Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b4947faa-c8a9-3c4a-a712-a7321ea1595c.roa
File:                     b4947faa-c8a9-3c4a-a712-a7321ea1595c.roa (raw, json)
Hash identifier:          0wJ6GkmUssGewCc/CI+efaAQHKeEFohMx9WTAW25nPs=
Subject key identifier:   E5:A8:07:5B:11:9A:36:31:BB:5D:3D:07:10:7B:DE:BB:88:92:9E:6A
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584581430B713238C198B72A4D00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b4947faa-c8a9-3c4a-a712-a7321ea1595c.roa
Signing time:             Thu 11 Apr 2024 01:00:25 +0000
ROA not before:           Thu 11 Apr 2024 01:00:25 +0000
ROA not after:            Wed 10 Jul 2024 01:00:25 +0000
asID:                     7018
IP address blocks:        208.66.72.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:81:43:0b:71:32:38:c1:98:b7:2a:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Apr 11 01:00:25 2024 GMT
            Not After : Jul 10 01:00:25 2024 GMT
        Subject: CN=e77e85df-4c8e-4521-946c-f270a03bff90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:8c:d7:ee:ec:0c:10:83:b9:46:93:71:0f:
                    a0:67:43:42:cd:8b:c6:00:7e:2e:4c:55:3d:d8:64:
                    5e:cb:50:28:11:80:af:5b:b3:bb:ec:f0:fb:6b:60:
                    84:bf:a4:26:93:93:68:bb:8c:83:ec:f8:37:01:4d:
                    82:3d:78:3a:15:18:5e:0d:0a:2e:d9:92:a7:d1:a3:
                    29:cc:e2:fe:d7:fe:ea:10:96:36:41:17:1d:ad:be:
                    28:93:b4:2c:80:d9:c9:83:3d:eb:93:25:3e:f0:21:
                    77:ce:b5:d4:f8:01:8f:21:fa:d5:36:e2:70:ed:e0:
                    f6:01:27:0a:4b:37:38:bf:12:d8:e7:af:c5:85:ac:
                    3d:d8:a9:46:03:b6:eb:7a:23:8c:3c:11:70:a9:23:
                    58:36:36:84:96:75:a3:61:c8:be:b5:e9:d7:87:24:
                    db:2e:5c:fe:d1:cc:45:1d:8a:fc:7a:4e:fc:47:c1:
                    6d:4b:5d:0a:43:f5:f3:86:7b:1a:ba:68:ab:c5:2a:
                    73:e9:b7:19:40:ab:4c:71:2f:57:6f:18:3b:63:6c:
                    b5:ca:f4:60:22:a9:72:4b:f2:92:c1:5a:d1:54:e4:
                    11:b6:a7:13:38:2c:74:91:fb:4c:5f:4d:de:f3:fe:
                    fe:f9:67:50:aa:8b:e8:83:c3:7a:90:86:b7:60:55:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A8:07:5B:11:9A:36:31:BB:5D:3D:07:10:7B:DE:BB:88:92:9E:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b4947faa-c8a9-3c4a-a712-a7321ea1595c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.66.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:15:a2:47:aa:28:92:44:82:b8:b3:57:58:fa:68:f3:de:ab:
         1a:50:2e:d5:1b:7c:4c:b9:6d:a9:af:32:80:80:97:65:e0:ef:
         11:dc:04:50:f2:02:a9:df:c4:0e:e9:9f:6a:75:9a:b7:37:1c:
         66:a1:0c:ef:33:7f:0c:5a:8c:21:a5:ac:4e:3e:86:7d:52:10:
         58:69:48:2d:46:58:6f:90:ee:d2:6e:48:a6:54:37:d0:59:15:
         90:26:73:7d:fa:a1:e8:d9:6b:12:f7:2c:f7:89:36:c5:a7:83:
         ee:d4:67:f9:b3:15:29:0a:6c:02:a3:3c:5d:68:32:c5:bf:2a:
         93:a3:98:7b:75:0e:2b:19:0e:49:52:df:bf:7d:89:3f:70:3a:
         0e:84:52:21:0e:9a:59:f4:32:f8:5f:85:18:4f:c6:23:de:61:
         e4:1a:82:86:54:41:dd:6b:6d:44:d0:f9:03:a1:85:32:63:07:
         79:a8:94:dd:ba:b0:8d:ae:47:a8:f3:50:a7:45:61:ac:4a:21:
         52:e5:fe:17:ed:2a:59:5d:52:e2:b8:1f:1f:39:92:dd:ab:a4:
         8c:75:13:51:c9:8b:61:dc:c2:84:ca:39:9c:24:37:e3:46:1e:
         4e:15:0f:07:5b:b8:8a:04:b8:22:cc:1c:65:4d:14:ef:be:3b:
         e7:56:11:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:04:54 2024 by rpki-client on console-fra.rpki-client.org