Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff1ab2f1-321c-3b93-817c-6f37e13dfcb3.roa
File:                     ff1ab2f1-321c-3b93-817c-6f37e13dfcb3.roa (raw, json)
Hash identifier:          E2RsHDQO+IGPwQtlBPd4N0KjuJrPxkNYxXz910amg3o=
Subject key identifier:   5F:A0:AB:DE:5A:FF:4C:CA:42:CF:47:3C:F9:9B:38:11:0D:C3:34:18
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858472B6B298F1E35C2394AD37160
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff1ab2f1-321c-3b93-817c-6f37e13dfcb3.roa
Signing time:             Tue 10 Sep 2024 16:35:38 +0000
ROA not before:           Tue 10 Sep 2024 16:35:38 +0000
ROA not after:            Mon 09 Dec 2024 17:35:38 +0000
asID:                     203
IP address blocks:        199.228.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:6b:29:8f:1e:35:c2:39:4a:d3:71:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 10 16:35:38 2024 GMT
            Not After : Dec  9 17:35:38 2024 GMT
        Subject: CN=9b03968e-c8c5-4c9a-a40e-5bf9b64fa57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:94:ec:06:da:d7:55:02:49:05:2b:f4:8d:
                    0c:02:ee:98:2e:a3:53:a7:05:44:ab:03:f0:c0:d5:
                    c2:ac:66:89:67:87:11:35:e6:65:5a:81:e5:38:28:
                    22:67:26:62:35:f9:c5:34:23:a2:bf:90:8c:a1:1b:
                    41:25:1a:17:cc:c5:8d:20:67:2a:ac:f3:96:ef:15:
                    77:d9:ab:6d:26:91:30:87:96:2f:5e:0d:cc:e5:1e:
                    1e:34:bf:ce:8c:68:4b:41:77:fc:40:2d:6a:84:34:
                    95:1a:e7:86:48:89:3f:d0:f4:48:84:f1:da:11:8d:
                    15:d7:5f:51:6e:27:ba:97:cf:2d:ce:f4:25:2b:f7:
                    43:c3:58:c2:4b:51:36:a4:82:ad:20:be:09:c8:45:
                    bd:94:2e:1f:10:6b:73:8f:ef:13:c1:db:37:50:c2:
                    d4:62:f1:f7:fb:68:b9:22:ad:95:70:10:f4:89:21:
                    d8:4a:a2:e9:10:1d:45:84:3e:89:85:39:43:60:50:
                    ce:e2:41:41:fa:98:e9:b1:a6:d7:a4:4c:8d:d9:2f:
                    80:50:df:f5:9f:91:cc:d3:04:1b:27:26:3c:0d:fc:
                    bb:08:c4:b2:19:74:c1:8c:77:89:bc:15:ad:38:65:
                    1f:d1:c6:c5:ee:41:96:0d:55:6a:1f:50:e7:48:d8:
                    47:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A0:AB:DE:5A:FF:4C:CA:42:CF:47:3C:F9:9B:38:11:0D:C3:34:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff1ab2f1-321c-3b93-817c-6f37e13dfcb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.228.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:48:7a:26:83:29:8a:03:7f:b5:b7:11:bd:1c:53:eb:dc:52:
         b0:d0:98:7c:1f:b5:d7:fa:bb:bf:ee:bd:40:2b:a3:0c:a5:9d:
         9d:92:b3:8a:64:56:6f:f1:69:6f:c5:df:48:85:61:50:12:27:
         ea:6e:84:f0:46:84:a6:cb:4a:8a:21:be:be:51:a3:90:2d:eb:
         c0:56:d7:1f:c5:6a:fa:a9:d2:30:da:5e:98:85:9e:20:b4:f7:
         6c:d3:9b:c4:93:c5:94:31:7e:01:ac:92:74:50:ca:dd:fa:fd:
         40:63:9d:99:9a:28:bc:15:b3:ce:ea:b8:32:4a:70:16:93:3b:
         0e:b4:57:b8:d9:c3:c1:c0:ca:0f:8a:50:fb:09:f2:55:33:6b:
         68:99:ad:c7:20:7f:71:62:38:a4:13:3b:f7:03:c0:35:a2:00:
         8d:07:d9:e4:36:ec:8d:a2:56:ed:cc:a4:f6:65:0d:7f:bb:9c:
         54:c6:3d:91:3e:68:0e:27:0d:c5:9d:29:f6:26:f3:35:aa:a7:
         80:d5:86:a4:28:d4:32:cc:76:64:4a:24:fb:b4:25:20:16:2d:
         58:9d:9e:69:43:cb:3b:07:82:4e:4c:93:90:03:31:07:1b:f8:
         5d:6f:c0:67:fa:97:30:f8:c7:48:27:9c:8e:83:76:b4:e1:8e:
         33:4a:76:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcraymPHjXCOUrTcWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MDkxMDE2MzUzOFoXDTI0MTIwOTE3MzUzOFowLzEtMCsGA1UEAxMk
OWIwMzk2OGUtYzhjNS00YzlhLWE0MGUtNWJmOWI2NGZhNTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryeU7Aba11UCSQUr9I0MAu6YLqNTpwVEqwPw
wNXCrGaJZ4cRNeZlWoHlOCgiZyZiNfnFNCOiv5CMoRtBJRoXzMWNIGcqrPOW7xV3
2attJpEwh5YvXg3M5R4eNL/OjGhLQXf8QC1qhDSVGueGSIk/0PRIhPHaEY0V119R
bie6l88tzvQlK/dDw1jCS1E2pIKtIL4JyEW9lC4fEGtzj+8Twds3UMLUYvH3+2i5
Iq2VcBD0iSHYSqLpEB1FhD6JhTlDYFDO4kFB+pjpsabXpEyN2S+AUN/1n5HM0wQb
JyY8Dfy7CMSyGXTBjHeJvBWtOGUf0cbF7kGWDVVqH1DnSNhHQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF+gq95a/0zKQs9HPPmbOBENwzQYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmYxYWIyZjEtMzIxYy0z
YjkzLTgxN2MtNmYzN2UxM2RmY2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+SpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJIeiaDKYoDf7W3Eb0cU+vcUrDQmHwftdf6u7/uvUArowylnZ2Ss4pk
Vm/xaW/F30iFYVASJ+puhPBGhKbLSoohvr5Ro5At68BW1x/Favqp0jDaXpiFniC0
92zTm8STxZQxfgGsknRQyt36/UBjnZmaKLwVs87quDJKcBaTOw60V7jZw8HAyg+K
UPsJ8lUza2iZrccgf3FiOKQTO/cDwDWiAI0H2eQ27I2iVu3MpPZlDX+7nFTGPZE+
aA4nDcWdKfYm8zWqp4DVhqQo1DLMdmRKJPu0JSAWLVidnmlDyzsHgk5Mk5ADMQcb
+F1vwGf6lzD4x0gnnI6DdrThjjNKdoE=
-----END CERTIFICATE-----
Generated at Sat Sep 21 03:07:40 2024 by rpki-client on console-fra.rpki-client.org