Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f6f3be8a-fe77-36dd-8cac-6dcf2c5bfac5.roa
File:                     f6f3be8a-fe77-36dd-8cac-6dcf2c5bfac5.roa (raw, json)
Hash identifier:          QofuEM/jQBD3TpMjTeCEa1ZAnu41ROl+MhV7v0FXZFU=
Subject key identifier:   23:43:AE:14:5A:E2:A9:06:A7:F4:17:0F:E7:0A:05:D0:8E:69:30:6D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848ADC617BF75B82B0273237EB0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f6f3be8a-fe77-36dd-8cac-6dcf2c5bfac5.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     3360
IP address blocks:        199.228.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:17:bf:75:b8:2b:02:73:23:7e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=113a355f-8adf-4917-8bef-87cc1953a392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:83:dc:79:ef:35:88:7f:e7:a8:57:5d:c6:70:
                    75:74:43:ce:da:be:7a:d5:af:a7:2d:42:04:33:23:
                    70:09:03:f0:7a:b9:99:c1:b6:9b:88:1c:dd:bc:d2:
                    bb:72:97:7e:a2:d6:7a:2f:7e:b4:c1:0b:d8:09:ca:
                    16:1d:cb:6f:82:25:c5:6e:6e:60:9a:a9:84:a7:b7:
                    87:8d:07:1e:90:e4:03:10:eb:f3:c4:f5:e1:4c:fa:
                    49:a3:33:a6:19:ad:a0:48:bf:3b:e5:9a:0f:7d:f1:
                    f1:cf:ed:33:57:6e:4f:ea:fb:5e:1a:ec:21:cd:dd:
                    8e:ce:27:57:1d:eb:30:6f:78:e5:5e:e0:5d:90:12:
                    20:97:42:f7:26:1f:af:83:8e:1f:79:ad:96:ac:74:
                    aa:29:b3:41:20:28:d3:e4:cd:68:56:2b:de:7d:fb:
                    1d:e8:88:de:29:3c:76:e4:9b:df:b8:76:da:9d:35:
                    45:58:57:1f:fb:80:11:76:28:9c:80:5b:ec:a5:1a:
                    5a:29:5f:e7:10:77:0c:19:e4:48:53:29:6b:32:bd:
                    b2:13:72:39:fa:8d:8d:68:1b:11:78:71:95:ca:29:
                    5e:f8:cb:61:18:bf:2e:4f:aa:b5:9f:8c:ce:6b:3c:
                    5e:b3:f2:b9:d2:ed:8a:d3:2e:9a:cc:63:68:ad:3e:
                    03:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:43:AE:14:5A:E2:A9:06:A7:F4:17:0F:E7:0A:05:D0:8E:69:30:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f6f3be8a-fe77-36dd-8cac-6dcf2c5bfac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.228.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:6e:75:31:e1:b1:df:46:d9:d5:96:4d:b8:ce:d0:79:65:5e:
         fc:e4:c5:41:bf:c0:19:fa:af:68:31:3f:e3:ac:21:ac:d2:4c:
         c4:f1:2f:9b:05:72:6c:84:66:88:b3:eb:1a:ef:32:d7:da:7d:
         8a:b6:9d:a7:95:17:8d:7b:f1:a2:5b:ca:8b:d4:a4:38:b9:f8:
         9b:df:4b:89:d3:a2:a6:7c:12:f1:b1:22:bb:1b:de:9a:1f:8e:
         5c:2d:9f:7e:c8:8f:a6:76:26:e9:ab:e2:ad:40:bc:b9:b9:79:
         93:51:08:8a:37:ec:de:00:f9:bc:77:24:88:46:e1:f2:dc:fd:
         54:4a:70:36:31:49:0d:31:c1:b2:04:df:dc:20:8b:06:bc:43:
         6c:48:71:ad:00:fd:a0:59:44:8a:91:7a:b3:d3:40:79:c3:e7:
         b9:f5:bf:8d:92:77:79:6d:2c:36:c8:58:0c:a4:55:7e:ed:19:
         5b:a7:b2:cc:8d:01:d7:44:bf:d9:9e:05:58:ac:df:c1:b4:46:
         5f:d6:b2:ed:47:e4:04:17:e1:90:5f:ba:63:5c:cc:31:58:bc:
         d4:04:31:92:b3:63:60:91:d1:19:a2:8b:af:3f:3f:c2:95:91:
         51:53:34:bc:b4:64:81:e0:a4:d8:a1:b7:5b:16:ae:b9:f1:0f:
         97:aa:7c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:25 2025 by rpki-client