Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3cd9c83-597f-3fb1-9b71-ff8a12b7b74e.roa
File:                     b3cd9c83-597f-3fb1-9b71-ff8a12b7b74e.roa (raw, json)
Hash identifier:          WI4l49VWpFgtQ9bi0DS0/1lY9LWEjii+/1aZmwRLrDg=
Subject key identifier:   B9:21:07:D2:45:7E:BB:05:C4:88:DA:B4:09:4D:1F:F3:B6:A9:88:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847CFD4B7D0D68AC435E2987C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3cd9c83-597f-3fb1-9b71-ff8a12b7b74e.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     33654
IP address blocks:        76.18.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:b7:d0:d6:8a:c4:35:e2:98:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=4b6d5e85-ca99-48b2-a0b1-7523c06205d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:c2:09:de:ed:31:ed:03:2f:a0:a0:d4:25:
                    1d:d5:5a:b3:80:e2:7a:37:20:1e:03:3e:0b:dc:b2:
                    af:b1:9d:2d:c3:47:5e:bb:a8:cc:84:39:cd:e1:7b:
                    2c:96:16:cd:b3:30:2d:a1:13:1b:9e:5a:0d:00:db:
                    55:92:f9:a0:27:26:64:41:d4:2f:1f:3b:27:e3:42:
                    f2:44:9e:79:9e:a9:89:ef:7e:ce:39:0f:98:f0:94:
                    58:fa:0b:42:7f:31:0d:b7:4f:02:bf:24:4b:f9:67:
                    ea:1b:67:55:94:a3:4b:03:53:f1:9a:8f:7d:b3:9e:
                    f2:84:13:b4:3f:ff:0c:eb:f3:7e:eb:38:cf:05:84:
                    41:ef:0b:ad:0e:0b:36:37:fd:76:ab:3f:0c:c1:4b:
                    7a:cf:12:8b:cf:0a:b1:25:c3:9a:af:e6:45:a8:d6:
                    55:ff:01:7e:82:b3:a6:5f:bc:e7:60:10:5b:10:72:
                    3b:a8:93:93:8c:2d:88:d1:86:fd:cf:3b:3a:ed:5b:
                    5e:0f:f0:1d:bf:a4:75:e1:48:4c:a4:06:5d:b2:3a:
                    41:18:ec:f2:54:e7:8a:7a:e6:86:7d:55:97:03:90:
                    f5:88:bf:e0:69:58:76:cd:1c:af:6b:ea:d4:f3:5f:
                    ea:6a:0b:10:eb:97:c1:14:b4:3d:c6:13:71:71:2e:
                    87:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:21:07:D2:45:7E:BB:05:C4:88:DA:B4:09:4D:1F:F3:B6:A9:88:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3cd9c83-597f-3fb1-9b71-ff8a12b7b74e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.18.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:fd:0b:23:46:72:06:40:e1:d1:c3:c9:0e:c7:a7:06:43:4b:
         f0:1e:69:1a:45:ea:1f:52:18:36:55:ea:4b:0f:83:92:79:32:
         54:9f:c9:fb:9a:7b:3f:ea:dc:93:6a:47:51:5a:32:e2:62:62:
         99:b8:be:bf:ba:3b:e7:d3:a1:4a:9c:5a:13:ef:25:35:76:be:
         e8:db:43:17:b1:a7:57:e5:fb:4a:02:94:4c:8e:bb:0d:48:1f:
         2b:08:00:5d:7c:bf:62:a8:2d:6d:20:ab:77:f9:c4:d5:e8:79:
         a1:20:dc:e0:8a:cc:ef:41:87:b4:b6:00:10:5d:cb:7a:82:13:
         19:41:6a:ba:d7:16:17:26:0d:a7:d7:be:9f:0c:ca:f1:12:91:
         0f:62:b9:6a:8a:51:de:55:5c:b8:75:a0:f4:19:36:53:7b:d8:
         4e:5b:8b:69:28:d1:87:11:82:2f:7e:cc:50:8b:f7:86:02:6c:
         ea:5c:58:3b:ec:d9:b5:56:bb:c6:18:b4:72:80:73:e7:41:93:
         61:9d:6b:32:0f:28:fa:32:f6:57:e1:8d:04:98:bd:cd:43:a5:
         5c:20:e7:ab:82:fd:fe:8f:3d:08:0a:6c:b3:d3:3f:22:f2:c3:
         30:2f:28:0c:af:18:d4:13:f6:4d:20:65:e3:18:70:8a:9f:7e:
         67:98:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:28:03 2024 by rpki-client on console-fra.rpki-client.org