Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9990d0c4-4ba4-38d8-b896-c2f229fb7d72.roa
File:                     9990d0c4-4ba4-38d8-b896-c2f229fb7d72.roa (raw, json)
Hash identifier:          mMswB3INAqu5BajqehC49nULo88DVf32GvhaUQCwjn8=
Subject key identifier:   49:AA:94:94:06:78:E1:E7:60:2B:BD:C7:2D:91:3F:61:5E:0A:C5:24
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F43285847A30BF9BFCAE3E80E9FF61D20
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9990d0c4-4ba4-38d8-b896-c2f229fb7d72.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     12083
IP address blocks:        67.149.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:f9:bf:ca:e3:e8:0e:9f:f6:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=148e241b-89a3-4fba-ad22-d92f66c7f47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:df:e5:58:2c:37:d2:e1:7c:26:60:7e:1a:cf:
                    9a:de:d3:d4:ef:c5:d5:ca:52:17:10:f1:c5:99:c5:
                    fa:3b:bc:45:15:9c:61:73:59:91:94:4b:7c:5f:66:
                    72:c8:c4:5b:69:2b:1c:ff:95:10:ea:cb:9b:c3:7d:
                    35:1f:3c:67:50:77:34:59:ce:3d:97:d7:c7:88:0f:
                    aa:f1:4f:5d:b9:e9:86:eb:ef:4e:1d:09:07:af:ce:
                    54:38:14:e7:d7:b6:96:08:9f:7e:6c:48:d2:b8:bf:
                    33:c0:d7:d1:dd:6e:6d:54:07:99:9f:b3:3b:88:71:
                    76:42:e4:a5:4e:67:a1:b3:58:be:f5:eb:84:2b:49:
                    af:00:51:d9:fd:81:52:4d:eb:6f:ba:49:45:c1:47:
                    35:0d:24:0d:91:29:e9:2b:d2:96:36:aa:e9:5d:ce:
                    e7:9d:e2:06:e7:9e:62:05:93:e7:4f:60:af:3a:a8:
                    4f:f8:a8:23:31:7f:38:72:b0:bf:b7:93:8e:c9:3f:
                    2e:10:67:51:3f:0a:3d:3a:e6:cb:7b:72:45:69:61:
                    3c:99:19:61:da:23:09:bf:33:a8:1e:aa:5a:be:c7:
                    1f:3e:de:c1:55:84:25:1b:02:4f:f1:50:64:df:d5:
                    a2:e2:45:26:b8:c9:51:36:1e:1e:ee:dd:56:5d:27:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AA:94:94:06:78:E1:E7:60:2B:BD:C7:2D:91:3F:61:5E:0A:C5:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9990d0c4-4ba4-38d8-b896-c2f229fb7d72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.149.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ce:5a:5e:0f:2f:0f:08:ee:82:f1:e4:bd:a3:fd:c2:ed:0d:
         c3:d2:77:7b:82:97:56:96:1a:43:d7:6c:d0:fd:91:b9:cf:e6:
         b2:be:2e:23:b3:a0:ce:b6:20:53:17:99:f6:75:f7:2a:99:a5:
         ee:d2:76:ef:56:f1:d3:17:83:a0:d0:f3:06:5a:cc:b0:11:db:
         8e:ec:f2:fa:41:22:d9:0d:de:b5:6b:c3:57:29:3c:09:b4:25:
         8a:ba:b6:95:1d:97:b0:71:c2:ed:93:6a:c9:c2:f1:12:53:13:
         3f:5c:58:0c:18:b2:fb:f4:67:7c:ee:a8:d6:41:6c:5a:e7:b8:
         65:ce:49:b2:f9:66:ba:0e:f6:da:e7:42:e8:22:49:5b:db:dc:
         28:47:1c:a4:00:9a:68:45:64:49:9b:61:d0:e0:8d:80:89:72:
         a5:5a:c5:36:21:03:c3:83:01:e8:7e:07:8b:55:24:f2:19:36:
         60:b1:3e:ce:22:dd:f2:1c:2b:ba:58:c9:d0:c5:61:25:be:de:
         ba:12:cd:91:9c:c2:87:51:bf:64:eb:13:f5:66:11:bc:e1:7e:
         87:c8:92:f4:42:43:bf:c0:e5:37:17:e3:ac:fe:2e:4c:92:0d:
         97:90:86:e0:ad:ff:91:50:90:91:2e:df:93:33:98:33:5b:cd:
         96:67:4c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:56 2024 by rpki-client on console-ams.rpki-client.org