Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/100e977c-0118-3009-a2dd-49409eff4704.roa
File:                     100e977c-0118-3009-a2dd-49409eff4704.roa (raw, json)
Hash identifier:          OGcS+4IlocdGLeMti7HxBo3KqVP3MNgA6b9IsAhtkwM=
Subject key identifier:   D8:47:58:CE:39:06:8E:E4:E3:90:29:A4:AD:2F:68:C7:93:7F:C8:AF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DD0CB0D6B0BB4CA9AD040
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/100e977c-0118-3009-a2dd-49409eff4704.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20001
IP address blocks:        76.178.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:d0:cb:0d:6b:0b:b4:ca:9a:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=a87d3a5c-0dfe-4644-9b18-6c92b6c5ef07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a7:fd:98:f8:aa:0e:78:7d:90:94:b9:e3:8d:
                    b9:8f:29:4f:f0:4a:f1:33:ed:4f:1c:3f:af:a1:3e:
                    50:cb:1e:aa:40:c8:20:5b:7c:aa:ae:d9:05:53:ec:
                    be:d1:4b:65:02:eb:e7:6f:30:fd:97:4a:b8:39:82:
                    c3:fe:a7:c3:23:31:9c:54:69:62:13:ad:09:84:9f:
                    82:4e:1b:37:e7:a2:7b:fd:d5:18:48:06:c5:a9:ce:
                    94:0b:aa:a8:dd:26:31:a4:d8:eb:ea:aa:e9:a1:02:
                    74:4e:17:8a:ea:1f:bf:15:e8:f2:f9:1c:e4:67:0f:
                    79:86:69:58:5a:d2:f3:42:ab:8d:17:18:a7:08:c3:
                    5b:cf:f9:00:9f:c5:7a:4a:2f:c2:dc:80:40:db:18:
                    46:34:a0:c4:d9:0d:91:25:b0:64:2a:15:2a:0d:c3:
                    be:01:2d:e6:e8:1e:58:fb:96:d0:38:f7:02:da:9a:
                    f5:91:e6:79:74:e8:27:00:dd:e8:96:44:35:de:3f:
                    2f:e0:f2:62:5f:e3:0d:af:da:9c:83:ec:e3:03:fd:
                    c0:aa:8a:18:b5:8a:61:17:3a:01:06:37:05:46:40:
                    9d:f1:75:18:34:49:56:49:1a:dc:08:ab:09:ef:64:
                    25:9d:7a:24:84:98:0b:db:e1:4e:87:36:cf:99:a5:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:47:58:CE:39:06:8E:E4:E3:90:29:A4:AD:2F:68:C7:93:7F:C8:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/100e977c-0118-3009-a2dd-49409eff4704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.178.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:24:72:48:33:1a:8d:d2:e8:de:04:2e:1d:df:73:65:4f:c9:
         e3:80:d7:82:59:1c:f4:e4:c9:df:26:ab:f5:e5:5b:37:53:99:
         aa:cf:09:d4:9d:4d:b8:6b:36:5d:28:8f:20:80:bf:ce:ec:5a:
         05:60:e1:64:ab:c3:b8:cd:da:8e:2a:03:6a:a5:ff:cc:e4:96:
         64:3f:ac:64:bb:a8:8a:90:b2:d0:df:4b:de:43:04:d6:da:ff:
         2b:59:cf:ff:f3:34:d7:3a:1b:2f:bf:87:5a:2e:a4:1a:ca:42:
         39:f6:70:e5:53:89:80:51:ab:00:27:76:36:79:0b:55:06:ef:
         98:71:59:3a:a5:59:59:6a:73:b4:82:3b:62:2f:77:3a:a7:67:
         8d:d7:7b:13:89:8d:ae:81:18:1a:fd:d9:eb:e9:0e:ea:18:bc:
         a8:62:f0:3f:38:ef:bc:7f:75:49:0d:2f:dd:e5:eb:ec:1d:db:
         73:69:8d:a9:20:a6:81:cf:05:c0:83:6a:c1:31:bb:11:e8:04:
         a7:f4:c7:c1:09:ab:e4:e7:5d:9e:56:1d:2e:4b:ff:c6:95:1e:
         10:e3:95:51:ad:69:b3:c1:25:f4:97:70:14:2f:23:94:fc:9c:
         97:c3:d3:ac:ae:5d:77:0e:0f:69:5c:ea:39:46:2e:77:bb:92:
         03:e2:b5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:25:07 2024 by rpki-client on console-fra.rpki-client.org