Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ecfe8990-712b-35b0-b90a-f2eb4c42164e.roa
File:                     ecfe8990-712b-35b0-b90a-f2eb4c42164e.roa (raw, json)
Hash identifier:          1gnWApAbfHXOhm35Emm0tk+4b4Jv9Vwpt1/eYX46ue4=
Subject key identifier:   70:67:D2:C8:66:2B:B4:B9:13:43:9B:27:99:E5:8E:D8:0A:E6:FD:1B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285846EDC28CBE35F2A70560FC5D80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ecfe8990-712b-35b0-b90a-f2eb4c42164e.roa
Signing time:             Mon 19 Aug 2024 14:31:35 +0000
ROA not before:           Mon 19 Aug 2024 14:31:35 +0000
ROA not after:            Sun 17 Nov 2024 15:31:35 +0000
asID:                     203
IP address blocks:        206.164.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ed:c2:8c:be:35:f2:a7:05:60:fc:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 19 14:31:35 2024 GMT
            Not After : Nov 17 15:31:35 2024 GMT
        Subject: CN=9a4ad7de-1df4-401e-b5b7-c2bcb2c09ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:4e:c9:00:69:51:4b:a1:44:c0:65:ac:cd:
                    3f:dd:6e:b1:eb:f0:d9:13:b8:74:b8:fb:85:06:8a:
                    32:69:5f:6a:b3:c9:83:be:3b:c5:51:09:55:8d:69:
                    8c:80:09:6e:82:d7:8a:4b:05:bc:f6:31:d7:3a:84:
                    38:59:ee:78:43:7c:e4:7f:60:90:99:c4:3b:99:ca:
                    c3:7d:a5:4b:73:51:7b:84:27:e2:64:45:d1:d7:6a:
                    06:52:00:39:19:d5:7f:75:dc:42:03:e9:52:b9:7d:
                    5f:76:06:59:50:6e:7b:7c:13:c7:a9:ac:16:55:e2:
                    e8:d4:48:cd:08:19:0f:ba:5d:df:78:13:00:2e:39:
                    ed:62:9f:2a:da:38:af:60:0b:eb:b4:c3:20:2f:d0:
                    91:6e:c2:ec:3b:87:c3:91:7b:95:e5:57:77:10:b6:
                    de:65:49:38:77:d6:18:78:3f:07:c7:ba:81:bf:27:
                    55:84:19:a1:ae:13:3a:72:c4:6f:2b:b2:6b:45:5e:
                    86:90:95:f0:61:12:7f:35:81:e6:ba:bc:eb:2e:31:
                    17:0a:43:5f:26:64:80:ff:33:4b:94:c7:a3:f0:b3:
                    b0:57:ad:19:8d:4e:68:dc:a6:a9:2e:25:a5:11:6a:
                    74:ba:19:c0:1e:4f:fb:c4:1f:57:33:c3:5d:1d:ba:
                    78:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:67:D2:C8:66:2B:B4:B9:13:43:9B:27:99:E5:8E:D8:0A:E6:FD:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ecfe8990-712b-35b0-b90a-f2eb4c42164e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:fb:c9:e1:bb:bc:15:ad:81:d6:dc:f3:98:a7:9a:d3:a4:3d:
         8b:72:06:9e:90:6d:8b:46:bc:27:89:89:12:35:fe:19:cd:b8:
         1e:9c:a0:c0:4e:67:8a:fa:4c:32:e1:5d:aa:6d:f0:81:c7:3f:
         b8:35:2d:aa:62:ac:dd:4b:8f:60:c0:71:30:95:b5:ca:ed:2e:
         b3:8f:e9:7b:ac:6c:34:97:f0:2b:35:4c:61:74:77:bb:7c:4c:
         0b:2d:75:98:c4:91:b8:49:b9:45:79:26:6a:05:e3:cd:6c:4c:
         34:c0:04:8e:ee:9e:81:5a:ff:99:d4:29:5b:99:90:d5:11:4d:
         81:3a:ef:c1:c0:d2:d6:4b:fb:e4:78:ba:9f:8d:a9:4c:4f:8e:
         1d:9a:e9:65:fe:e4:2a:a8:a9:a8:72:e7:af:05:52:2c:37:66:
         1d:2c:80:24:28:08:46:8a:b4:7d:a1:0c:d4:ec:17:fd:84:9b:
         fb:6c:10:5b:9a:a0:fa:b7:7c:9b:45:f9:85:9c:c2:1f:28:23:
         7a:7d:b7:dd:0f:b0:81:0d:f9:0e:84:71:d9:ce:b2:96:42:1d:
         2b:f0:51:e0:ac:18:bc:bc:55:df:89:a7:bb:e2:31:fc:bd:79:
         bb:3b:a6:d1:ae:75:0b:ed:8f:8c:7b:dc:5b:e9:ce:cb:4e:6b:
         65:15:36:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 03:07:40 2024 by rpki-client on console-fra.rpki-client.org