Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/780ec532-8b9a-37a8-80f8-9e18e0d83f4b.roa
File:                     780ec532-8b9a-37a8-80f8-9e18e0d83f4b.roa (raw, json)
Hash identifier:          ayCxWESag/7zIQfEe74g4aKU+H6cxHwhTSMcIj/rMog=
Subject key identifier:   C6:0A:A7:06:B6:C7:4B:22:C1:73:BE:18:75:A1:73:46:04:B9:FE:4C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0EC7EDDEE13E909300C100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/780ec532-8b9a-37a8-80f8-9e18e0d83f4b.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        76.64.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:c7:ed:de:e1:3e:90:93:00:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=3ded6d37-9152-43b6-aa96-390e1b6ccab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:36:6a:cb:ba:7e:43:7c:5d:3d:ea:81:2c:
                    b0:66:f9:6c:a3:3b:76:cb:26:db:e5:1d:09:8e:55:
                    d1:08:bd:5e:6a:80:ca:e5:91:bd:df:1f:6e:4f:22:
                    c2:24:b2:ab:b8:d2:30:a3:8e:9a:f5:02:c6:93:87:
                    44:bc:85:63:53:3c:d3:b8:fe:97:09:56:7b:d4:65:
                    81:fe:9e:31:32:3c:73:3e:4a:ce:7e:8d:a2:29:d2:
                    89:58:e0:6e:fb:f0:d0:e5:54:03:8d:dc:87:87:0d:
                    32:79:11:0b:18:3a:59:69:72:a9:e3:eb:17:71:8d:
                    ca:fb:94:d8:a0:8e:f1:7e:5e:7a:8f:4d:d7:c1:f8:
                    66:4a:05:67:89:b1:cf:e9:db:e3:e7:72:1c:17:ee:
                    18:ab:08:cc:8a:c9:78:5a:32:02:aa:e9:6c:e5:c5:
                    56:47:e9:8c:b8:7a:10:93:39:0b:d5:5b:41:24:fd:
                    36:df:a8:ea:e4:e6:1e:67:18:9b:72:26:db:12:6e:
                    ca:dd:e0:e5:a5:af:50:56:ed:03:b7:c0:c1:88:13:
                    85:bf:75:46:f4:e0:bd:56:d2:81:16:7a:ae:bb:39:
                    fd:08:bb:b1:79:c4:db:4c:7e:f3:11:af:fb:6c:13:
                    12:54:fd:ab:71:28:c6:2d:99:fc:7a:a5:ce:1f:cc:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0A:A7:06:B6:C7:4B:22:C1:73:BE:18:75:A1:73:46:04:B9:FE:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/780ec532-8b9a-37a8-80f8-9e18e0d83f4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.64.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f4:26:16:2a:a7:8a:80:04:f1:50:13:b6:cb:c9:0a:2d:9c:
         eb:97:1a:36:5b:98:bc:d6:3b:12:c6:51:97:dd:8f:17:c2:1c:
         fb:b1:9a:d6:35:0c:f1:7e:e9:07:81:a8:d9:a7:30:2e:ed:31:
         79:53:3d:5d:6a:ab:db:1b:da:bb:46:a6:ef:b0:39:ff:9a:2d:
         c7:31:b4:d2:7b:a8:48:a4:b1:78:a1:84:2f:f4:0d:47:c5:0d:
         91:d7:5f:18:6a:40:a9:e2:ba:9e:d6:b9:53:fc:5f:47:fa:ee:
         55:dc:00:cd:06:d9:d4:89:5d:f9:8e:9c:36:e7:9c:5e:01:69:
         d4:d8:30:12:3e:c2:72:a4:65:05:01:94:be:cb:9d:70:27:cc:
         29:7b:9f:44:55:f9:94:b6:76:31:81:77:f5:be:e4:13:47:6c:
         03:3c:83:e7:19:6d:e8:67:e3:1c:2f:f2:b5:8d:51:ca:47:79:
         28:65:b4:b3:45:77:ea:67:a2:82:10:1b:a7:4d:8b:0c:f2:07:
         e5:4e:07:20:43:e1:b3:a1:0f:ba:1a:5b:8a:76:c9:08:09:3e:
         51:56:b0:3d:ec:4d:57:b4:fe:90:c1:87:0b:7c:be:41:bc:34:
         bc:4c:04:43:cc:33:af:ff:95:93:ce:92:13:8a:7c:f3:35:b4:
         d5:14:e5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org