Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/12b779ea-3ca0-37ba-9385-ab121661ce7f.roa
File:                     12b779ea-3ca0-37ba-9385-ab121661ce7f.roa (raw, json)
Hash identifier:          MHyw7BXznzAWqw/ksEYxl+PYbbkMaDG1bWJ0lyeYEL4=
Subject key identifier:   90:51:F7:75:DC:4D:81:F4:C4:67:4C:62:C5:86:23:45:B2:30:56:FB
Certificate issuer:       /CN=76c188c9-4fff-4233-9a69-35e66734774b
Certificate serial:       010D0C9F43285845B383713D7095661C0DD2C800
Authority key identifier: DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/12b779ea-3ca0-37ba-9385-ab121661ce7f.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     33651
IP address blocks:        64.84.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:71:3d:70:95:66:1c:0d:d2:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76c188c9-4fff-4233-9a69-35e66734774b
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=7c56f8f4-386e-42a8-b5c0-c4b4407e6450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:be:ce:a5:bd:cc:24:40:de:7b:78:86:6e:d0:
                    e6:d6:ed:10:b9:53:53:8f:9a:7f:db:c3:7c:c0:41:
                    81:c0:42:6b:91:8c:eb:3b:cd:f4:e9:e5:8c:0e:5b:
                    9d:49:1c:34:3e:a0:32:dd:b6:2e:96:85:27:df:5a:
                    39:6d:6c:5e:b5:72:d3:90:1f:97:7c:a2:29:78:61:
                    70:ce:e7:af:1c:09:36:e4:7b:d5:bf:26:97:e9:03:
                    ea:28:f8:ee:9c:63:d3:57:75:f5:d2:99:c4:7e:2f:
                    90:3f:c2:50:86:b5:82:8e:22:71:e1:4b:92:7d:63:
                    fd:71:09:18:0e:8f:fc:22:fa:a4:aa:2f:29:ae:3d:
                    ca:b5:78:f5:65:26:50:81:c9:a5:e2:e0:20:3f:a9:
                    08:55:b0:63:d6:f2:8c:bc:21:69:a7:50:a1:f8:02:
                    13:ff:9b:a6:28:3a:e0:29:f9:90:df:55:dc:bf:2c:
                    77:6a:af:ca:3d:07:96:e1:97:5d:ee:fb:98:f3:df:
                    1f:74:81:ac:5e:a5:da:08:99:b4:24:9b:d4:b6:d3:
                    32:d1:4f:a5:84:7d:fa:2f:31:ac:6a:e8:1e:b3:a5:
                    f9:ab:6b:f2:e3:a2:9f:50:4c:79:4b:3d:0a:8d:c3:
                    9d:36:f0:b3:37:dc:46:f9:46:ad:f2:81:db:36:c3:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:51:F7:75:DC:4D:81:F4:C4:67:4C:62:C5:86:23:45:B2:30:56:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/12b779ea-3ca0-37ba-9385-ab121661ce7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:4d:e4:00:ef:48:84:48:ad:72:15:c8:96:ae:b5:6f:f9:c9:
         f9:eb:9a:fd:e4:58:57:0a:3f:22:36:a6:34:08:29:6a:dd:bf:
         30:16:58:af:0f:ae:d0:f3:bb:4d:6e:ba:f9:d0:38:ea:83:4d:
         f7:73:b3:53:25:49:42:93:8a:65:59:eb:0f:30:22:bb:9d:49:
         f7:74:2d:3d:e4:66:b0:32:83:cc:69:48:cd:be:64:54:db:d9:
         82:d8:9b:1c:4f:ed:28:2e:cd:84:c6:2a:9f:c8:85:04:5b:57:
         df:d6:6d:01:6c:98:25:7f:67:e7:13:83:86:ce:70:93:62:88:
         68:16:a3:12:db:61:6c:e5:fd:bc:31:89:1f:bb:43:08:28:ca:
         0c:a9:0f:7e:7b:be:22:90:cc:08:8a:c3:2c:90:d7:40:58:88:
         8b:26:53:4d:77:a6:87:02:6f:fd:98:56:f1:ad:42:af:48:e6:
         38:36:25:3e:39:5f:a8:21:92:42:86:1e:2d:19:6a:d1:c1:2e:
         1f:98:03:e7:02:5b:0c:91:cc:fb:9c:67:c9:87:bd:d1:6e:b4:
         ec:b1:d7:e4:eb:4e:5a:3d:93:53:5e:df:9b:5d:88:3a:69:c7:
         da:47:8d:96:22:a4:15:ec:3d:43:e9:f8:88:20:d8:b9:f9:bd:
         8e:e1:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:58 2024 by rpki-client on console-fra.rpki-client.org