Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac29b89c-18a0-34cb-8f37-f148c527035b.roa
File:                     ac29b89c-18a0-34cb-8f37-f148c527035b.roa (raw, json)
Hash identifier:          hanMHGhihmARBanRONqJDTQlNtECNHeMdojeis27po0=
Subject key identifier:   D2:EE:1B:E1:85:B0:FD:F6:3E:CC:BD:6F:FB:DA:F1:BE:A6:EB:CE:32
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0A423BDE59927C7376D00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac29b89c-18a0-34cb-8f37-f148c527035b.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11427
IP address blocks:        76.84.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:a4:23:bd:e5:99:27:c7:37:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=7e6e24fd-c98b-47d8-ad15-b1686fee3cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f2:36:73:8f:c2:29:e1:7d:08:ad:a8:cf:49:
                    32:96:d2:28:d8:b3:38:50:32:c6:ba:48:76:2b:d5:
                    f4:14:4a:e3:4a:f0:91:52:3b:26:72:25:b5:b8:5f:
                    5d:f5:ca:44:47:6f:7c:3f:2b:83:af:83:93:89:49:
                    3f:0b:73:69:56:81:2c:0c:c4:aa:88:4c:d6:de:48:
                    73:63:0e:db:7c:53:3e:c5:cd:33:ac:be:85:74:05:
                    ce:39:cd:04:41:3a:c3:cb:a8:76:47:ea:fe:e2:c4:
                    4b:55:5a:b5:e1:1c:0f:e0:a1:35:68:04:54:7a:76:
                    05:7f:ff:11:ba:33:cc:a1:9b:55:81:f6:6f:37:7e:
                    82:8f:0b:47:61:2e:37:f4:a3:20:f8:df:33:82:eb:
                    fb:d0:98:0b:c0:a7:76:50:ae:6c:5d:19:1f:ed:79:
                    a0:d1:16:51:93:d8:86:cf:d0:b9:3f:64:6b:57:64:
                    43:f7:dc:5d:b3:6a:61:28:49:19:4f:ed:69:a6:fb:
                    65:c4:cf:3b:e7:77:07:1b:2c:64:d0:a5:04:5f:08:
                    01:a6:01:85:e6:19:06:ca:9e:72:61:53:1e:6c:ad:
                    14:31:48:29:9c:ed:5e:3e:42:20:97:2a:cb:f3:eb:
                    92:26:97:02:b3:9c:ed:27:77:76:ff:51:84:f0:ea:
                    48:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EE:1B:E1:85:B0:FD:F6:3E:CC:BD:6F:FB:DA:F1:BE:A6:EB:CE:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac29b89c-18a0-34cb-8f37-f148c527035b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.84.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:12:70:fe:18:2a:5c:b9:85:ae:cd:77:40:f9:63:57:39:27:
         dd:31:9f:1a:bd:9b:de:4d:24:4c:0d:3d:48:6e:af:30:6f:18:
         bb:76:72:15:17:f7:24:35:62:33:e3:cf:b5:73:46:69:d8:86:
         a2:0c:53:3d:11:78:46:19:1b:42:c3:27:c2:21:94:e3:e6:91:
         26:38:02:d3:ff:7b:f7:44:af:2a:cb:66:d6:ba:1a:13:bb:9b:
         37:3c:c4:cc:db:ff:28:38:a4:92:a2:9b:c1:06:67:4a:c8:c2:
         b3:11:88:30:ee:59:8b:78:1f:f5:25:c3:47:17:a4:b4:43:78:
         8b:55:09:fc:4c:a9:9e:e3:51:1f:19:1e:3c:71:04:84:b3:d9:
         e6:f9:fe:eb:1d:64:41:a7:df:63:8e:ca:db:63:80:02:bd:13:
         01:00:9c:41:aa:34:ce:3e:7a:05:bb:8f:1d:e8:73:8f:c3:08:
         d7:c7:97:97:2d:2e:43:49:e0:c0:07:06:32:3e:aa:0c:1e:3c:
         d7:61:bb:e9:00:a5:69:f9:dc:8d:cb:27:65:a8:9e:ee:7f:e1:
         d2:30:03:a3:6f:b3:17:e4:ea:7c:95:0d:7c:ad:a4:a0:92:4f:
         95:dd:fe:2a:33:86:7e:cd:1d:39:c1:c5:ad:a5:e7:10:65:2b:
         a0:9c:05:b9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcioKQjveWZJ8c3bQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
N2U2ZTI0ZmQtYzk4Yi00N2Q4LWFkMTUtYjE2ODZmZWUzY2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/I2c4/CKeF9CK2oz0kyltIo2LM4UDLGukh2
K9X0FErjSvCRUjsmciW1uF9d9cpER298PyuDr4OTiUk/C3NpVoEsDMSqiEzW3khz
Yw7bfFM+xc0zrL6FdAXOOc0EQTrDy6h2R+r+4sRLVVq14RwP4KE1aARUenYFf/8R
ujPMoZtVgfZvN36CjwtHYS439KMg+N8zguv70JgLwKd2UK5sXRkf7Xmg0RZRk9iG
z9C5P2RrV2RD99xds2phKEkZT+1ppvtlxM8753cHGyxk0KUEXwgBpgGF5hkGyp5y
YVMebK0UMUgpnO1ePkIglyrL8+uSJpcCs5ztJ3d2/1GE8OpIlQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNLuG+GFsP32Psy9b/va8b6m684yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYWMyOWI4OWMtMThhMC0z
NGNiLThmMzctZjE0OGM1MjcwMzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMATFQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdBJw/hgqXLmFrs13QPljVzkn3TGfGr2b3k0kTA09SG6vMG8Yu3ZyFRf3
JDViM+PPtXNGadiGogxTPRF4RhkbQsMnwiGU4+aRJjgC0/9790SvKstm1roaE7ub
NzzEzNv/KDikkqKbwQZnSsjCsxGIMO5Zi3gf9SXDRxektEN4i1UJ/EypnuNRHxke
PHEEhLPZ5vn+6x1kQaffY47K22OAAr0TAQCcQao0zj56BbuPHehzj8MI18eXly0u
Q0ngwAcGMj6qDB4812G76QClafncjcsnZaie7n/h0jADo2+zF+TqfJUNfK2koJJP
ld3+KjOGfs0dOcHFraXnEGUroJwFuQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:34 2024 by rpki-client on console-fra.rpki-client.org