Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/7c0b6039-e782-330d-bd39-c0bd0fe69dd4.roa
File:                     7c0b6039-e782-330d-bd39-c0bd0fe69dd4.roa (raw, json)
Hash identifier:          JuIOLevFiRZMm+Z+tMrEvyIgN7PMnDi/5577XEYX1A8=
Subject key identifier:   D4:5D:DD:C0:66:98:9D:1D:B2:F1:6D:0C:E0:24:71:21:78:94:B0:82
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285845734DAB2E886E7BA0DE947780
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/7c0b6039-e782-330d-bd39-c0bd0fe69dd4.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     24439
IP address blocks:        64.86.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:ab:2e:88:6e:7b:a0:de:94:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=aad3abb9-59c3-4996-a39a-96a8513741fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:28:a7:eb:89:29:29:74:13:fa:ed:a2:06:
                    31:72:ad:d0:b9:22:a7:c3:44:06:3a:3f:a3:b6:85:
                    bb:22:b1:6b:08:f2:a3:dd:21:b2:6b:e3:a7:b1:9a:
                    c5:1c:63:c0:b1:82:c7:bb:22:55:75:1b:03:c4:39:
                    52:e2:fd:ce:9f:13:d9:6f:fc:f0:4f:0b:34:d9:df:
                    18:8c:e2:2a:f6:f1:58:02:65:f7:99:d2:cc:37:89:
                    9b:55:6b:26:8b:26:d6:f5:1e:0a:e8:9f:f6:2d:1c:
                    1b:04:ff:86:8f:ff:21:26:5b:6b:bc:50:04:8f:eb:
                    98:6c:a0:44:35:7e:7a:92:ff:ec:40:c0:2b:b6:d2:
                    2c:63:c0:aa:66:37:4f:92:80:5a:47:4c:f6:2a:3b:
                    43:f0:8b:7c:e0:e2:94:1f:43:04:92:ff:73:0e:6a:
                    9c:be:f2:23:e3:9e:37:47:d4:80:f9:8b:29:e6:bb:
                    2e:04:a3:d0:90:fe:ad:97:ec:c2:27:59:06:a4:cf:
                    32:d6:56:7f:40:62:ac:e8:59:ad:47:16:92:e0:48:
                    e7:f9:a5:84:af:58:8a:61:fe:ba:a3:38:a8:fa:db:
                    64:f0:b9:ce:75:e0:c1:b7:59:01:69:15:dc:ca:a3:
                    41:a0:2f:94:e9:44:fe:e6:05:11:5d:4a:3e:18:cf:
                    1b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5D:DD:C0:66:98:9D:1D:B2:F1:6D:0C:E0:24:71:21:78:94:B0:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/7c0b6039-e782-330d-bd39-c0bd0fe69dd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d6:1c:b9:27:25:0d:b9:c1:67:3a:c7:16:2e:e4:b8:98:35:
         7a:61:32:ef:81:1d:66:2c:fc:2d:1c:5c:42:70:c4:61:a4:a9:
         a6:35:c3:31:89:82:b5:61:77:19:49:cd:06:b2:ae:3f:4c:c1:
         2c:5c:b4:7c:23:eb:6c:56:5e:ad:9a:87:48:bd:3c:3a:f9:bb:
         69:15:c6:9d:fc:3f:96:0d:b6:a0:f1:a1:f0:9e:c4:ce:77:4a:
         81:6b:dd:e6:78:1d:b7:8c:c8:89:d4:a7:6d:4b:08:dc:23:4a:
         fd:2a:02:6a:54:ee:b9:18:a2:d5:c9:0b:b2:9c:45:96:28:c8:
         b3:bf:27:59:25:f3:18:9c:26:11:d0:3d:9f:74:e8:83:a0:a4:
         88:14:a4:3f:32:de:2d:b7:b0:d1:a5:1e:1e:67:78:bb:ab:e4:
         13:e8:fc:b8:3a:b2:ac:e8:06:bd:10:4f:7f:29:5f:40:db:ea:
         05:46:0a:18:4b:a7:19:55:ff:de:c6:a2:79:5e:7e:c2:10:0d:
         9e:a0:be:25:c6:9a:cd:d4:db:24:b0:35:b4:60:f8:c4:aa:eb:
         3c:c6:6f:5f:5f:4d:32:25:42:6d:0d:71:e4:15:58:0a:b6:9a:
         ec:66:42:f5:00:41:74:9f:02:3b:a6:1d:ce:d0:b6:87:9f:9e:
         fe:54:b6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:03:49 2024 by rpki-client on console-ams.rpki-client.org