Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bc97ca2f-4623-38e0-876a-9fea9455f67d.roa
File:                     bc97ca2f-4623-38e0-876a-9fea9455f67d.roa (raw, json)
Hash identifier:          XKuxHX/uHNZGpObkzA/yZXuxq6pgXESJx6LW4Lk/XTA=
Subject key identifier:   A5:EC:61:0F:6A:56:3C:EF:EC:8D:2E:30:8E:45:19:FB:76:8C:F8:AC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E6F8ABC1C74E9C29FC180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bc97ca2f-4623-38e0-876a-9fea9455f67d.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20001
IP address blocks:        76.53.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:6f:8a:bc:1c:74:e9:c2:9f:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=1af7bc25-e9c6-4571-bc90-b84527d4ac39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:0b:cf:83:de:85:6d:82:51:42:25:0c:ce:
                    33:09:8b:c2:95:55:ad:bf:b0:50:bb:ac:07:09:3e:
                    00:7e:0f:4b:71:dc:46:41:22:26:dd:36:e7:8b:03:
                    cd:fd:9d:9a:35:5d:9d:1d:63:59:ca:67:57:0c:b6:
                    21:e7:db:ca:e7:f9:de:11:6f:c3:5d:63:3f:59:4c:
                    d8:79:bc:8d:07:3a:b5:b3:8f:28:14:27:a0:2a:b1:
                    3a:82:e6:d4:39:a3:b3:d9:43:38:7a:1b:f8:52:96:
                    cb:42:ad:a4:c2:e5:36:be:0d:c3:90:08:fd:ff:20:
                    5b:b1:8e:55:b0:06:a3:a0:9d:32:17:8a:db:cb:7c:
                    77:6f:88:80:2c:12:9f:4d:0b:6c:09:c0:ef:04:4c:
                    34:6a:3a:76:76:6c:71:32:49:f2:8c:fa:7c:ba:1f:
                    a3:b9:3e:e6:e1:81:fb:54:09:d9:09:b4:0b:78:40:
                    08:56:db:b0:03:43:d8:08:ed:5d:2e:28:68:f9:0d:
                    99:70:65:db:02:2d:c0:26:f8:62:3b:fe:bb:eb:25:
                    ea:34:51:43:05:aa:49:21:a2:91:c1:84:58:6f:1f:
                    f5:d4:21:92:14:60:7e:57:78:db:b5:f3:cf:ca:4e:
                    ca:38:a4:68:6b:17:46:25:18:48:74:18:e2:ac:6e:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EC:61:0F:6A:56:3C:EF:EC:8D:2E:30:8E:45:19:FB:76:8C:F8:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bc97ca2f-4623-38e0-876a-9fea9455f67d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ba:1f:2c:1a:de:9f:b2:26:eb:89:cb:b1:1c:4c:d5:36:ef:
         67:72:d3:fc:91:8d:a2:b3:9e:e9:d7:b3:bc:aa:d1:db:03:1f:
         2b:92:fd:c0:42:60:92:3a:1d:11:83:17:02:e4:88:65:ef:83:
         28:72:df:f6:49:a5:77:93:d7:c3:f3:18:e6:72:8c:e5:7e:84:
         a0:4e:68:9e:03:47:21:41:9d:47:ac:cc:99:02:1d:72:01:a6:
         ef:74:7f:76:6a:8b:9b:f0:d7:5f:be:2e:e0:01:7e:10:e5:29:
         01:3b:b0:62:3d:43:b3:e5:d5:4e:c9:6c:eb:20:d7:13:4e:d0:
         fc:7b:6a:74:a3:7b:08:3b:4e:0f:e0:84:c4:c4:c9:52:7a:bd:
         74:5c:27:73:d1:d3:12:83:8e:78:66:12:50:67:0c:a5:07:45:
         33:dc:d8:c7:51:e5:96:63:0e:41:86:53:ab:14:50:2d:ab:f4:
         24:e1:21:39:e6:a2:b0:33:a7:43:49:e7:b7:85:18:a2:69:bb:
         eb:bd:db:34:d1:8e:70:67:d8:e4:29:78:fe:cf:e2:32:0d:41:
         75:49:4e:67:75:5a:2d:49:6c:9f:d6:be:c7:36:6c:a3:3f:79:
         47:72:cc:9a:ec:3e:06:03:3b:6b:30:51:b3:d6:54:1a:c2:27:
         36:b8:1c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:56 2024 by rpki-client on console-fra.rpki-client.org