Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fdd089c2-ccc1-3053-ac4e-f5c20fe8c0c8.roa
File:                     fdd089c2-ccc1-3053-ac4e-f5c20fe8c0c8.roa (raw, json)
Hash identifier:          zvAx7Ea7qGEtpHZdmLUqyGdQ0iDJoQ1zWiN+1aYRZ+4=
Subject key identifier:   A3:82:AF:C9:D3:00:71:4D:68:41:4C:93:A6:54:61:60:85:44:31:46
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858485F9ADD9FAB284259FBE3B118
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fdd089c2-ccc1-3053-ac4e-f5c20fe8c0c8.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        168.87.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:dd:9f:ab:28:42:59:fb:e3:b1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=fe29745b-6491-4d2f-b7e6-55bf3e3ad056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:f6:83:59:e0:f3:82:8f:e2:75:0f:ad:36:
                    c0:de:3b:53:6b:7c:5c:b7:9c:62:d7:5b:6c:66:57:
                    35:c6:4f:7c:87:c4:c8:8e:e6:47:49:2a:56:32:0b:
                    a0:cf:c5:c5:78:8b:d8:3d:ec:e0:ae:4a:54:3b:b8:
                    0a:68:0c:9f:43:42:b0:42:6d:77:02:89:dc:3f:8e:
                    d8:86:e7:bd:a3:ea:d4:23:84:74:c3:af:42:32:02:
                    45:d6:62:90:fe:72:b6:b0:bc:82:e5:ff:58:2e:cf:
                    67:ac:de:70:f0:45:a2:e3:c7:52:a3:52:99:03:fa:
                    c1:fc:91:0c:ef:da:3b:18:ad:79:b0:67:29:5d:99:
                    70:38:a5:13:0d:ae:9e:c2:13:b4:c9:f1:98:b8:6e:
                    a0:21:22:91:b1:27:6d:c5:9a:27:f7:61:be:7a:1c:
                    0e:f7:1d:ce:a2:be:bb:fb:cb:5b:b0:8f:2a:d1:56:
                    78:f8:f5:25:86:3d:cb:ad:dc:d6:6b:3b:98:2d:85:
                    0e:c3:83:b4:a4:38:b1:d1:fb:12:52:53:4b:a4:16:
                    b9:c2:4e:70:31:a1:cd:7b:e8:c5:bc:15:47:0f:66:
                    65:35:58:5c:e5:bd:a1:99:db:ea:56:21:34:e9:7b:
                    89:e6:4a:53:fe:5d:75:1b:9d:cf:f1:05:0c:5c:97:
                    fc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:82:AF:C9:D3:00:71:4D:68:41:4C:93:A6:54:61:60:85:44:31:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fdd089c2-ccc1-3053-ac4e-f5c20fe8c0c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ad:a7:29:a2:8f:16:1a:ea:15:60:70:8c:96:de:72:33:16:
         68:85:fa:4f:1e:f6:57:e0:38:73:21:79:c5:3b:97:a0:c2:4c:
         69:bb:4d:65:73:33:81:8a:31:0a:b4:74:9e:35:c0:65:e3:c1:
         08:67:2c:5b:e2:7c:b0:b2:9e:84:2a:36:bf:c1:ec:48:9f:78:
         9a:82:33:7b:44:17:43:ed:38:62:b2:93:66:d5:c5:64:f5:95:
         66:d1:19:b7:17:3d:74:d3:43:43:05:a6:a2:a2:f8:11:02:e2:
         e5:a1:5c:c5:90:8b:e4:85:92:18:41:df:fe:cd:cf:07:c2:17:
         f5:28:16:e0:24:60:1d:37:bc:37:4f:06:b0:bd:34:3b:13:5e:
         ad:3a:0d:da:cb:34:ec:03:52:ab:71:97:51:2a:3d:68:4f:f0:
         44:bb:13:57:46:93:73:83:8d:72:72:0b:fc:29:bd:9c:08:3e:
         87:9d:89:ce:f3:1e:d2:d2:7c:42:8b:9e:4c:91:88:0b:e6:f5:
         d7:a2:3a:00:c9:d9:67:25:09:db:76:39:02:e2:a6:68:79:28:
         5d:45:69:0f:93:4d:42:6d:dc:b9:d6:c6:db:ea:cd:4b:b1:9a:
         09:72:2a:1c:c7:41:65:3f:3d:9d:a6:74:10:74:d4:b3:3f:37:
         c4:a7:be:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmt2fqyhCWfvjsRgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
ZmUyOTc0NWItNjQ5MS00ZDJmLWI3ZTYtNTViZjNlM2FkMDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNr2g1ng84KP4nUPrTbA3jtTa3xct5xi11ts
Zlc1xk98h8TIjuZHSSpWMgugz8XFeIvYPezgrkpUO7gKaAyfQ0KwQm13AoncP47Y
hue9o+rUI4R0w69CMgJF1mKQ/nK2sLyC5f9YLs9nrN5w8EWi48dSo1KZA/rB/JEM
79o7GK15sGcpXZlwOKUTDa6ewhO0yfGYuG6gISKRsSdtxZon92G+ehwO9x3Oor67
+8tbsI8q0VZ4+PUlhj3LrdzWazuYLYUOw4O0pDix0fsSUlNLpBa5wk5wMaHNe+jF
vBVHD2ZlNVhc5b2hmdvqViE06XuJ5kpT/l11G53P8QUMXJf8zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKOCr8nTAHFNaEFMk6ZUYWCFRDFGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmRkMDg5YzItY2NjMS0z
MDUzLWFjNGUtZjVjMjBmZThjMGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFe2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEytpymijxYa6hVgcIyW3nIzFmiF+k8e9lfgOHMhecU7l6DCTGm7TWVz
M4GKMQq0dJ41wGXjwQhnLFvifLCynoQqNr/B7EifeJqCM3tEF0PtOGKyk2bVxWT1
lWbRGbcXPXTTQ0MFpqKi+BEC4uWhXMWQi+SFkhhB3/7NzwfCF/UoFuAkYB03vDdP
BrC9NDsTXq06DdrLNOwDUqtxl1EqPWhP8ES7E1dGk3ODjXJyC/wpvZwIPoedic7z
HtLSfEKLnkyRiAvm9deiOgDJ2WclCdt2OQLipmh5KF1FaQ+TTUJt3LnWxtvqzUux
mglyKhzHQWU/PZ2mdBB01LM/N8SnvkY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:58 2025 by rpki-client