Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS13768.roa
File:                     AS13768.roa (raw, json)
Hash identifier:          7eR6IFxBe5qiS6yMhr8SPsDEyl51e+q0hXBzuFlFm4Q=
Subject key identifier:   82:6C:93:29:4F:AF:6F:A2:96:14:74:99:CC:6E:64:52:ED:FF:CF:D1
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       04DD2E6FACD3201085189019D701E941CCFC37C4
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS13768.roa
Signing time:             Fri 15 Nov 2024 18:38:32 +0000
ROA not before:           Fri 15 Nov 2024 18:33:32 +0000
ROA not after:            Fri 14 Nov 2025 18:38:32 +0000
asID:                     13768
IP address blocks:        75.102.24.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:dd:2e:6f:ac:d3:20:10:85:18:90:19:d7:01:e9:41:cc:fc:37:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 15 18:33:32 2024 GMT
            Not After : Nov 14 18:38:32 2025 GMT
        Subject: CN=826C93294FAF6FA296147499CC6E6452EDFFCFD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:82:e2:87:fa:03:94:1b:f1:d7:8a:cc:87:40:
                    da:a6:33:94:a5:2e:a9:27:66:98:e9:6e:ec:90:3c:
                    fc:88:4a:c1:6c:89:83:47:3a:c8:81:0c:3d:6c:47:
                    5c:30:7d:a9:61:9d:73:3f:86:53:51:b0:cc:d5:16:
                    2f:88:3f:89:49:c9:7c:e8:e0:ba:90:f4:a6:0c:a3:
                    4c:bb:2e:6e:26:22:43:cd:4c:13:d6:e8:9d:0b:10:
                    78:a8:86:df:a5:00:37:d2:93:e9:a3:8b:af:90:79:
                    1f:88:83:87:d8:08:46:d3:26:39:31:dc:b3:4b:f5:
                    7b:47:53:20:6a:82:68:ee:a1:9c:24:f3:bd:30:60:
                    c5:0f:66:73:8a:f2:ac:2f:4d:91:1e:3d:0c:b9:36:
                    a8:85:c7:a0:5a:a3:0f:d3:b5:ad:96:56:f5:93:99:
                    ba:37:2e:a4:85:9c:cb:61:a5:52:45:1d:b4:19:75:
                    7f:ae:de:50:b6:6c:d6:32:16:b2:1e:c0:f3:91:58:
                    2a:8c:05:b1:2e:ee:20:dd:49:c0:21:24:7d:c4:6d:
                    b4:60:35:8e:aa:21:c2:10:25:fa:7a:95:bc:b4:6c:
                    dd:8a:38:63:1b:6c:23:c3:10:53:a3:05:b4:dd:78:
                    a4:1c:4d:6c:d6:bb:7d:1c:5b:a7:ab:47:63:f2:50:
                    32:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6C:93:29:4F:AF:6F:A2:96:14:74:99:CC:6E:64:52:ED:FF:CF:D1
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS13768.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:e0:5b:c1:d5:c3:2d:dc:ac:bb:a4:51:34:76:63:c9:e4:9a:
         41:93:61:12:95:ae:3d:b7:9f:7d:0e:5f:fa:ac:e1:ca:03:a0:
         11:01:81:e8:b2:1e:4a:1b:7d:eb:ff:1e:d3:d5:c2:20:2a:66:
         fe:08:8c:ff:3d:f8:b4:39:19:d6:e7:8d:10:04:cb:19:29:ec:
         83:37:ac:23:58:01:7f:a1:e7:1b:2a:cb:f8:84:20:c8:e0:41:
         c6:65:da:1e:83:41:b4:96:38:bc:b4:07:c8:4e:e9:a9:e3:08:
         dd:bc:2d:71:fd:ee:a8:be:5a:45:ed:01:8b:4f:0f:54:17:19:
         d3:b0:c2:21:0a:6c:89:00:72:e1:e4:00:a4:7d:e9:39:97:d9:
         2c:91:94:37:73:63:c1:af:d2:df:57:d2:6e:ee:01:2b:7f:89:
         2e:31:20:04:7b:2f:77:73:28:24:d1:3d:03:f9:e3:f5:45:fb:
         cf:d5:97:ff:5d:56:63:06:70:2a:28:be:37:63:f8:d5:e8:40:
         85:af:9b:fd:56:ca:09:0a:9c:a0:e5:a5:6b:bc:22:26:51:e4:
         27:d3:07:08:9c:3f:6a:59:e2:5c:19:c1:14:47:5b:c3:c7:19:
         af:21:3a:5e:95:b1:bd:e0:0b:cb:bc:c1:4b:57:2a:aa:13:76:
         74:61:f2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:00 2024 by rpki-client on console-ams.rpki-client.org