Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f11817d1-a5e3-3030-8df3-8ad689cd1bd4.roa
File:                     f11817d1-a5e3-3030-8df3-8ad689cd1bd4.roa (raw, json)
Hash identifier:          kLToXRlKF36H5nrfxEQ5A+AXzXaAWfni56S/oazYY8A=
Subject key identifier:   6A:95:AA:AC:EC:38:C2:5C:5A:D0:70:19:12:8B:13:5E:CD:16:1E:62
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584785BBA4FB805FC526E66A0600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f11817d1-a5e3-3030-8df3-8ad689cd1bd4.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     203
IP address blocks:        168.87.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:a4:fb:80:5f:c5:26:e6:6a:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=49e3bb03-5f9b-4a8c-8127-8d4fe7d516e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cd:a1:12:80:3e:7c:8d:23:16:ac:5d:f2:dd:
                    75:71:2a:ab:3e:96:61:e3:02:c7:c5:5c:2b:e7:48:
                    03:b1:ce:7b:b5:94:fe:bc:c2:d7:b6:3f:d9:ed:b0:
                    e8:97:b1:c2:70:ab:52:77:d6:99:43:b7:d0:96:8b:
                    ee:b1:d3:6d:14:13:c0:04:04:05:fd:d0:60:f1:67:
                    4c:e4:88:e8:9b:6d:ea:ec:ff:89:a2:3f:fd:7f:17:
                    99:44:a5:b0:b0:85:34:ea:25:25:35:17:97:87:cc:
                    44:c9:ed:86:52:21:f7:89:35:3a:25:bd:85:21:8c:
                    b3:8c:64:8b:10:2f:c3:57:67:90:72:00:75:08:28:
                    bb:7f:34:28:d2:da:cf:e1:1d:ae:bc:b3:0b:1a:19:
                    58:d8:3c:94:02:7e:d2:09:5b:2b:93:d8:c3:6e:79:
                    28:bd:ed:cc:bf:c2:4a:6d:9f:d9:b7:bb:83:90:ed:
                    fd:97:9e:82:3d:51:2b:cf:8d:14:33:00:c0:fe:d2:
                    a9:1f:3e:7a:27:7b:8a:74:d2:2b:88:00:e9:3f:a9:
                    f0:4d:8c:d4:55:7e:3c:f9:a6:18:1d:4a:c7:97:48:
                    40:38:18:b5:33:ad:8e:a2:b9:94:80:23:33:55:ba:
                    b5:ff:06:cd:33:11:da:35:d4:3d:10:6c:b7:45:14:
                    b9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:95:AA:AC:EC:38:C2:5C:5A:D0:70:19:12:8B:13:5E:CD:16:1E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f11817d1-a5e3-3030-8df3-8ad689cd1bd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:7d:71:f7:70:93:b5:39:60:b4:ec:2c:65:c9:44:09:03:4f:
         27:cb:5d:9a:46:2d:bb:5d:4b:01:be:1d:0d:f2:94:f9:ca:18:
         08:8d:43:b8:bb:12:31:43:78:c5:e3:f9:cb:42:13:c6:40:48:
         79:c7:27:3d:01:b6:07:64:c2:96:97:dc:24:0c:3c:7f:eb:c6:
         42:c5:42:48:8c:f3:4a:db:a6:22:69:15:08:29:fe:9c:88:55:
         84:d2:cb:b3:e8:d8:33:2e:75:36:1c:80:b7:10:b8:86:10:25:
         7a:c5:99:1b:70:f5:70:11:b8:c9:0d:6a:a9:8e:f2:0f:38:9c:
         b4:2e:e1:9d:f1:30:21:f4:e0:53:5b:69:c5:b4:95:80:76:e6:
         26:8f:44:b7:4f:74:dc:22:e7:14:a1:e9:d0:4d:02:92:32:87:
         63:d2:52:e6:4c:c9:2f:00:25:a8:1b:51:5d:a4:03:b9:c3:f5:
         95:c1:9d:ce:d8:49:3c:b3:8b:b7:d7:b7:82:85:b9:92:5c:09:
         42:1e:f5:20:a1:2b:9e:03:4d:8d:f0:e3:e6:cf:50:04:54:cf:
         ab:af:95:af:15:4d:c2:52:6e:6c:98:5b:a7:d4:e6:87:67:1d:
         6c:c0:5b:71:bc:ff:ea:4b:8d:f4:ce:1d:da:1d:9f:42:23:6a:
         23:64:b6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:46 2024 by rpki-client on console-fra.rpki-client.org