Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/23cc807c-5bfb-37bc-8ed0-b63bca7560e3.roa
File:                     23cc807c-5bfb-37bc-8ed0-b63bca7560e3.roa (raw, json)
Hash identifier:          giT+mjaknmOnBXte3CCJ8Y50vfBHi9XWt4if5Mcd/cg=
Subject key identifier:   38:8E:88:97:A2:9A:17:1A:C6:D1:96:69:84:CE:94:26:AC:E1:D8:D3
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584693F00C1A728568AEBC08E500
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/23cc807c-5bfb-37bc-8ed0-b63bca7560e3.roa
Signing time:             Wed 17 Jul 2024 12:00:00 +0000
ROA not before:           Wed 17 Jul 2024 12:00:00 +0000
ROA not after:            Fri 21 Aug 2026 04:00:00 +0000
asID:                     36692
IP address blocks:        67.215.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:93:f0:0c:1a:72:85:68:ae:bc:08:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jul 17 12:00:00 2024 GMT
            Not After : Aug 21 04:00:00 2026 GMT
        Subject: CN=2a31718d-c840-4b43-9056-70727e206503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c0:12:ef:90:31:55:6d:80:c4:a4:3d:9f:8c:
                    d8:a2:f9:e3:72:53:a6:4d:ca:70:bd:bc:e0:6a:4e:
                    96:b3:a0:a3:ee:79:9a:ca:a9:52:cf:c0:3f:3b:25:
                    9f:61:b6:b0:c6:dc:21:32:84:9c:32:f4:1e:a9:6f:
                    fa:a3:3f:99:35:87:1d:c7:88:a7:d2:6c:86:75:33:
                    4b:cb:a0:35:7b:b9:ed:3c:93:5c:5a:91:6e:60:7d:
                    80:23:d1:74:bb:41:8c:b1:7e:10:e7:21:95:0b:94:
                    d1:7d:b7:f5:e1:d8:8f:2c:32:e0:62:9a:c3:74:e0:
                    2d:aa:6f:73:9a:dd:f9:73:a8:2e:08:f8:44:4f:b8:
                    18:5d:91:c5:7c:bd:4c:81:0d:40:4c:04:32:85:dd:
                    03:fe:6a:e4:ca:40:ab:d2:95:60:b1:b0:31:0a:74:
                    a9:72:de:9b:01:25:26:1e:1e:5e:9b:4a:0c:92:ea:
                    56:e8:c9:65:1b:c2:6f:0a:7e:e4:e8:f9:d0:89:8c:
                    c4:fc:de:56:9f:1a:e0:2d:3d:34:ea:25:4f:5a:95:
                    42:e7:d2:4f:8b:cf:a3:02:48:f3:b5:ec:c5:bc:f0:
                    b2:50:cb:51:8a:f6:a3:39:81:7e:e8:b1:14:30:59:
                    31:c5:cd:ad:ac:12:99:e4:bc:43:d5:62:aa:7b:79:
                    a9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8E:88:97:A2:9A:17:1A:C6:D1:96:69:84:CE:94:26:AC:E1:D8:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/23cc807c-5bfb-37bc-8ed0-b63bca7560e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:0c:ef:0d:cd:b1:c2:73:9f:ef:3e:cd:16:91:01:f8:d8:83:
         20:e8:0a:e9:77:0c:53:b5:31:66:2a:1e:c6:dd:da:04:61:83:
         73:12:51:36:88:01:7c:cf:e3:9a:4f:e8:a2:06:23:52:f9:ad:
         9d:33:3e:d1:0a:ef:02:5a:34:a6:e6:ba:52:b3:46:7b:9a:02:
         5a:f2:65:c3:66:24:3c:08:49:88:15:0c:60:73:b3:42:66:ae:
         92:ab:1e:62:a8:3a:b4:fd:b8:61:91:72:15:4c:db:67:d9:25:
         50:d3:a3:2f:a1:45:23:97:e4:76:8b:75:b7:2e:1b:60:ff:cb:
         f7:b4:f9:b8:22:df:db:88:9c:e3:e0:aa:af:4a:4c:1c:ed:6d:
         53:c2:6a:6f:4f:ce:bc:e9:98:28:fc:52:89:7a:14:a9:53:e4:
         e3:0b:c1:91:a5:1f:54:6c:45:9e:67:23:47:f2:34:13:10:3b:
         77:12:60:09:46:71:c3:2c:ff:7b:88:3a:0d:35:e5:3d:7f:50:
         72:21:b3:b1:1b:de:92:e9:51:d9:4d:69:bf:d4:da:fb:d2:30:
         55:c9:5f:b7:07:37:02:b9:ef:17:ab:93:2c:9a:6e:14:91:b1:
         9e:bd:02:a6:4d:9f:7f:87:af:3c:af:1b:4d:c6:01:e5:29:e1:
         c6:e9:3a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:47 2025 by rpki-client