Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/33d78819-d68b-349a-8527-6568c3437399.roa
File:                     33d78819-d68b-349a-8527-6568c3437399.roa (raw, json)
Hash identifier:          90ZGgLxptlg90Ydw50U1nBj4NFEDUaG/TKP9/B+xHrA=
Subject key identifier:   3D:A9:69:14:DF:30:E8:B9:65:69:3D:FF:74:03:28:8E:25:69:5D:00
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F43285845ECBE8F0D8491184329448480
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/33d78819-d68b-349a-8527-6568c3437399.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     46294
IP address blocks:        76.77.18.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:8f:0d:84:91:18:43:29:44:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=153c056c-6132-4143-91cc-2680b24bd8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:69:26:0f:b2:68:cd:fb:e3:6e:cc:5f:f6:9e:
                    95:11:30:bc:a3:9c:bf:98:6d:5d:02:3b:ae:e4:b0:
                    14:0f:21:45:a8:1d:99:66:58:91:6f:8e:89:b0:d3:
                    82:40:15:b2:73:82:e2:79:eb:5a:a2:fa:b5:20:18:
                    97:19:58:9e:81:fb:db:58:7b:fc:c0:e6:5e:45:c0:
                    b2:32:da:bb:00:de:c3:95:d4:9c:7a:a7:bd:8a:82:
                    b2:7d:1a:f0:43:33:be:31:e0:4b:2f:17:a2:b4:74:
                    39:af:5b:22:7a:53:18:59:cd:4a:7c:4f:d4:5a:93:
                    8e:a6:01:b0:b2:6a:92:db:f7:67:28:09:99:a0:96:
                    74:f3:71:71:c2:53:bd:c1:5f:31:60:79:58:70:6c:
                    31:fd:7a:26:5d:c7:53:61:eb:05:59:c1:f6:dc:38:
                    53:5c:dc:7f:17:93:e2:3c:a7:36:6f:41:a5:f5:09:
                    1c:97:05:7a:47:4f:79:87:7b:68:df:40:44:28:fc:
                    69:1d:62:23:db:5d:8a:04:2a:cd:6a:ac:a8:26:bf:
                    a0:e4:36:2f:a0:89:23:81:b4:85:69:96:d6:35:20:
                    ad:38:5e:20:dc:df:6b:c7:b3:ea:b0:45:8f:c9:05:
                    33:7d:5f:b6:0e:e6:0e:41:e5:99:88:11:0a:b2:6b:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A9:69:14:DF:30:E8:B9:65:69:3D:FF:74:03:28:8E:25:69:5D:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/33d78819-d68b-349a-8527-6568c3437399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:65:e3:e3:db:bc:0b:9c:b5:6e:c0:27:ba:ef:c8:60:13:f0:
         cd:89:cc:7e:db:ff:ab:ff:df:48:87:22:53:e7:d9:17:4d:a1:
         da:da:59:67:32:57:92:0d:b7:20:cf:35:e8:a8:15:2e:1c:63:
         74:9f:15:b5:25:91:25:04:53:f6:d3:1c:0b:f8:0c:5e:52:cd:
         7d:ba:f5:f9:0f:a9:5f:4a:24:b5:d0:9c:d6:9e:2b:83:24:3d:
         c5:82:5b:68:10:6f:31:dc:e4:0e:a7:68:76:3f:0d:99:9f:c3:
         92:d6:73:cc:2e:1f:0d:fe:29:c2:fe:b9:6f:19:b2:e5:6c:a8:
         98:95:13:93:70:29:08:c7:ca:5f:e5:9e:e1:09:07:0d:db:ef:
         b7:0e:61:75:61:8d:1d:9f:11:51:7e:93:a3:22:50:b4:73:ea:
         5f:32:a5:b3:4c:19:f9:eb:be:8a:8f:70:7d:41:be:e2:d7:08:
         79:70:31:a8:39:cc:6c:2d:ce:cb:5f:04:0d:d3:9a:b4:5d:50:
         38:ec:78:54:f3:33:60:cc:8f:eb:81:87:15:2e:3a:05:17:8c:
         c7:4b:b0:24:7c:a6:5b:30:14:f4:7b:a9:d0:9d:05:82:0f:5f:
         10:29:34:9d:89:51:53:10:b3:5b:c0:26:ae:00:7e:6f:fc:e8:
         3c:07:83:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:14 2024 by rpki-client on console-ams.rpki-client.org