Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c37ed344-c44d-3872-b573-475ba33a5931.roa
File:                     c37ed344-c44d-3872-b573-475ba33a5931.roa (raw, json)
Hash identifier:          hD1zc20ObuBr7mSlAnRZgMPQEMm8tETbnVas0ehA3Zs=
Subject key identifier:   CC:36:83:B4:98:DF:6F:03:09:0C:BC:F6:8F:46:4F:FE:DB:85:C8:89
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049AF79DA99595F4CA0BC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c37ed344-c44d-3872-b573-475ba33a5931.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7725
IP address blocks:        76.97.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:af:79:da:99:59:5f:4c:a0:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=b9574c4d-4400-4bde-8e0d-245d0a642b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a6:4a:80:db:bf:24:8d:2b:cf:f8:2e:7e:05:
                    e8:36:8f:24:f8:72:ac:2e:8b:22:88:69:64:e4:5e:
                    16:8e:93:b9:91:ff:21:aa:84:21:b6:1a:8a:bb:f2:
                    a5:74:32:8b:53:4e:62:46:23:33:c9:05:48:84:19:
                    c1:87:d3:f6:99:d2:8f:a5:b4:b8:b3:37:07:79:5b:
                    b5:1d:78:e4:21:fe:06:f7:3a:d1:5a:f8:60:1b:f2:
                    bf:1a:ba:06:04:eb:e6:cc:be:25:99:4b:e4:3a:5d:
                    16:ee:cf:71:0b:50:3b:22:83:96:67:74:b3:6e:5d:
                    87:3e:f1:28:2a:22:04:93:14:d8:1a:19:ee:e1:5e:
                    58:ce:e4:e5:1c:ad:31:e8:12:70:a4:d6:a5:25:f9:
                    b6:2c:6e:a9:ee:26:71:1a:08:8d:d2:1e:e6:54:72:
                    b7:81:64:4d:53:d4:f5:69:dd:ca:f1:d8:ad:10:28:
                    45:4d:23:5b:bd:69:cb:cf:2e:a0:f3:5a:97:91:4b:
                    b5:57:f3:67:97:ff:d8:cc:08:f2:12:36:e3:35:1b:
                    56:b1:6d:60:91:71:8e:d7:0a:00:e7:4c:dc:d6:91:
                    ab:de:fb:e6:a0:b7:06:ba:ed:8c:41:68:99:f6:b6:
                    c4:de:7b:91:83:2e:75:51:c2:e8:6a:06:70:fa:b7:
                    73:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:36:83:B4:98:DF:6F:03:09:0C:BC:F6:8F:46:4F:FE:DB:85:C8:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c37ed344-c44d-3872-b573-475ba33a5931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.97.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:18:b6:c9:61:7f:a4:60:81:3b:9f:55:c2:2e:35:ef:d0:86:
         8f:2a:51:ac:c0:9a:5f:1f:34:43:dc:03:f1:f2:c9:68:65:b9:
         91:b5:3f:20:78:36:44:50:65:a0:78:3b:74:b4:f5:86:55:08:
         4e:f3:25:4f:e7:d4:42:f3:99:f3:14:eb:23:f4:bb:67:1f:37:
         f7:32:fa:00:e5:f9:a4:e2:bb:19:a3:e3:2f:91:ee:30:41:91:
         d4:02:2e:d8:76:e0:c2:da:2c:ea:17:c4:81:1e:54:d1:2c:6c:
         e7:a8:e4:8f:3c:3b:7b:a6:30:57:f7:ce:97:82:08:6c:3b:1a:
         b1:e3:b7:5d:42:e7:3c:e7:2c:91:99:da:5c:24:68:7c:d9:50:
         ec:39:57:06:48:87:4f:8a:70:b6:c4:c9:a7:3a:92:50:04:dc:
         57:48:59:99:68:8c:11:aa:bf:58:89:79:66:1f:54:d1:bd:8d:
         2f:cb:5c:92:be:b6:2e:26:82:a8:a0:1b:96:9f:44:35:23:57:
         43:a7:c7:37:27:f6:8e:9b:3f:96:f6:a9:29:03:fb:cc:d4:1b:
         9c:bf:9d:49:11:09:3b:21:e1:b4:a1:8b:01:4d:7c:45:3b:a0:
         26:e0:f0:40:9f:f1:87:1d:98:91:42:1c:c9:40:b8:0c:32:b5:
         5a:7f:38:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:44:30 2024 by rpki-client on console-fra.rpki-client.org