Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac29b89c-18a0-34cb-8f37-f148c527035b.roa
File:                     ac29b89c-18a0-34cb-8f37-f148c527035b.roa (raw, json)
Hash identifier:          MLBAIsTG7/vAN8NwgbyY5fv9/QF0eAQ12dmqVh+wsNU=
Subject key identifier:   00:FC:FA:96:24:2E:C6:57:C5:89:BF:E0:E2:A2:B5:30:E0:01:7D:DF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D14328DA1FC4C5964D5200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac29b89c-18a0-34cb-8f37-f148c527035b.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11427
IP address blocks:        76.84.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:43:28:da:1f:c4:c5:96:4d:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=682de20e-4050-455e-b8e9-d8cb2ee70330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b9:4c:36:ae:54:58:c8:62:b6:05:dd:55:25:
                    7a:ca:f5:95:d9:d4:e6:e0:f8:f0:d0:c1:b2:83:97:
                    92:15:27:eb:53:e3:6c:17:60:ef:cb:31:64:76:57:
                    a8:61:18:33:ee:01:d0:87:ae:c3:8d:71:cb:36:6d:
                    71:f8:1d:b4:d1:1b:d4:77:3a:7a:a8:34:fd:e5:df:
                    9d:98:e2:09:c3:ff:b5:d9:d0:23:bf:d5:a2:2f:6c:
                    d6:17:46:4f:c7:d4:c2:fe:16:e0:81:1b:65:4e:1a:
                    17:2d:f2:03:31:b2:36:be:e0:aa:2b:ff:e5:7c:0a:
                    75:08:3b:75:5c:bb:9d:01:2d:5b:60:13:a6:19:ab:
                    a4:dc:01:39:51:ed:0b:4b:3f:17:f6:4c:f7:b3:a9:
                    ef:37:03:c0:e4:39:fa:85:20:f0:59:58:64:43:13:
                    8a:7f:3c:e8:25:87:1f:1c:24:53:ae:09:59:46:35:
                    bf:76:df:37:02:a9:0f:73:71:71:e8:f0:4f:01:20:
                    fa:9b:57:8c:9e:d1:64:7d:58:88:ef:f0:2b:63:6a:
                    fd:21:fd:fc:28:d5:95:75:53:4c:32:7f:7a:f4:16:
                    c4:07:fd:b8:90:d8:c2:1f:c0:a8:a5:19:43:47:98:
                    1f:db:b1:01:75:82:65:cf:33:9a:f5:58:d7:0d:85:
                    f0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FC:FA:96:24:2E:C6:57:C5:89:BF:E0:E2:A2:B5:30:E0:01:7D:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac29b89c-18a0-34cb-8f37-f148c527035b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.84.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:f8:f5:be:e3:0f:31:67:06:59:0a:cd:1c:f4:dc:82:ee:59:
         36:fa:c9:4f:cc:e9:40:bc:f1:78:af:d5:ec:27:f7:51:3a:f1:
         25:e5:22:8b:41:03:da:85:8b:dc:86:f6:c5:6e:44:6e:ae:6c:
         d5:77:8c:e1:46:d4:8d:f3:c5:b2:82:c6:72:96:a0:56:bf:b1:
         63:8f:65:45:a0:00:12:74:8b:30:b7:d2:ed:82:c5:17:73:98:
         d9:8d:79:b9:52:91:db:48:45:02:8e:ea:14:9b:cf:d1:02:6f:
         54:a3:b9:5f:25:d4:be:14:62:e5:eb:ce:68:72:88:4c:de:28:
         be:8e:64:cd:da:91:d4:63:1c:f2:53:36:e8:3a:b0:a6:a4:21:
         12:ad:50:d2:7f:c8:e8:8f:7d:87:ea:a7:61:ac:af:e7:4e:b7:
         e9:b3:38:04:49:30:30:58:0d:72:1a:bd:84:c9:9d:29:2f:97:
         c6:e9:45:22:c9:b9:54:43:2e:13:0f:26:d2:be:aa:20:33:67:
         f1:32:83:93:25:1f:88:2c:9d:b9:ec:74:1f:df:2f:7b:be:39:
         65:0e:97:d8:c2:66:d8:6e:4c:44:f5:db:55:ff:67:a8:da:1e:
         07:0c:76:de:d5:38:1f:80:75:41:92:e6:77:7f:da:4a:72:ed:
         bb:ed:ec:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:26:05 2025 by rpki-client