Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c0d3e799-0845-3113-a3cb-e5267a1938d3.roa
File:                     c0d3e799-0845-3113-a3cb-e5267a1938d3.roa (raw, json)
Hash identifier:          9UN1KbeLySYl1CEk3CDFPnJDaG4ndoquNaadgw7yjWM=
Subject key identifier:   A3:51:F8:35:2E:5E:3E:84:BA:B7:DD:3D:15:E6:60:34:5D:C6:14:67
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F432858477D5B9E3301DE7DBAF014CCC0
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c0d3e799-0845-3113-a3cb-e5267a1938d3.roa
Signing time:             Thu 10 Oct 2024 01:00:33 +0000
ROA not before:           Thu 10 Oct 2024 01:00:33 +0000
ROA not after:            Wed 08 Jan 2025 02:00:33 +0000
asID:                     21949
IP address blocks:        76.9.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7d:5b:9e:33:01:de:7d:ba:f0:14:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Oct 10 01:00:33 2024 GMT
            Not After : Jan  8 02:00:33 2025 GMT
        Subject: CN=573b1db2-dbd1-4128-8dd7-504763c132cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6a:04:14:e3:2d:e6:d3:b6:5b:4a:0a:90:6e:
                    46:04:50:72:e3:31:b4:06:19:62:f4:e0:6a:b4:e2:
                    a1:65:de:8c:1b:f9:7f:69:0a:69:08:14:85:ef:8e:
                    79:24:25:66:26:50:98:0a:24:ae:5d:ab:a8:9a:e0:
                    eb:4c:b3:e2:2a:d3:86:52:3e:c8:ab:42:f5:70:1b:
                    4d:f7:1b:53:3b:97:41:e2:a9:61:3d:f1:35:c7:24:
                    18:95:99:09:49:30:69:2d:18:30:1f:92:d3:8a:2b:
                    76:41:10:d6:73:6e:18:66:3b:b3:98:64:58:0b:27:
                    b4:76:2e:85:79:00:bd:c2:f2:79:dc:fc:ef:ef:5b:
                    c9:e4:c9:78:52:4a:f8:56:d1:e1:d0:eb:a2:96:f4:
                    31:f1:ff:d1:34:aa:91:c8:df:c3:d1:aa:40:f2:a9:
                    c8:d5:a8:ac:82:1e:a0:61:c7:5f:0c:3f:e9:7b:25:
                    28:81:01:19:46:c4:14:86:0f:b2:ca:95:92:bb:1b:
                    69:23:ad:d4:fc:fa:97:a0:c9:b1:70:f6:32:a4:59:
                    23:ce:9e:da:99:7d:ae:13:81:ff:96:92:dd:76:9b:
                    69:e8:2f:64:35:82:f3:ca:e0:d7:17:01:3b:39:9a:
                    7e:81:6e:70:c7:1f:c6:e6:cd:88:a3:a5:f5:35:34:
                    31:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:51:F8:35:2E:5E:3E:84:BA:B7:DD:3D:15:E6:60:34:5D:C6:14:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c0d3e799-0845-3113-a3cb-e5267a1938d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.9.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:1c:38:cf:f3:68:90:0d:d3:56:c0:86:2c:2b:45:73:bd:52:
         fb:41:22:f6:04:7b:53:52:fc:c9:98:c7:0a:d6:17:d6:b7:c9:
         c0:2c:21:cd:98:e3:61:49:fc:df:5f:22:93:8c:5e:21:9c:b1:
         24:05:89:af:aa:89:84:8e:cf:02:e8:8e:14:68:40:03:59:6b:
         f3:11:ae:5d:b1:e8:f8:57:cc:b2:aa:68:fc:9d:3b:60:b2:7e:
         ee:e0:b3:7d:70:c1:6a:37:42:0b:45:8b:5d:32:ba:a4:a6:c0:
         1a:94:f5:d0:51:67:be:67:15:09:c9:fd:a4:09:cf:e4:21:cd:
         b0:39:1b:d3:d9:fd:84:00:0e:46:1a:68:14:09:95:d8:e8:34:
         09:be:5b:c7:8d:f0:17:3a:ea:5f:e0:af:67:03:22:4a:63:00:
         b3:ed:73:60:6a:81:07:66:e9:fa:6e:42:e8:51:9d:39:f2:61:
         90:d7:48:c8:d9:69:fa:22:5e:69:8d:76:5d:62:9f:1b:04:0c:
         51:5a:e2:0d:bc:1b:50:70:74:cf:b6:b1:ee:f9:c4:e2:b7:05:
         0d:ed:47:f5:25:49:b6:0e:46:e1:08:74:04:9c:e5:8b:a8:ed:
         a7:ac:45:f0:22:9f:ca:5c:e7:bf:5f:39:b8:c5:09:03:ce:d7:
         da:b8:29:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:57:18 2024 by rpki-client on console-fra.rpki-client.org