Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3524bdda-e23e-31f6-81a7-e83ebf872749.roa
File:                     3524bdda-e23e-31f6-81a7-e83ebf872749.roa (raw, json)
Hash identifier:          t5/eUyHZw38k5EquEk6CGAb4Dxmo8rtbLgAikZntj+I=
Subject key identifier:   8B:B7:05:E9:F7:EA:56:07:EA:4C:36:6D:18:2C:E8:2F:1F:A3:7C:CD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A13F3E77D23ABDB9EEFD00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3524bdda-e23e-31f6-81a7-e83ebf872749.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20001
IP address blocks:        76.178.110.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:3f:3e:77:d2:3a:bd:b9:ee:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=8831f24c-e410-456c-b0fa-a7db5ffa9164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:28:8d:79:94:37:32:fa:ff:e9:5f:48:8c:f0:
                    a3:85:b6:4e:e6:1e:12:ef:02:c5:aa:a5:47:41:3c:
                    af:93:1c:68:8b:94:d8:ab:1f:43:ac:d4:0c:e2:1d:
                    6c:32:f0:dd:fd:82:88:a7:a0:d1:98:a8:a3:a3:f7:
                    1c:b5:c0:ae:fe:9c:72:c7:e9:c7:d0:61:43:4a:49:
                    dd:15:04:90:8d:3e:75:6d:21:55:a3:c2:3b:ee:10:
                    24:08:f2:28:34:93:df:d1:86:5f:dc:ed:02:48:dd:
                    49:6e:c0:ba:cb:63:2c:8e:1e:95:74:17:82:e4:c5:
                    62:15:8c:37:51:f5:c1:35:55:41:f6:00:93:32:8a:
                    5b:f7:f7:54:f0:eb:0d:3a:68:dd:2b:fd:a6:78:62:
                    25:07:0a:b1:6f:54:33:ca:be:45:05:a1:37:6f:37:
                    95:d3:51:dd:81:f5:bf:b7:ab:93:d3:94:17:79:78:
                    10:94:54:aa:6d:0f:3f:63:80:30:db:6a:f8:db:f1:
                    69:69:1b:bf:c3:1d:6b:21:f5:a6:64:6d:35:b2:39:
                    3b:5f:65:d3:51:2e:1b:c3:bd:2e:73:de:b2:d7:ab:
                    5e:57:49:02:d7:0a:dd:b7:1a:91:2a:da:ec:62:2b:
                    0d:76:cd:e4:f2:99:7c:01:7a:ce:c4:96:4b:0c:1c:
                    0a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B7:05:E9:F7:EA:56:07:EA:4C:36:6D:18:2C:E8:2F:1F:A3:7C:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3524bdda-e23e-31f6-81a7-e83ebf872749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.178.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:5b:2a:2d:ae:d3:90:b5:6d:92:52:f9:79:33:64:33:b3:df:
         86:77:05:b8:f0:20:1e:ba:9a:2a:60:ba:7b:22:cc:04:26:38:
         8e:54:bf:fe:2f:3c:03:f4:70:60:cc:b1:91:b4:e4:49:f1:e4:
         09:9c:8b:f1:ff:1e:7f:82:94:72:24:bf:b7:37:37:c2:77:82:
         68:9f:75:df:c1:35:1f:59:44:40:ef:7d:9b:93:de:c2:68:72:
         be:d5:09:51:64:3a:74:04:44:bf:7f:17:fb:0d:f9:42:cf:06:
         27:51:61:9a:68:34:15:65:5d:83:61:55:6d:fc:fc:ae:a2:de:
         c4:f2:7c:11:68:72:8f:e2:45:74:62:4e:de:ae:10:de:38:79:
         74:85:37:a2:ee:e9:14:2d:8a:fd:46:2c:22:34:8a:3e:e9:03:
         79:f8:ba:55:b5:a7:95:d4:be:a7:db:07:f6:a6:6b:8d:a0:31:
         c5:49:39:94:e6:15:01:1e:ae:7f:a7:02:d3:64:13:a2:ff:0a:
         d3:2c:76:c4:14:9b:4d:10:60:86:61:3e:8d:38:a8:1d:80:84:
         b6:19:31:ff:28:8c:e5:6d:05:6c:66:5e:91:5d:72:d7:01:6d:
         fa:9f:99:d9:46:c0:8e:23:e0:4d:83:09:82:e3:15:d0:5e:6e:
         46:e2:cc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:24 2024 by rpki-client on console-fra.rpki-client.org