24:19:f5:5d:97:2d:8a:98:
         28:4d:e5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:49 2024 by rpki-client on console-ams.rpki-client.org