Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/eb4fb844-1dce-32b3-94cb-1460c072d21d.roa
File:                     eb4fb844-1dce-32b3-94cb-1460c072d21d.roa (raw, json)
Hash identifier:          WVRJ9var7kS6g2OcmG35OMK3sRW3IfmVQ0op5Y4D/hQ=
Subject key identifier:   BC:48:A9:2C:AE:DA:00:C3:28:AC:D3:9C:8B:24:3E:9F:5C:23:01:54
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F432858474420B5D0B77ED3F4FEABA380
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/eb4fb844-1dce-32b3-94cb-1460c072d21d.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     10929
IP address blocks:        204.147.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b5:d0:b7:7e:d3:f4:fe:ab:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=c487424a-0b5d-4af9-b865-ac3004b0f7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:6b:75:84:ba:3a:f8:13:e1:c4:85:98:13:
                    55:d6:04:8c:3c:c5:08:ad:ae:cc:47:3f:61:4a:5e:
                    01:77:6a:3d:be:77:bf:b4:f9:5c:48:84:5f:02:df:
                    2b:15:ae:1a:1e:bf:e4:b4:90:2f:9b:91:03:68:f7:
                    d7:ad:cb:10:ef:93:b5:95:a6:32:29:f1:d1:8f:5e:
                    aa:2c:a8:03:25:df:14:d9:99:ba:7e:da:5f:30:32:
                    7c:5a:c8:72:8d:72:4d:ef:ca:a9:c4:a1:25:c1:b6:
                    6d:a8:19:e8:a1:0d:4d:c4:54:99:17:d9:4a:f7:a7:
                    a3:74:08:97:2e:b4:63:9d:83:8b:69:93:a9:14:46:
                    47:26:94:06:5c:20:ff:ac:ac:2c:a0:5b:4c:04:f6:
                    b1:d5:fe:99:08:e7:80:8b:91:70:76:b0:88:55:0a:
                    f6:db:74:ab:8d:a3:f0:89:0d:00:c7:4d:a3:b6:91:
                    6a:e2:d8:14:f3:c6:69:2f:8f:4b:cb:52:21:b5:71:
                    d5:01:3a:25:80:b2:a3:76:e1:39:db:51:c7:f1:82:
                    e3:a5:d0:58:4d:27:37:b0:76:cc:85:e4:c3:ac:d2:
                    07:99:75:d0:63:92:70:73:51:0d:46:05:cc:7d:26:
                    45:0a:b1:bb:53:7b:84:35:bf:b9:09:8c:38:0c:9c:
                    bf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:48:A9:2C:AE:DA:00:C3:28:AC:D3:9C:8B:24:3E:9F:5C:23:01:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/eb4fb844-1dce-32b3-94cb-1460c072d21d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.147.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:36:09:b9:c4:da:78:f8:b7:89:aa:0a:5d:3e:d9:d5:4a:5d:
         69:1c:c5:70:a5:81:dd:9e:5c:ce:b8:66:5e:24:ab:f3:02:a9:
         26:db:ce:a6:36:fc:15:0d:ce:4b:ea:35:2d:fb:56:f1:18:3d:
         15:e0:90:ba:0e:28:20:d5:6a:16:3c:be:6d:70:8b:82:39:db:
         72:a9:52:77:60:b7:71:2b:8d:8e:84:4a:ee:83:b1:17:21:1f:
         6b:34:29:73:d4:ba:46:ff:98:31:7a:f7:fa:65:00:7e:57:22:
         6e:b0:21:41:ec:a8:2c:c7:7c:d9:99:cd:e1:d4:7a:c0:1e:f8:
         be:10:5e:a1:48:d4:3c:b2:3f:26:6a:b6:de:19:c9:2a:7f:9f:
         9c:11:66:29:f7:21:6c:18:dc:8c:5e:1a:8f:ac:7a:53:8d:a9:
         b7:35:20:58:10:b6:17:4d:bd:c4:37:1a:88:bc:54:49:21:f5:
         d2:2e:ad:55:f6:ba:47:67:f2:73:6e:c9:a8:09:8a:10:ec:7a:
         94:db:d9:0f:2c:71:e6:3b:77:70:c7:4e:7d:36:d2:09:1b:91:
         cc:df:fc:30:04:74:8f:4d:be:2e:86:1f:c2:d0:49:df:df:e2:
         18:b7:53:00:08:79:96:9f:20:fd:d4:2b:8f:11:6a:c4:1f:35:
         1d:2a:53:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:28:09 2024 by rpki-client on console-fra.rpki-client.org