Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/6291b140-596c-370b-a2d8-09d70105238c.roa
File:                     6291b140-596c-370b-a2d8-09d70105238c.roa (raw, json)
Hash identifier:          IF/+niTTtDig0hUHiX0j0JjXIvDN5HXBQwex702PMLo=
Subject key identifier:   6F:82:39:F8:94:A7:99:83:8A:B1:CE:0A:45:44:60:D6:08:33:DC:CF
Certificate issuer:       /CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
Certificate serial:       010D0C9F432858474B1B53D163ABCAD209C89E80
Authority key identifier: E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/6291b140-596c-370b-a2d8-09d70105238c.roa
Signing time:             Sun 22 Sep 2024 01:00:32 +0000
ROA not before:           Sun 22 Sep 2024 01:00:32 +0000
ROA not after:            Sat 21 Dec 2024 02:00:32 +0000
asID:                     55211
IP address blocks:        76.72.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4b:1b:53:d1:63:ab:ca:d2:09:c8:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
        Validity
            Not Before: Sep 22 01:00:32 2024 GMT
            Not After : Dec 21 02:00:32 2024 GMT
        Subject: CN=b867542f-3ca1-472b-bd4a-1ea6eb249432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:eb:51:ff:0c:c2:22:01:c5:75:ba:c1:33:3a:
                    4a:73:94:b8:2e:17:74:c0:71:4b:85:69:68:a0:c1:
                    e8:c1:aa:b3:d8:45:78:9a:58:83:47:8f:f0:99:cb:
                    f8:89:d4:8a:e9:a4:71:52:c9:a1:2d:7c:e1:6f:2c:
                    da:c9:59:b0:77:00:9d:7b:66:ff:f4:dd:ae:98:18:
                    03:74:40:36:09:03:5a:ac:0f:b7:30:c4:23:b4:ec:
                    62:25:e2:5a:ef:74:8e:5a:70:f2:23:1c:a5:fe:df:
                    06:a9:1d:36:3f:cc:b0:79:5d:a1:b1:eb:6b:55:9e:
                    67:e9:d0:76:22:ea:87:05:8c:68:5f:33:49:08:d1:
                    2e:4f:7d:1b:61:73:7c:bb:77:eb:cf:94:65:c3:f8:
                    80:f7:b8:ee:12:f7:86:1a:be:20:cc:07:b9:a7:ff:
                    25:3a:d4:82:19:bc:45:43:38:da:73:36:16:d0:25:
                    d5:8a:9c:23:f0:1c:09:d9:b9:10:3e:2f:23:eb:cb:
                    e4:d5:51:64:d8:d1:57:df:8e:29:6e:77:0f:21:48:
                    28:af:d7:c0:3f:0f:a1:8c:50:dc:70:0d:a3:6a:da:
                    40:e1:8b:81:72:4c:86:c1:29:74:7f:e6:07:8b:cf:
                    8b:ea:6a:d0:0f:c2:f9:cd:88:0f:28:bf:9f:5c:49:
                    cb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:82:39:F8:94:A7:99:83:8A:B1:CE:0A:45:44:60:D6:08:33:DC:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/6291b140-596c-370b-a2d8-09d70105238c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl

            X509v3 Authority Key Identifier:
                keyid:E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.72.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:9e:d8:d0:e2:68:29:8e:b7:9d:12:32:03:59:52:8c:f1:e9:
         f4:85:81:d2:db:94:8f:ff:5a:10:83:e3:44:68:85:79:f9:28:
         63:49:3a:fc:d4:4f:06:a7:5c:62:10:59:d3:6d:92:59:3e:53:
         8d:7f:9b:ca:cc:c1:42:4a:e7:a3:f9:56:f7:aa:a2:22:62:63:
         83:77:04:3d:57:74:6d:48:29:24:82:35:f6:ba:98:a7:59:c5:
         b3:01:ae:c5:44:e9:32:19:84:41:37:ab:08:6e:3b:53:6a:e7:
         88:56:a4:14:27:c4:da:b2:5a:e8:b8:da:25:4b:e9:ad:ed:a5:
         78:2e:a7:92:89:c1:86:de:82:10:3b:81:8f:c1:93:91:4b:c8:
         94:1b:e4:8d:99:f8:bd:8f:6b:ac:e1:a2:d3:65:b8:62:55:17:
         a0:2d:05:21:23:b5:9c:f4:22:36:2c:5b:40:9a:c1:a7:68:03:
         6a:90:78:13:49:d6:f2:71:96:a3:20:e1:bf:60:d0:22:8c:cf:
         38:e3:ea:b7:fd:df:16:9d:0a:32:a4:88:8f:6d:20:6d:ba:6d:
         62:ce:ae:52:87:97:e5:10:2a:fd:a1:f3:2b:8b:e6:e8:a0:23:
         0b:83:e0:a0:15:2e:ff:36:39:11:2d:cc:1f:4d:c8:9c:88:a7:
         91:ad:fb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:50 2024 by rpki-client on console-fra.rpki-client.org