Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/ffe87092-b879-3f9d-9f0d-df6a7c7104bd.roa
File:                     ffe87092-b879-3f9d-9f0d-df6a7c7104bd.roa (raw, json)
Hash identifier:          RWmVYKsYG0AMgqGFNqzJZKScY0KAihpVq3j4daevMks=
Subject key identifier:   29:BC:82:EF:D8:64:3C:EF:82:85:21:9B:CA:70:6B:47:1B:BB:42:08
Certificate issuer:       /CN=496c1a5a-5b64-430a-8aea-c56d0c350c78
Certificate serial:       010D0C9F432858455E5DAAF1735F842759A5B2C0
Authority key identifier: B9:0F:46:C6:6F:88:E8:09:43:D8:DB:34:63:F0:1B:9A:C2:8E:1C:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/ffe87092-b879-3f9d-9f0d-df6a7c7104bd.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     26938
IP address blocks:        208.76.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/496c1a5a-5b64-430a-8aea-c56d0c350c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/496c1a5a-5b64-430a-8aea-c56d0c350c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:aa:f1:73:5f:84:27:59:a5:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496c1a5a-5b64-430a-8aea-c56d0c350c78
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=a02ea19e-2f40-4de7-b587-c54685966213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0e:85:c6:ef:e8:51:a7:d4:41:09:17:37:e6:
                    7c:a2:99:8b:c7:5c:6d:f5:4f:1f:9b:fc:f0:14:21:
                    ee:07:15:4d:36:ac:6d:0b:20:4a:c8:c8:e0:2b:05:
                    50:87:8d:96:87:b4:dd:9b:95:a1:60:96:da:ae:e0:
                    f8:1c:02:90:a7:4f:f0:ad:37:6c:3d:ed:1a:fc:0f:
                    b2:84:98:22:36:fe:71:ca:01:e0:96:b3:8a:e0:34:
                    a8:37:cc:84:c7:fe:84:aa:d6:26:b5:af:78:5a:da:
                    d0:e3:b4:80:62:38:8f:fc:41:46:c7:e2:b7:66:90:
                    0b:10:46:df:63:60:d6:e5:c4:a3:93:0e:bf:50:ac:
                    56:0a:f7:76:b3:96:cd:c0:b7:7f:63:da:e5:63:b7:
                    64:c1:bf:41:dd:86:ba:58:b8:24:aa:a8:7c:8e:46:
                    e6:bb:52:55:43:32:b5:be:6a:a3:94:84:47:c7:17:
                    2c:a9:0b:a7:32:81:a5:0d:f9:95:f9:a2:fd:92:f8:
                    f0:86:65:c3:1f:33:91:bf:e9:97:9d:b3:fb:21:02:
                    af:3f:b5:93:e0:5a:60:9b:82:c2:34:02:cd:cc:13:
                    a8:a9:7e:ee:3c:ca:a0:ca:24:dd:34:49:e1:eb:82:
                    db:3b:c9:da:13:42:aa:dd:e1:56:8c:8f:03:b9:66:
                    7a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BC:82:EF:D8:64:3C:EF:82:85:21:9B:CA:70:6B:47:1B:BB:42:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/ffe87092-b879-3f9d-9f0d-df6a7c7104bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/496c1a5a-5b64-430a-8aea-c56d0c350c78.crl

            X509v3 Authority Key Identifier:
                keyid:B9:0F:46:C6:6F:88:E8:09:43:D8:DB:34:63:F0:1B:9A:C2:8E:1C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:63:34:6e:ea:81:8b:c1:f8:6b:18:c2:4a:2b:6c:c2:1f:f7:
         d3:44:36:2a:50:66:21:25:bd:00:47:27:e1:c3:0d:d8:db:a9:
         d5:46:16:5b:a2:b6:28:7a:93:5c:80:1b:c6:6e:99:a5:be:b3:
         a5:6a:95:8f:bf:00:df:ad:7c:ed:f2:f7:d0:58:48:a8:ea:f4:
         f8:54:04:15:a6:8c:e1:48:08:c6:16:4c:e4:ad:f9:27:4f:c1:
         85:bc:8b:69:c9:7b:dd:54:42:6e:d4:9c:aa:ff:04:76:bc:dd:
         b1:fe:cf:4e:9e:d4:02:80:01:ce:1e:b9:3d:42:45:f6:96:d5:
         76:65:cd:2a:10:49:5d:db:1b:25:97:61:bd:30:27:40:ea:4b:
         e7:7f:c2:ff:40:39:71:35:57:7b:42:e0:ab:f6:63:b1:69:80:
         39:f9:e1:3a:fb:5a:f9:03:ac:64:52:60:11:09:64:f1:a1:e3:
         0c:7e:c9:f7:b6:5d:df:3c:f8:96:8c:9f:33:10:bd:6c:7e:70:
         b4:12:75:e4:e7:d7:98:12:4a:d9:7a:a1:06:e1:d3:8a:bf:91:
         1f:99:88:be:ad:57:be:16:14:52:54:ec:b2:a9:70:f3:60:b7:
         6c:45:55:91:63:5f:2f:1b:95:70:42:0d:1f:5a:a4:4a:f2:af:
         f4:6d:66:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:16:33 2024 by rpki-client on console-ams.rpki-client.org