Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c0d3e799-0845-3113-a3cb-e5267a1938d3.roa
File:                     c0d3e799-0845-3113-a3cb-e5267a1938d3.roa (raw, json)
Hash identifier:          5NNr1Out0HM+WpgIpTwh1FOvTf8YyuW6i+VNMSyJdQs=
Subject key identifier:   C1:A4:9B:10:B2:CB:B3:A8:BA:66:1A:8E:70:27:AA:29:4E:B9:B3:05
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F43285845BD92125539D20E62C902F1C0
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c0d3e799-0845-3113-a3cb-e5267a1938d3.roa
Signing time:             Thu 02 May 2024 15:28:10 +0000
ROA not before:           Thu 02 May 2024 15:28:10 +0000
ROA not after:            Wed 31 Jul 2024 15:28:10 +0000
asID:                     21949
IP address blocks:        76.9.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:92:12:55:39:d2:0e:62:c9:02:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: May  2 15:28:10 2024 GMT
            Not After : Jul 31 15:28:10 2024 GMT
        Subject: CN=3bce8adf-e0e5-4a10-9975-438473ebc7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:c0:f8:7e:9e:3b:e6:a4:d1:67:7f:9b:04:
                    a9:fb:2f:06:94:76:f6:29:c5:d5:73:a6:9a:57:6e:
                    70:2b:d9:a7:d8:27:08:2f:72:89:7a:34:2d:77:b7:
                    a0:52:46:6e:fe:b3:f3:e2:13:aa:3e:07:7d:72:9d:
                    53:76:f8:76:23:e7:b4:35:51:b6:30:24:22:17:aa:
                    12:5a:b5:1f:9f:3a:2f:45:80:80:6e:6e:47:2a:65:
                    47:f9:8d:f6:e1:04:ef:d0:3e:5d:76:e5:b3:43:b9:
                    5d:34:13:ad:93:9f:ef:1b:b8:23:52:a8:b7:b4:49:
                    9c:4d:54:4e:46:ea:c6:27:a6:f6:a5:11:04:04:ef:
                    be:bb:fc:50:52:13:8b:8a:80:38:f7:3e:91:9c:34:
                    16:90:2c:8d:f7:0b:e1:d4:5a:c1:92:42:29:1a:31:
                    71:61:a0:78:45:aa:ee:d0:4a:de:26:99:fd:cd:1f:
                    4f:8b:3d:a8:27:71:e2:cb:5a:5b:d4:af:33:ff:16:
                    40:87:95:1e:cd:1c:a5:17:2a:ff:1e:db:ff:c7:c2:
                    90:76:1c:40:71:a9:8b:1e:08:53:95:68:b3:39:5d:
                    00:d1:87:56:b8:9b:81:ad:37:14:9b:ae:57:f8:d7:
                    d8:84:82:80:cb:f5:3f:3a:5f:e3:9a:91:88:ee:b6:
                    f7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A4:9B:10:B2:CB:B3:A8:BA:66:1A:8E:70:27:AA:29:4E:B9:B3:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c0d3e799-0845-3113-a3cb-e5267a1938d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.9.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:30:08:14:01:ff:57:75:4a:55:4f:cf:b4:e1:78:5c:f1:5f:
         b1:f8:8c:e8:b0:93:60:e8:9a:58:11:d8:4c:56:47:a9:3b:03:
         fd:c7:25:f0:0d:42:c4:59:8a:2f:86:00:48:99:77:c7:00:95:
         a9:67:cf:ee:a0:cb:30:45:e4:43:b2:e4:17:e3:69:e4:c2:ed:
         b3:82:46:d2:97:07:dc:36:68:48:59:2d:80:2c:76:57:ce:94:
         6b:e8:6a:05:9e:ea:b6:4f:73:09:13:20:43:9d:e0:ef:19:2b:
         5c:61:9f:b5:45:28:c5:f8:97:90:e2:68:91:c8:9f:ad:ac:41:
         4c:f9:f9:2b:aa:e6:b9:42:e5:7b:d9:b8:d2:92:3a:9e:6e:27:
         a2:5f:2b:12:0f:1a:68:22:ec:79:3c:0c:bf:63:68:66:21:3f:
         5f:92:1e:fa:3a:99:96:80:65:84:fb:47:32:f8:62:c8:6b:fe:
         f3:4d:b2:df:9f:c0:d4:85:86:95:5d:09:ac:cd:44:97:3e:40:
         c5:7c:b6:2f:ea:13:38:3b:6b:8a:d9:e8:ee:09:4f:e6:c4:e0:
         6f:d9:6f:cf:47:28:ed:49:0d:7f:c7:22:26:75:58:f0:d4:c9:
         65:16:bc:6a:82:16:66:2f:e1:55:a4:ef:3f:2d:7d:a9:fc:e0:
         7f:55:9b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:30:35 2024 by rpki-client on console-fra.rpki-client.org