Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fef14402-f27e-3060-8f41-ab82044fdabe.roa
File:                     fef14402-f27e-3060-8f41-ab82044fdabe.roa (raw, json)
Hash identifier:          /ty9bBoqoDXnuPwbvCqBYqNtUDBrrRjz1EJwYbeSvT8=
Subject key identifier:   E5:28:AF:26:C8:5A:89:1F:48:03:0B:A3:81:E1:8B:96:2A:42:21:22
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285845840DBC5E836E2714469DD198
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fef14402-f27e-3060-8f41-ab82044fdabe.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     19905
IP address blocks:        103.72.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:bc:5e:83:6e:27:14:46:9d:d1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=ae3a3a29-c6e0-444f-831b-cd283d2578f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7a:08:13:80:88:42:6a:19:4f:29:42:17:04:
                    5a:eb:45:8b:9b:38:97:3b:a9:05:69:f6:c8:39:49:
                    5f:bb:e7:72:6d:96:65:1d:ed:ea:29:99:ca:90:59:
                    22:e3:48:8c:70:5d:85:b8:4d:54:01:ab:f5:72:e1:
                    e4:60:c5:57:b4:b1:ec:a6:45:0c:d3:f2:cb:4c:56:
                    83:de:cb:a8:54:28:ba:0b:c7:d6:33:2f:24:74:44:
                    5e:2e:57:d9:5c:49:ad:03:ed:e4:ad:42:a7:c1:88:
                    98:f4:05:f6:07:2d:33:9f:bd:dc:b8:a1:52:04:3a:
                    b8:34:71:b8:1d:ec:fc:9f:b8:57:e4:07:4a:aa:89:
                    98:aa:15:d1:18:8d:68:fd:2f:0e:40:51:b7:9e:92:
                    5a:ce:61:8b:c0:f2:0f:c1:71:27:70:a0:3c:87:45:
                    35:56:85:1b:36:0e:0c:a9:66:23:6d:55:fc:29:ca:
                    7d:6e:d7:b4:63:7f:13:c2:7c:a9:f8:8b:d5:5b:bf:
                    6f:66:03:27:f1:1b:61:eb:5b:d8:d7:48:28:c3:61:
                    07:39:d8:b6:19:47:91:c6:d6:4b:2a:32:11:7b:1b:
                    7e:ed:f4:22:65:1f:0c:bd:aa:71:36:62:09:bf:bc:
                    bb:b7:2b:01:3f:f9:78:63:f8:5b:a2:a7:c5:35:a2:
                    71:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:28:AF:26:C8:5A:89:1F:48:03:0B:A3:81:E1:8B:96:2A:42:21:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fef14402-f27e-3060-8f41-ab82044fdabe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:41:25:55:94:f9:cc:3b:53:fe:46:e9:ad:3b:87:12:35:32:
         0e:81:59:eb:17:fd:c5:aa:ed:14:dd:09:5c:ca:5a:04:82:38:
         65:9c:37:9d:3c:88:88:a9:3a:64:32:4e:03:9e:10:db:24:fe:
         5c:1f:fd:1a:aa:f7:02:5d:96:e4:06:26:c6:60:0f:dc:4a:ce:
         4b:d9:7d:e4:da:cd:ff:3c:db:f1:07:f9:38:a7:7b:58:e9:43:
         2c:a4:4f:97:69:67:61:2c:d6:fc:39:b8:d6:27:0a:73:13:84:
         21:b6:2c:9f:fa:6a:1a:f2:a4:34:9c:ab:09:5d:96:c4:80:3c:
         3d:95:1a:b4:22:12:4f:b0:be:09:7c:e6:3d:ce:6c:c4:2b:6b:
         74:95:29:39:58:59:0c:05:3e:f8:ef:35:92:8a:0e:8f:76:3a:
         db:44:1d:0a:a5:43:8f:d9:ae:07:ea:46:cb:0f:83:3b:90:29:
         41:be:61:dc:f1:4b:8e:5e:91:e9:60:43:45:74:f5:78:4b:80:
         9f:55:3f:c3:ae:f3:8c:ac:e5:55:67:94:cd:e6:f5:63:eb:ec:
         0e:b3:e0:56:01:5f:e5:43:6f:d1:43:0b:fb:dd:42:d4:5a:d7:
         7f:5c:72:e6:6a:ce:f6:5c:77:24:fd:bd:04:73:58:4d:6d:b5:
         c3:f5:a8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:51 2024 by rpki-client on console-fra.rpki-client.org