Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/46397b0c-4139-3aff-bf7e-00d25aaeafd7.roa
File:                     46397b0c-4139-3aff-bf7e-00d25aaeafd7.roa (raw, json)
Hash identifier:          32m+Wk87a5Ex2IUnEfe2kWjTGXEiyzVdxcm2J9apU4E=
Subject key identifier:   A7:A1:C3:2E:AB:32:D1:F0:50:77:C2:3D:A0:C6:F8:48:2A:8A:34:91
Certificate issuer:       /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial:       010D0C9F43285845A428D5BBBE0BD2C2D5196400
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/46397b0c-4139-3aff-bf7e-00d25aaeafd7.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     1640
IP address blocks:        76.72.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:d5:bb:be:0b:d2:c2:d5:19:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=bd462445-fb28-4189-95c4-29468b5262a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:7f:eb:5c:5f:d1:39:68:29:92:a5:c8:0b:
                    8e:23:5b:02:b2:ef:0a:45:a0:3b:3b:99:82:89:21:
                    f5:69:6c:16:9f:9d:d3:45:87:23:72:ed:c2:c7:82:
                    15:f7:5a:23:c2:a3:47:48:75:3c:3e:17:de:49:5d:
                    75:f1:f3:c3:d4:c0:43:64:1a:f2:04:ed:bb:3b:b5:
                    1c:cc:76:01:aa:78:6b:a8:5c:4c:6d:e2:4d:b7:e9:
                    7a:6f:34:25:db:e9:b4:58:8a:f6:73:48:5e:48:b3:
                    d7:aa:6b:c9:3d:c1:5c:6f:6f:0d:b9:a1:61:52:5c:
                    43:6e:d4:d6:eb:22:e4:06:da:d2:58:76:f3:db:42:
                    09:b4:a8:27:20:ba:a8:84:1e:93:7e:3f:06:2d:5b:
                    b7:0f:1f:83:c5:8e:74:29:75:21:c4:91:76:ca:6b:
                    bb:08:44:20:db:30:02:69:54:07:f7:11:29:bc:35:
                    3f:07:de:42:83:91:e8:aa:61:0b:a4:ae:de:bc:ba:
                    da:b9:99:33:ee:43:3b:b9:53:a0:48:89:28:2b:c7:
                    ef:ce:e0:b3:40:27:52:99:31:e7:52:7f:69:9a:e7:
                    3b:cd:fb:33:33:23:04:53:41:f2:c3:6d:72:c5:02:
                    11:44:43:36:4d:93:f0:c2:85:0d:6c:c5:97:f3:ae:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A1:C3:2E:AB:32:D1:F0:50:77:C2:3D:A0:C6:F8:48:2A:8A:34:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/46397b0c-4139-3aff-bf7e-00d25aaeafd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.72.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ab:f1:97:f8:1c:fd:3b:41:0f:66:5a:5f:62:e3:14:09:ad:
         4a:ce:d0:a3:2f:22:ef:dd:56:00:dd:0f:8e:8f:e7:aa:9c:d2:
         c0:84:aa:b1:ef:c9:4d:17:75:38:90:7d:49:8b:f0:b5:8b:64:
         7f:7a:b9:34:88:99:88:e4:27:f4:ab:ef:1d:f8:54:12:43:1a:
         8d:5f:d7:ab:4c:4b:c5:fb:4a:f4:a9:f5:45:61:ec:3e:d1:99:
         6b:be:f8:ca:91:3a:28:0c:75:67:37:de:44:36:80:6f:7e:f6:
         5a:dd:10:af:1c:c6:b8:5a:ae:24:d2:c0:3a:6b:7f:0f:20:0f:
         c8:ef:2d:1a:c1:b2:88:49:13:1c:05:03:f2:7d:30:fa:0a:49:
         33:15:2a:26:0c:7e:ff:ac:67:da:18:47:3a:71:05:5e:9b:69:
         10:23:c5:a6:26:be:e0:7e:88:0e:de:6a:3a:af:53:fb:41:23:
         86:53:c2:e5:b7:77:eb:c8:28:1b:56:36:79:04:d4:51:00:e3:
         a8:7c:1c:71:1c:d3:1f:89:ce:37:ad:41:2d:7c:72:ed:6c:0a:
         1d:5f:ad:ae:9b:7b:a4:10:2a:87:2a:a1:a1:3a:44:45:da:6a:
         2f:1c:56:b4:6d:06:8e:d2:16:52:6d:16:5d:e8:ab:fb:ea:8e:
         c2:0d:0f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:27:46 2024 by rpki-client on console-fra.rpki-client.org