Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df54e28e-16a2-3158-9e5c-42ba1c10d6e4.roa
File:                     df54e28e-16a2-3158-9e5c-42ba1c10d6e4.roa (raw, json)
Hash identifier:          UpGoDYQNiIAC58QNRt3TaXsJEYzk9t0u11TE5Y1YBmI=
Subject key identifier:   F3:A2:0B:B1:3C:97:46:FD:BA:10:13:83:34:61:72:04:D4:BC:33:44
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584752E423C647E59C7E75E08400
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df54e28e-16a2-3158-9e5c-42ba1c10d6e4.roa
Signing time:             Tue 24 Sep 2024 19:55:54 +0000
ROA not before:           Tue 24 Sep 2024 19:55:54 +0000
ROA not after:            Mon 23 Dec 2024 20:55:54 +0000
asID:                     202
IP address blocks:        168.87.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:e4:23:c6:47:e5:9c:7e:75:e0:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 24 19:55:54 2024 GMT
            Not After : Dec 23 20:55:54 2024 GMT
        Subject: CN=67038579-1286-4a69-b9d0-0ed4f4a4478f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:38:cd:da:f7:43:db:53:23:c1:ad:2c:e4:a2:
                    f2:50:90:1c:9c:8b:19:a2:e4:20:0a:a2:8e:27:dd:
                    7a:f0:4d:aa:a4:f4:e9:47:54:4f:59:c4:08:13:72:
                    df:b8:e4:85:04:19:71:48:5f:67:7d:9e:57:b0:2b:
                    8a:28:50:d8:ab:15:9c:98:64:ac:61:7c:8d:10:fa:
                    f0:fb:da:94:32:15:87:c6:d9:06:74:93:12:18:fc:
                    1b:0a:3d:c4:bf:bd:f2:81:de:7b:a5:00:a6:45:4d:
                    21:21:98:20:4e:3e:a4:5f:a1:4b:11:38:53:30:92:
                    9e:f1:c4:cf:5f:17:67:42:fd:b2:d4:2f:d5:24:ba:
                    91:e2:59:53:f1:18:85:c4:1e:dd:3a:2f:d4:0e:19:
                    9c:64:c6:34:79:4a:db:db:d2:f0:58:ae:a6:a4:7c:
                    e3:9d:fa:8e:87:e8:c9:79:d9:e7:02:da:ae:55:4c:
                    b5:8c:c2:cd:40:ae:52:75:51:0e:f2:18:f9:4e:52:
                    0d:64:98:b2:93:bc:fb:e5:b6:01:cf:f7:32:42:a7:
                    97:33:b8:26:bc:80:cb:ff:76:d1:bc:ae:ca:4e:e5:
                    20:25:d1:5b:cc:78:e4:67:5a:3a:12:a7:25:49:46:
                    83:67:44:34:e6:32:ee:6e:8b:cd:7d:a6:54:1b:a4:
                    b4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A2:0B:B1:3C:97:46:FD:BA:10:13:83:34:61:72:04:D4:BC:33:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df54e28e-16a2-3158-9e5c-42ba1c10d6e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b1:01:e6:d5:50:5b:31:90:98:ff:41:d1:a7:1c:3c:c4:8e:
         74:30:03:6c:30:80:89:d0:2e:f9:61:cc:fe:f5:45:5b:dc:65:
         7c:6e:d2:2f:23:0a:ba:b7:ea:6e:d7:95:bc:cb:12:ae:29:93:
         d2:c8:24:be:9a:38:7b:cd:1e:2f:23:60:71:e1:2a:3d:ec:b3:
         ce:4e:24:33:1c:65:ef:52:84:14:52:ce:d0:e6:94:ed:9e:7e:
         fa:cf:92:e9:1a:d2:2f:24:55:71:54:fd:56:ab:c7:35:04:0a:
         da:33:fe:b7:89:56:66:b2:fd:01:8d:70:97:bd:46:cc:27:e5:
         39:50:d3:bc:fe:3f:0e:9e:2b:4d:d5:09:60:82:16:4c:34:f8:
         16:05:e7:85:48:7c:6b:ea:3e:7a:ec:f8:dc:29:25:38:16:cd:
         a1:b3:a2:fa:5f:f6:dd:ed:d3:e3:46:2c:66:b4:5b:29:f5:58:
         ce:20:1c:7f:cf:a3:27:10:3c:45:47:96:96:d3:d3:a4:70:0f:
         74:84:69:4c:e8:a1:ff:77:2e:85:b4:a9:61:d6:f0:a5:24:2d:
         d3:4a:65:d2:94:9b:fb:72:da:66:75:82:6a:69:b2:d7:c6:2d:
         03:0c:a0:08:54:f2:4b:86:49:22:0e:9c:99:94:9a:21:b8:09:
         c6:3b:36:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:49 2024 by rpki-client on console-ams.rpki-client.org