Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/7d98725e-0a65-3f0d-92dc-f813f88e41a9.roa
File:                     7d98725e-0a65-3f0d-92dc-f813f88e41a9.roa (raw, json)
Hash identifier:          Ytxr0KTciS0+qEGMs7uVVZQfPXTSJG+PWU/VIcoiiuM=
Subject key identifier:   51:10:EB:8C:D3:B7:C6:03:82:DC:CA:E3:B3:7B:68:32:9F:C6:BC:5D
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F43285847A30C0300C5E8978931CB1F40
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/7d98725e-0a65-3f0d-92dc-f813f88e41a9.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     12083
IP address blocks:        96.27.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0c:03:00:c5:e8:97:89:31:cb:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=acdd5a31-9aa8-4f6a-b8f7-f236f174f879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:60:6a:cd:95:5f:16:23:0d:64:b6:43:0d:e5:
                    42:bf:ce:3c:c8:fc:fe:77:0d:fa:43:b7:d2:d5:6b:
                    95:04:44:7f:67:16:fe:86:99:0d:84:f7:21:cd:53:
                    40:c3:fe:e0:18:3b:ce:50:6b:06:83:cb:cc:20:31:
                    4d:93:0c:8f:d8:45:96:ce:30:fe:42:61:4f:f3:77:
                    f3:fa:00:79:51:1d:78:7a:80:fd:e2:7a:a0:82:ce:
                    23:d8:60:f5:da:4d:8e:0a:72:65:fb:58:ab:8f:b8:
                    c7:52:73:92:b4:81:01:1b:d2:99:fc:11:09:36:83:
                    b3:33:6c:23:17:a1:72:29:d9:80:00:40:99:51:68:
                    f5:b0:34:30:25:1b:fb:63:33:e5:f9:9a:cb:cb:87:
                    20:54:35:92:e9:fa:1e:14:08:bc:7b:1a:da:98:60:
                    d5:64:c6:20:77:15:16:77:08:e0:8d:6d:bb:fa:78:
                    70:5d:23:3c:c4:b6:ce:39:43:a6:0d:cf:60:98:a4:
                    23:ef:6d:e7:5f:a2:bc:61:b4:f3:2e:8a:fb:3b:3b:
                    e5:92:1b:60:6d:43:cf:5d:6d:30:86:d1:0a:f0:f8:
                    7d:f9:3f:a8:dc:24:83:6b:41:89:e5:2b:59:32:01:
                    2e:1e:bc:e0:44:e9:5e:ee:79:11:be:4f:1a:fb:18:
                    b3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:10:EB:8C:D3:B7:C6:03:82:DC:CA:E3:B3:7B:68:32:9F:C6:BC:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/7d98725e-0a65-3f0d-92dc-f813f88e41a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.27.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:bd:9f:5d:32:4e:de:9a:22:70:a7:f8:3d:a0:8d:95:aa:57:
         33:a1:4d:89:72:5c:2e:ed:72:58:d9:6d:81:de:6c:58:8a:7e:
         6f:39:ff:e0:af:2d:0c:de:6c:61:88:bf:9f:96:30:93:e4:fd:
         10:fb:c5:e2:e1:b2:7d:6b:e7:dd:ed:81:43:50:a2:5f:66:b8:
         d3:ce:13:56:20:cb:db:e3:4b:6a:fd:07:1d:ed:37:52:bc:ea:
         3a:be:1c:fb:11:21:30:3a:a2:41:6f:72:a7:88:60:96:73:76:
         b2:5f:39:c5:89:74:16:20:e1:76:79:0d:5d:2c:c1:05:89:26:
         f1:12:28:e1:ae:b9:3c:8c:45:b9:6f:01:af:f5:83:87:ff:53:
         28:95:0f:71:03:f2:79:bb:73:1f:ed:dd:41:44:9b:23:08:d0:
         d5:83:0f:18:28:93:d6:ef:a7:54:09:43:c9:88:d6:d7:31:5b:
         cb:7a:09:86:64:cf:d0:c1:72:ef:8c:e8:a1:c8:af:84:a2:7e:
         1a:cc:c9:c3:32:d3:0d:16:52:83:60:de:86:c7:b5:f6:db:36:
         33:31:46:11:28:5d:5a:69:b5:39:21:ff:f9:a0:4e:0c:ef:de:
         56:32:f6:a5:16:76:8c:58:7e:23:82:4d:36:52:cc:69:95:eb:
         59:43:74:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:06 2024 by rpki-client on console-fra.rpki-client.org