Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/86ce4399-1b72-390d-8570-47106748f50a.roa
File:                     86ce4399-1b72-390d-8570-47106748f50a.roa (raw, json)
Hash identifier:          ilE/cqLAuljDuGZe9vF4O6xGZRdVdX/wrKAoAMiBopU=
Subject key identifier:   40:4E:B9:49:26:CE:DD:C8:27:80:63:7B:8A:F3:91:73:C8:C0:60:35
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285844D87A83EEB59D1B88EE15B4A0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/86ce4399-1b72-390d-8570-47106748f50a.roa
Signing time:             Sat 10 Feb 2024 14:00:32 +0000
ROA not before:           Sat 10 Feb 2024 14:00:32 +0000
ROA not after:            Fri 10 May 2024 13:00:32 +0000
asID:                     9009
IP address blocks:        198.145.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d8:7a:83:ee:b5:9d:1b:88:ee:15:b4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Feb 10 14:00:32 2024 GMT
            Not After : May 10 13:00:32 2024 GMT
        Subject: CN=bbe6481a-120b-46f3-836d-012a5da6c436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:63:f5:25:3d:89:97:59:c9:92:83:97:21:bf:
                    17:03:16:5a:44:ad:a0:78:df:7d:63:cf:72:dd:2c:
                    34:62:15:2d:18:b4:ae:a4:27:dc:21:a4:c5:b4:95:
                    44:61:90:1a:12:bb:d5:29:66:5e:bc:27:48:5c:f9:
                    3c:e0:2f:7d:ee:7a:2f:8c:23:61:61:e7:64:dc:58:
                    54:27:3d:0a:e9:14:db:39:34:0c:01:a5:2d:7f:24:
                    59:16:df:4c:68:6f:f7:8e:cf:b7:bf:8a:b4:a9:09:
                    42:ee:90:e6:b4:2b:99:3a:04:1b:9c:a3:d5:67:3d:
                    2e:9c:57:ad:20:d5:97:59:f6:9d:9d:ba:3a:56:48:
                    8e:d0:c7:1e:5d:a1:83:04:96:78:4a:3a:b5:50:0d:
                    d5:04:96:6f:1a:ac:ee:54:c9:46:8b:4f:c4:81:eb:
                    47:37:13:31:e4:a4:e5:89:5b:39:c8:89:c5:72:92:
                    d3:58:80:bd:bb:95:fd:60:46:66:87:64:85:13:78:
                    67:f7:67:44:7b:df:37:c2:8c:69:51:dc:b3:a5:e5:
                    79:4e:10:48:a6:80:cb:c8:a4:58:ea:a3:77:38:59:
                    98:92:ab:37:41:a8:c1:0a:a3:6f:09:84:c0:7d:9a:
                    7e:5d:2f:0e:91:6c:40:76:16:ef:20:aa:d9:7c:49:
                    03:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4E:B9:49:26:CE:DD:C8:27:80:63:7B:8A:F3:91:73:C8:C0:60:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/86ce4399-1b72-390d-8570-47106748f50a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:b1:5d:39:3e:0d:a2:18:9a:8d:61:7b:ce:01:cb:c3:e1:7f:
         c5:d5:31:99:4b:9e:a9:a1:85:96:47:54:4e:c9:9e:6e:25:b9:
         f9:77:2e:5a:6d:7b:92:3c:26:2a:ad:67:36:06:9b:5c:33:d6:
         82:34:c1:8c:1c:70:6f:08:22:dd:39:cf:a3:bb:05:f5:c9:ec:
         64:38:fc:f5:e2:b0:bd:9e:19:96:e5:6e:20:99:1b:22:9f:34:
         8d:d9:82:36:6f:d3:ac:d0:56:61:51:97:bf:34:67:f2:c4:12:
         e3:19:69:22:85:e2:5c:d2:62:41:44:2e:24:0a:13:1c:0d:46:
         0f:0f:e5:92:44:45:59:e5:39:c6:ae:4a:d8:e9:3b:fb:4a:ca:
         06:ec:97:d7:73:cf:43:e6:4d:1a:84:4a:ac:c4:ef:7b:b0:ac:
         28:2b:b5:28:44:95:aa:13:02:f5:09:6d:0e:ea:c9:8f:91:b7:
         1c:db:7a:25:7c:17:d3:b1:c1:40:29:58:14:30:c9:d6:84:d3:
         7a:88:5b:1d:ca:58:f9:f2:a5:c3:70:a8:ec:ac:76:cb:b4:f5:
         f0:b0:79:4f:1f:6d:16:6a:39:70:e6:e0:87:ad:99:27:7b:8f:
         90:1d:6c:44:5d:e9:af:36:7f:0d:0e:71:f2:09:33:c4:b3:01:
         1a:e1:4c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:47:36 2024 by rpki-client on console-ams.rpki-client.org