Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/48cc5098-b9ab-3fe5-8f52-f944b864b648.roa
File:                     48cc5098-b9ab-3fe5-8f52-f944b864b648.roa (raw, json)
Hash identifier:          OYmZXUPO7e6cZJuYVj99iH/kHPaAGHuVMctUeddrzjY=
Subject key identifier:   02:21:D9:F6:03:15:9E:3A:C0:C5:E3:4A:08:B1:34:E7:A3:49:08:A6
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285845CE0910D93BBCE11ECED0A600
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/48cc5098-b9ab-3fe5-8f52-f944b864b648.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     11404
IP address blocks:        76.14.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:10:d9:3b:bc:e1:1e:ce:d0:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=ff9bff8a-a504-49fb-a5ce-6d2cd5cba165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:0e:97:8c:ed:1d:76:74:4c:6f:b9:68:b6:
                    59:fd:db:15:99:bd:37:a5:7d:af:68:dd:a9:e7:31:
                    1c:70:9d:5d:f5:5d:6c:cb:00:c2:f2:91:61:db:99:
                    75:de:84:85:76:40:db:05:5f:5d:62:98:17:ee:bc:
                    b1:bc:51:ea:c2:10:9e:d5:d4:39:6c:f0:ed:61:b6:
                    61:5b:90:2a:35:48:7e:4e:b4:62:68:dd:80:70:ac:
                    8b:e2:90:4a:89:2e:71:e3:c9:9d:84:cd:21:8e:49:
                    59:3a:c8:27:fd:d4:ba:63:ba:26:f1:93:7c:88:42:
                    c6:06:da:bd:53:94:9e:06:db:97:e3:d3:73:a3:cb:
                    91:77:53:61:8f:62:72:9e:91:db:f2:b0:31:2f:a9:
                    b5:6e:6d:70:c9:2b:2d:16:e5:1e:3d:7e:97:fe:e1:
                    95:1b:75:18:75:7c:a9:38:4c:1d:69:d1:96:68:a9:
                    39:96:70:c7:cf:f7:c9:94:62:19:23:8f:a4:05:d3:
                    fc:ca:42:8c:46:51:b6:7c:6c:12:6e:9e:0e:87:09:
                    ce:d8:34:56:5d:d7:a6:12:4f:37:fd:e2:49:a2:0e:
                    13:f3:95:34:5f:e7:3a:b5:2c:d4:73:77:fe:ef:ac:
                    fb:ec:c1:6f:0f:33:dd:d9:3a:be:c7:bf:66:20:71:
                    d8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:21:D9:F6:03:15:9E:3A:C0:C5:E3:4A:08:B1:34:E7:A3:49:08:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/48cc5098-b9ab-3fe5-8f52-f944b864b648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.14.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c6:63:27:4e:76:8f:82:35:9e:bf:6b:b7:6e:49:e2:df:06:
         e2:98:0b:90:7f:da:13:5c:f4:10:13:cb:75:f7:77:7a:66:5f:
         c8:d5:58:81:8a:55:b9:96:4f:51:54:50:5f:e8:a1:d9:ac:1b:
         fa:f2:a9:fa:06:66:fb:02:7c:2c:97:5d:bc:f9:bf:9b:0d:59:
         57:59:0f:2d:9b:bb:94:13:50:0c:52:a1:7f:38:ce:b1:ca:b4:
         9e:96:8d:26:10:e0:b1:fb:9e:9f:71:2a:fb:f0:26:90:93:8b:
         c8:f1:4a:7e:61:46:dd:6a:3d:7c:37:84:aa:87:00:5f:89:62:
         1a:81:4c:dd:02:1f:da:2a:08:8c:bf:0f:76:5e:90:d2:2e:a4:
         8b:50:a9:a1:5d:92:b2:74:7c:cb:c3:ce:68:90:1f:34:7e:92:
         dc:eb:7c:8f:eb:fa:f9:cd:af:07:7a:4a:b4:60:fc:21:74:d1:
         96:dc:ae:f7:95:ed:ec:fb:11:10:ca:76:72:e9:78:fa:1a:00:
         1f:83:b8:f6:69:c2:49:44:d8:bd:ad:62:68:ab:50:82:19:e8:
         59:81:01:06:e3:6d:b7:89:0b:58:f0:2b:1a:05:bf:54:72:6c:
         66:9e:27:73:74:91:d2:66:02:a5:38:44:7f:6b:96:af:fb:83:
         11:6d:0f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:33:58 2024 by rpki-client on console-fra.rpki-client.org