Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0b49259-3dc4-37a4-81ce-155ae89729d5.roa
File:                     a0b49259-3dc4-37a4-81ce-155ae89729d5.roa (raw, json)
Hash identifier:          QJIQSSaFA8bz+zk7Y2NyaK3FZX+BAo1UKta8bVvQE/M=
Subject key identifier:   79:24:AC:A6:C5:15:11:45:97:41:65:3D:3F:F0:B0:D3:DF:B5:3D:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D7DDDD822148F0F65A200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0b49259-3dc4-37a4-81ce-155ae89729d5.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        76.132.6.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:7d:dd:d8:22:14:8f:0f:65:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=e6235fef-c0dc-4cdf-badb-c1e0bee0bef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:dd:e1:71:23:cd:cb:da:c0:e7:86:2e:6a:
                    84:19:e2:01:b5:51:f9:29:20:27:c1:4f:17:9d:16:
                    7f:d2:0b:b0:a2:f3:9f:4e:4d:08:a3:cc:38:08:ce:
                    5b:88:1e:c8:42:ae:df:a9:87:13:95:c8:f7:8f:18:
                    82:ab:f2:8d:d4:1d:db:e7:6a:fa:e7:e0:fd:63:b2:
                    e1:91:41:45:01:08:29:8c:3c:36:a1:1f:81:8a:78:
                    44:5e:64:2d:e0:14:56:8a:6e:c8:7c:19:a6:5f:38:
                    de:67:45:da:8e:61:ab:95:02:0c:d9:66:51:ce:ae:
                    34:8a:33:f6:39:c8:62:3e:69:27:7e:f6:6d:8e:93:
                    56:ca:97:f6:60:05:2a:fe:ed:52:cf:13:9a:11:e0:
                    33:28:15:fc:6f:15:a0:a2:91:0e:7d:a5:d6:5a:2c:
                    09:fd:74:5f:bd:91:6b:a1:f6:e3:4f:97:ba:7c:6d:
                    31:4a:04:1d:8b:cb:7c:6a:ce:9b:73:45:4f:7a:d8:
                    b3:26:4a:ae:f7:29:1c:ab:d4:66:c0:c7:ed:68:ee:
                    15:f3:05:c4:e1:7b:dd:64:f9:f0:a8:fc:84:8f:4b:
                    f8:f8:63:21:d9:da:4e:02:73:68:e3:b3:07:cc:27:
                    74:da:fc:58:a2:7d:40:90:0d:2e:fd:04:55:10:09:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:24:AC:A6:C5:15:11:45:97:41:65:3D:3F:F0:B0:D3:DF:B5:3D:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0b49259-3dc4-37a4-81ce-155ae89729d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.132.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ea:55:9c:c5:7b:38:32:79:96:58:03:a9:d8:d1:b8:4c:42:
         57:4f:8c:ac:c1:ce:0f:30:b3:bc:d6:50:c6:bd:cf:39:62:74:
         0e:3f:cf:6d:49:2f:9a:de:6b:29:34:3e:86:0b:35:5e:59:58:
         07:f4:1d:b9:d4:7c:97:f9:d8:6c:d6:5b:79:fa:17:5a:81:57:
         69:78:c9:99:73:48:29:f9:28:e8:7e:28:45:5c:1d:63:a9:b8:
         2f:f5:92:b6:cc:0d:b7:2a:dc:8f:11:d5:97:e6:61:3f:4c:d1:
         17:69:ac:8f:26:58:93:3d:b6:fe:cc:9e:35:06:69:d9:aa:95:
         c4:ec:68:de:e1:2d:6c:eb:10:ec:e1:0e:f7:49:19:f2:81:da:
         26:39:e1:1b:99:4f:c8:9b:a2:b2:be:58:1f:ca:7b:1c:d3:25:
         c0:e9:55:96:12:5f:66:f4:3e:6a:fd:32:93:cb:9a:61:3e:23:
         20:6b:cd:9f:76:4b:1a:00:ca:d1:1b:bb:e8:ae:14:01:a1:1a:
         0e:61:be:90:59:1a:b6:54:31:62:67:eb:7c:37:8f:ec:e6:e6:
         49:30:5b:f8:c6:17:84:db:6b:20:68:24:3a:b3:e0:1a:ca:a9:
         78:cb:e9:58:84:fc:83:68:40:39:69:2f:86:86:e6:97:af:95:
         44:2b:36:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:31:13 2024 by rpki-client on console-fra.rpki-client.org