Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/9bf3e49c-6067-3365-ba1d-b9f1536bb7ef.roa
File:                     9bf3e49c-6067-3365-ba1d-b9f1536bb7ef.roa (raw, json)
Hash identifier:          MvmHOVhue4UWsLLkyHXMtonRSQ4Y3LuxucyjB5QBcl0=
Subject key identifier:   17:85:8C:60:0D:F2:EA:71:6A:AD:EE:65:70:09:1E:23:0A:8C:90:D0
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285847EBBF7F0FD2AAE29710AC8540
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/9bf3e49c-6067-3365-ba1d-b9f1536bb7ef.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     55293
IP address blocks:        103.72.76.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:7f:0f:d2:aa:e2:97:10:ac:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=3509799d-0894-4c75-b2b1-415c99f992c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:44:97:e7:8f:89:9a:7e:0d:72:c7:61:f6:88:
                    5b:cd:76:c2:71:3c:c7:7f:75:e8:7a:37:3e:9b:c2:
                    e2:3b:28:a1:e9:4b:c3:db:48:ce:1f:ff:c0:e3:06:
                    66:3d:f3:2d:23:2d:0d:72:9c:b7:be:a8:ff:ca:f4:
                    ec:a2:fb:2a:19:bf:41:53:a2:2e:25:e2:68:45:b4:
                    13:6b:96:f7:ab:89:19:fe:de:92:d7:f7:ef:0b:fd:
                    3c:31:56:b8:72:c1:23:39:a7:99:b5:d9:d0:49:6f:
                    f6:ff:9d:0c:15:12:a1:de:58:fd:6b:5a:a5:d2:b5:
                    2a:b0:33:82:fe:58:53:d6:b8:8b:60:ea:8c:7e:09:
                    63:75:a7:10:1c:43:b5:52:42:16:f9:52:47:01:d4:
                    8d:62:ea:59:ee:a2:18:9d:b5:1e:05:6a:8f:01:94:
                    2d:0e:50:9c:9c:b6:93:dc:61:20:36:e7:53:4c:99:
                    58:75:60:00:12:a4:15:ed:3a:e8:b3:ef:c3:07:11:
                    88:c4:9b:1e:4b:17:6a:9a:13:13:84:a8:46:f5:c3:
                    e0:94:52:7e:9e:03:f6:3a:8b:f1:63:1f:5c:a3:dd:
                    2d:b9:31:58:27:3c:9e:3e:84:cc:dc:68:53:fb:90:
                    95:18:1c:8f:d5:45:7e:ff:ba:3f:55:5e:f5:4f:a3:
                    ea:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:85:8C:60:0D:F2:EA:71:6A:AD:EE:65:70:09:1E:23:0A:8C:90:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/9bf3e49c-6067-3365-ba1d-b9f1536bb7ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d5:64:c0:04:dd:2e:2e:17:d8:4c:0b:6b:e9:56:86:0f:d1:
         38:97:02:6b:f9:0c:dc:cf:07:9e:d4:c5:53:54:fe:02:b0:f9:
         82:de:2f:7b:4f:42:2a:bc:43:b0:44:3a:7a:46:3e:db:d3:2c:
         5e:57:6f:89:98:a8:d3:96:8e:e4:b9:2a:0e:2f:f7:65:5b:e3:
         96:31:10:89:e5:c8:b5:b5:e6:10:da:a1:8e:2b:92:f3:60:bc:
         2b:d1:48:19:7a:aa:2b:25:b4:e8:9d:5a:58:05:47:ec:be:32:
         19:2e:f8:2a:21:12:2b:b4:29:9d:70:be:21:53:07:e8:96:5e:
         7e:da:50:63:96:92:d0:12:77:22:fb:6d:01:fd:cc:61:4b:f3:
         1a:e8:d1:ff:84:15:01:f5:c3:6c:f9:06:c9:99:35:ab:b6:94:
         38:f2:22:8d:d8:82:e9:8e:c2:5a:2d:26:ea:3f:71:c9:2b:60:
         9b:7e:00:75:8e:39:e2:4a:a4:d5:6b:f0:ab:4d:42:7d:77:d7:
         ed:a8:fa:fe:75:bd:25:df:bf:40:45:3c:b6:d3:f4:1c:1f:d8:
         f5:5a:54:32:68:5c:13:58:3f:1e:21:ac:e6:21:87:91:70:1b:
         c9:48:59:d2:77:49:c0:a3:ce:7f:39:95:97:c2:26:cf:be:6d:
         14:d1:2c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:00 2024 by rpki-client on console-ams.rpki-client.org