Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/b46e6792-09cc-3fe1-96a8-f8242176c655.roa
File:                     b46e6792-09cc-3fe1-96a8-f8242176c655.roa (raw, json)
Hash identifier:          lLUySGE6hv6DDqverd+LIO6vLx001K2gJRLX9v8uF5k=
Subject key identifier:   63:8A:E8:C4:89:2B:DA:EB:6E:F3:F0:9B:DC:FA:3F:D3:37:20:7F:A1
Certificate issuer:       /CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
Certificate serial:       010D0C9F43285847A32F6240D3ADAC2FCF2C1E80
Authority key identifier: C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/b46e6792-09cc-3fe1-96a8-f8242176c655.roa
Signing time:             Wed 23 Oct 2024 14:12:11 +0000
ROA not before:           Wed 23 Oct 2024 14:12:11 +0000
ROA not after:            Tue 21 Jan 2025 15:12:11 +0000
asID:                     11766
IP address blocks:        76.8.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:2f:62:40:d3:ad:ac:2f:cf:2c:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
        Validity
            Not Before: Oct 23 14:12:11 2024 GMT
            Not After : Jan 21 15:12:11 2025 GMT
        Subject: CN=f0f932f8-e697-4cce-a386-ccb62fa0c396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:86:73:a1:11:7c:46:a4:54:c1:e2:61:b9:
                    d3:41:7b:7b:3e:56:47:5e:55:59:10:ed:47:15:e5:
                    6f:7e:7c:9c:90:d4:a1:4f:77:dc:c2:bb:07:ce:81:
                    79:66:c9:92:18:9e:b9:5b:de:b7:6b:1b:cc:ff:a2:
                    a7:f4:b8:54:4c:02:a6:f9:0a:0e:ff:44:df:8e:fa:
                    14:83:ac:e8:76:96:42:16:29:f0:57:44:11:34:82:
                    27:4c:2b:f0:d4:f7:cf:32:14:94:7e:d4:ca:b5:67:
                    c9:84:29:e1:c4:69:01:d0:5c:6a:1d:6e:54:81:59:
                    d8:f4:be:97:b2:3a:6d:58:94:d1:0e:9d:a1:d9:5a:
                    a0:f4:3a:e8:07:3e:27:db:80:b7:7e:da:ff:93:b4:
                    34:52:9b:89:1b:97:3e:25:9e:98:d5:df:40:b1:83:
                    42:20:da:b6:c3:eb:35:66:d9:b8:4c:8b:12:89:96:
                    f8:88:31:40:a4:7a:49:69:a5:f0:5d:d1:87:12:39:
                    f0:c7:c3:fc:72:a1:49:bb:99:fe:63:cc:cb:0a:bc:
                    ff:02:c7:e7:b5:62:9f:f7:62:4e:ed:88:53:da:02:
                    70:e0:51:d6:c1:87:c5:fb:0d:21:74:25:61:3c:ee:
                    82:03:b1:a8:de:7a:13:da:20:67:44:e1:0c:c6:45:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8A:E8:C4:89:2B:DA:EB:6E:F3:F0:9B:DC:FA:3F:D3:37:20:7F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/b46e6792-09cc-3fe1-96a8-f8242176c655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl

            X509v3 Authority Key Identifier:
                keyid:C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.8.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:d3:46:11:5c:80:91:7a:06:d7:72:d0:14:3f:c5:3f:db:76:
         5e:76:6c:fe:b2:02:70:78:52:00:fd:96:e7:dd:7f:c8:cb:9b:
         21:eb:bb:55:ac:3d:c4:d3:77:42:bb:2d:6b:20:48:41:b9:8a:
         3a:80:e9:22:b7:53:61:bf:cc:57:4d:37:44:38:8d:50:df:21:
         48:e2:23:ea:9f:20:45:0f:74:7b:31:d3:94:92:2e:20:1d:1c:
         53:73:7e:c0:9c:4d:18:fa:8c:bb:fd:fc:2c:43:38:08:31:d3:
         69:ae:dc:07:d7:b5:cd:61:68:a6:5e:62:61:c7:3c:c7:e2:06:
         4f:ea:3d:23:56:ba:b8:bd:55:03:06:0d:f8:c4:b8:03:a1:ee:
         a8:79:92:48:1d:90:93:6d:a6:86:e6:04:7c:14:2e:9c:44:c0:
         79:52:39:85:e9:40:34:ce:0b:3f:b6:78:b9:25:00:23:64:16:
         2e:af:06:0e:5c:c6:a7:04:7c:e8:a6:68:7f:c8:a0:53:57:c6:
         ca:8c:df:4c:d9:b7:e7:68:cd:1a:67:4d:ba:3c:53:e8:cc:e7:
         5a:77:a5:50:55:5b:d7:86:8e:b8:43:02:a4:32:78:d5:b5:17:
         36:ca:8c:20:f0:67:6d:b0:6e:9d:61:66:37:ac:49:26:c2:5a:
         a5:0c:91:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:23 2024 by rpki-client on console-ams.rpki-client.org