Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/309c3472-4fdd-36c6-9a07-443722d1eabd.roa
File:                     309c3472-4fdd-36c6-9a07-443722d1eabd.roa (raw, json)
Hash identifier:          T4zALb1N8GrDaYggeAj+bsk+bylzyFK+3zJumxOLhuw=
Subject key identifier:   74:1A:EA:12:27:81:BE:A7:42:ED:D6:D9:5B:04:79:BE:FD:86:AD:17
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F43285845351B64DF225EC2836A866BE0
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/309c3472-4fdd-36c6-9a07-443722d1eabd.roa
Signing time:             Thu 14 Mar 2024 18:19:07 +0000
ROA not before:           Thu 14 Mar 2024 18:19:07 +0000
ROA not after:            Wed 12 Jun 2024 18:19:07 +0000
asID:                     4213
IP address blocks:        76.8.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:1b:64:df:22:5e:c2:83:6a:86:6b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Mar 14 18:19:07 2024 GMT
            Not After : Jun 12 18:19:07 2024 GMT
        Subject: CN=1503abeb-f270-4bf3-9225-a8f89a5bde4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:d8:3b:00:a9:ce:19:80:16:8e:39:f2:8a:
                    a3:53:2d:be:f2:02:31:1b:40:94:75:68:a6:73:71:
                    ea:98:b4:a8:0f:2b:1b:6e:3e:0c:73:e1:b6:d9:19:
                    1e:39:5b:5e:80:09:8b:58:92:71:6b:e8:5c:44:ac:
                    8c:39:e4:8a:46:fe:da:78:18:a2:b6:30:51:bb:47:
                    db:eb:d0:ee:1a:17:bb:db:ef:c8:70:09:75:18:21:
                    32:9d:4d:36:de:83:85:e0:0f:32:ea:f2:a1:5c:20:
                    8d:80:ac:7f:78:59:48:8c:02:c2:1a:70:81:3d:4c:
                    45:9b:61:a8:60:0a:3f:47:2e:cc:ab:77:28:f6:7d:
                    e0:b8:f3:0e:95:25:22:fc:5a:e8:ba:3f:dc:26:c4:
                    26:9e:f8:1b:ea:d6:72:c6:b0:e1:6e:3c:8a:e1:0c:
                    a7:37:64:81:3b:d9:4d:44:c4:4f:84:a5:14:6d:e5:
                    15:ee:4b:01:16:42:9f:56:f0:47:aa:94:01:a6:9d:
                    49:1d:46:79:08:c7:c4:ee:41:a1:c2:b7:6d:07:75:
                    3c:8e:36:0d:0c:37:84:00:59:a7:94:aa:18:f7:b4:
                    b6:0b:46:99:ac:f4:d3:28:bb:a1:cd:0a:20:d8:67:
                    12:94:b2:be:36:83:c6:82:f3:3c:ae:29:20:ef:f1:
                    ee:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1A:EA:12:27:81:BE:A7:42:ED:D6:D9:5B:04:79:BE:FD:86:AD:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/309c3472-4fdd-36c6-9a07-443722d1eabd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.8.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:af:39:65:32:ca:87:f6:39:61:47:9b:9c:98:47:d0:d2:27:
         c5:71:c6:08:ff:ba:f1:a7:9e:8b:85:45:cb:df:6c:66:0c:3c:
         6d:2f:06:3b:11:c0:4a:54:cc:62:54:54:5b:0d:25:ba:0a:13:
         5c:a1:32:f8:d7:ae:3f:53:81:71:26:fe:0f:25:21:e9:36:e1:
         df:cd:11:41:c9:43:9a:88:91:67:ec:6b:b4:f3:e6:70:10:23:
         5a:10:8b:d4:17:4f:32:8e:bd:3e:6f:59:1f:6e:e9:bc:2e:f1:
         20:f9:36:3f:13:61:59:6a:e2:82:f0:9e:79:d3:e0:c6:4d:6b:
         ce:fe:d9:1c:10:a5:86:9b:73:51:71:36:49:30:48:c6:2d:5c:
         53:26:a7:e3:26:7b:df:6c:48:09:62:c9:c5:83:43:0a:63:c8:
         f5:59:6d:a6:86:5b:34:ad:bc:5b:d0:82:fc:f3:87:ac:7c:9b:
         e9:9d:3b:44:1a:9a:03:a7:15:5c:fe:ed:0f:01:2f:92:05:70:
         f6:61:c4:43:82:a8:73:2b:0b:45:dc:ca:da:42:4d:68:d5:ed:
         3a:dd:3c:ef:23:c3:41:b1:54:10:ab:31:00:02:fa:49:8d:3d:
         dc:9a:cb:e6:fc:a3:be:cd:c2:80:3b:3f:ea:96:8c:87:f4:ef:
         30:28:a0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 18:35:37 2024 by rpki-client on console-ams.rpki-client.org