Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d99160d7-0d9b-31a6-8f66-ba82472a6bb2.roa
File:                     d99160d7-0d9b-31a6-8f66-ba82472a6bb2.roa (raw, json)
Hash identifier:          UWDwyeJPhvx6OR/fc6HabgbmRCF8+zhj7/4QG1XWR1Q=
Subject key identifier:   B7:E4:98:2A:EC:98:C2:08:EF:73:BE:BF:B5:8C:F3:6B:88:24:39:BD
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285847CAE78383F39D5B0BF333DA00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d99160d7-0d9b-31a6-8f66-ba82472a6bb2.roa
Signing time:             Wed 06 Nov 2024 19:39:42 +0000
ROA not before:           Wed 06 Nov 2024 19:39:42 +0000
ROA not after:            Tue 04 Feb 2025 19:39:42 +0000
asID:                     202
IP address blocks:        199.228.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:e7:83:83:f3:9d:5b:0b:f3:33:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov  6 19:39:42 2024 GMT
            Not After : Feb  4 19:39:42 2025 GMT
        Subject: CN=7e09463c-a13e-4413-b15a-09a50b6fb0ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:a7:13:f8:99:ef:04:48:a3:0a:77:02:61:
                    00:77:5f:2f:7a:3e:45:38:92:f0:5c:52:63:52:2c:
                    cf:b7:bf:3b:4b:1c:d0:3a:17:fb:17:79:29:0b:2a:
                    39:b5:a7:ec:e9:04:17:61:2d:9b:db:46:b8:3d:9e:
                    7e:b3:c8:f4:b4:90:23:96:59:c3:e7:d3:7b:2f:88:
                    01:e4:0c:f1:ef:c7:ad:dc:2a:dc:6f:5f:a4:93:cb:
                    8d:52:46:33:83:45:e4:ee:87:4d:bf:00:ed:2a:a0:
                    ad:37:1a:99:ff:d0:09:ae:11:7b:a0:93:96:be:cf:
                    ae:0c:bf:8a:7c:bd:32:1c:38:5b:04:13:47:64:90:
                    fa:e9:09:0c:f9:89:86:0a:e1:0f:e8:1f:e3:36:56:
                    f5:5c:c7:4e:f0:bc:8a:61:f8:e7:dd:e2:be:fd:8e:
                    bf:5f:49:40:48:6e:d1:1b:09:c9:6d:3c:22:b5:d8:
                    36:5c:6a:8e:86:73:fc:47:21:ea:a6:ca:5e:01:c7:
                    3c:cf:17:24:86:0d:6f:67:72:13:c5:1e:0d:5c:12:
                    bb:86:8c:8c:14:c4:92:64:20:95:2d:57:0c:4a:03:
                    48:6e:29:5b:b3:d9:a4:88:98:5b:9e:f8:19:67:8f:
                    30:f6:73:f6:63:31:71:1d:16:c3:37:10:bb:e0:bc:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E4:98:2A:EC:98:C2:08:EF:73:BE:BF:B5:8C:F3:6B:88:24:39:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d99160d7-0d9b-31a6-8f66-ba82472a6bb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.228.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:96:e0:73:10:2b:fd:64:c2:2a:fa:f7:1f:4a:87:95:4d:cf:
         2f:65:a1:ca:2c:90:61:13:8b:30:ed:c5:ce:44:05:d3:36:37:
         00:e9:8e:d3:a8:67:91:fe:44:97:a1:83:30:ba:3f:d1:e8:5c:
         f6:14:fc:dc:58:41:8f:0c:57:e2:59:e5:5a:a4:dd:51:51:69:
         77:3d:94:23:f8:48:93:31:31:b8:ef:05:4c:15:ee:07:e7:e8:
         6c:82:ca:df:2a:54:31:f3:b7:eb:26:ed:60:e4:e6:47:7e:16:
         1c:44:3b:fd:f7:89:53:ad:d7:a4:17:a4:07:98:82:23:3b:6e:
         29:e3:15:b6:b6:b8:54:59:98:3e:fe:d8:5f:c8:f1:cb:26:8b:
         92:ae:0e:8b:6e:4c:f7:8f:e3:d3:0a:88:de:b6:ef:38:46:57:
         48:06:49:a2:cb:d8:cc:a4:e1:28:0d:3c:92:2d:34:6d:05:c9:
         f7:30:87:22:03:e7:87:2b:a7:b9:b5:61:5c:4d:cf:71:fc:fa:
         c3:d5:ea:c2:72:4d:5c:86:03:af:3a:a6:06:4e:63:c1:3a:85:
         ee:28:58:83:1f:e8:24:86:d5:ff:7a:01:0f:2d:22:d0:89:16:
         87:96:72:05:55:aa:10:83:84:1e:e7:c8:90:3a:df:01:f7:5c:
         13:a6:74:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:38 2024 by rpki-client on console-ams.rpki-client.org