Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/99accb05-e4a0-3583-8084-0dd18512eacc.roa
File:                     99accb05-e4a0-3583-8084-0dd18512eacc.roa (raw, json)
Hash identifier:          iR9aL5ZNQ5DPynHItP2Tw5OKKMpSe2WTp9WjyBqbdrs=
Subject key identifier:   02:3A:C3:62:98:F5:03:6F:DD:74:A8:F9:5C:25:E9:77:70:E4:F1:43
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F432858476E1FB0FF98E55E75CB3FA800
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/99accb05-e4a0-3583-8084-0dd18512eacc.roa
Signing time:             Fri 04 Oct 2024 14:02:43 +0000
ROA not before:           Fri 04 Oct 2024 14:02:43 +0000
ROA not after:            Thu 02 Jan 2025 15:02:43 +0000
asID:                     11260
IP address blocks:        76.11.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:1f:b0:ff:98:e5:5e:75:cb:3f:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Oct  4 14:02:43 2024 GMT
            Not After : Jan  2 15:02:43 2025 GMT
        Subject: CN=7df33efe-8257-4021-af2d-61a4b110287f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:ac:3d:a9:d0:8b:72:ab:6d:b8:5e:30:34:
                    96:06:99:e3:ac:81:1d:8f:82:30:69:39:96:bf:68:
                    b8:a6:3a:a1:c0:4b:b6:45:3e:47:f1:a9:6d:d0:37:
                    84:07:b5:1f:9e:76:7c:1f:ce:a7:af:dc:6a:81:4b:
                    b6:0b:56:5d:7a:49:31:18:74:3a:26:d5:f7:dc:a8:
                    96:28:57:1b:b1:cd:19:81:fd:42:85:8f:a6:dd:2c:
                    e3:af:f0:3b:43:60:4a:f2:eb:75:98:a7:63:e4:28:
                    48:4d:0c:4e:3c:35:bc:6f:18:a2:45:c2:26:f0:96:
                    e1:9e:96:e3:b2:8d:8b:7d:4e:c4:6d:7f:08:f4:57:
                    41:6f:54:32:f4:c3:95:28:8f:d8:46:92:23:7d:bb:
                    bc:bc:b4:85:f9:a1:64:71:2c:8c:d0:ee:a9:b8:08:
                    c7:60:cd:de:f7:7a:18:06:04:c9:19:31:26:cf:ca:
                    51:de:8e:c2:e3:5b:77:66:ef:6c:04:84:d8:72:b7:
                    38:25:3c:c2:07:c3:89:cd:97:7d:95:f5:90:01:0e:
                    11:81:9a:ab:a8:d9:c9:64:4b:3b:7d:1f:21:18:df:
                    e5:76:31:9d:e4:a8:74:72:a1:be:80:65:96:fd:73:
                    e7:af:1d:97:0a:d4:83:07:26:ae:1d:98:cf:cb:d5:
                    d3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3A:C3:62:98:F5:03:6F:DD:74:A8:F9:5C:25:E9:77:70:E4:F1:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/99accb05-e4a0-3583-8084-0dd18512eacc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.11.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:ef:91:db:cb:d8:f4:7c:7d:29:77:d1:8a:2d:b1:e8:d6:a0:
         d6:a8:39:b9:3f:90:d4:14:68:d1:ed:f9:bb:33:3f:07:9b:a2:
         b1:e5:de:ec:87:f0:fa:b8:77:e4:ae:45:24:22:c5:81:d9:73:
         0d:44:90:9b:85:a8:51:7b:24:db:cf:f8:eb:b6:9a:58:eb:9d:
         a3:89:1c:64:1a:5d:52:5d:41:62:e7:5f:37:ef:b4:05:41:ba:
         fb:c5:f3:44:30:46:86:29:12:49:80:4d:bd:9a:5d:3e:2f:41:
         83:2c:76:a7:60:ff:a3:3e:88:4b:2b:88:bd:9b:6d:45:c2:7f:
         ff:cc:90:d8:13:77:85:0f:97:36:1e:db:70:92:1e:8a:c8:99:
         19:d7:a9:0d:be:39:5c:e0:2d:3c:d5:7f:73:b4:ec:8f:38:b4:
         35:af:38:56:c3:e8:86:e4:fb:b3:92:14:55:fe:37:84:8d:ce:
         07:e2:b4:9b:83:78:73:71:98:59:75:7a:9f:16:88:a2:b5:71:
         6b:ab:bd:4f:82:fa:e8:5f:db:92:a7:96:43:ca:32:37:3c:51:
         22:d2:b5:1e:2b:de:34:b2:2c:af:89:79:22:e4:ea:99:ae:ec:
         c9:fd:25:11:3a:ca:5b:1e:af:2c:ee:8b:fb:01:65:34:db:20:
         e6:0b:9e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:39 2024 by rpki-client on console-fra.rpki-client.org