Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/48cc5098-b9ab-3fe5-8f52-f944b864b648.roa
File:                     48cc5098-b9ab-3fe5-8f52-f944b864b648.roa (raw, json)
Hash identifier:          Bv+2zLhaFvsxc6mMrWnvQcHoW1oOSSfUlaaUpWyCTks=
Subject key identifier:   E1:16:B0:EC:97:CB:35:AF:4B:D3:31:B3:83:3D:A8:15:18:B2:F8:BE
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285844EED0013E99713204B534FA40
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/48cc5098-b9ab-3fe5-8f52-f944b864b648.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     11404
IP address blocks:        76.14.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:d0:01:3e:99:71:32:04:b5:34:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=fb9bdacd-cc3c-438e-a2a0-e84521db2043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:35:bf:9a:7c:80:ab:5e:c5:3f:69:1e:ab:
                    41:51:ef:6f:35:e9:bd:3e:7c:c1:f1:ab:6a:65:21:
                    bc:ed:20:5a:75:3b:5d:46:1d:74:ca:0c:07:fe:88:
                    a5:4e:09:fd:a2:9c:46:d7:68:62:a6:81:a4:79:5d:
                    c3:e6:ab:c7:db:45:59:5a:c6:5a:bd:33:57:c3:03:
                    a7:9c:5e:04:61:1a:af:e1:0c:d1:fd:1b:77:7e:79:
                    14:bb:89:b1:2a:18:76:32:c7:3b:45:88:f9:c2:0b:
                    b4:3a:85:c8:a4:dd:45:6b:8b:de:2f:92:22:ee:d2:
                    b0:f9:50:eb:fb:cf:d2:4c:3a:f0:2e:89:68:03:b7:
                    7b:c8:e9:e4:eb:9c:8a:62:ae:62:4f:f2:d5:33:4b:
                    da:d6:6d:28:14:a3:45:4e:42:aa:2a:05:2e:df:f1:
                    d7:7b:4e:e8:0b:98:4c:b0:2c:4c:78:a2:51:62:c3:
                    74:d8:89:d6:62:de:b3:f5:98:aa:ed:51:be:76:42:
                    c6:70:bc:d4:2b:29:24:5d:de:0a:11:ec:34:fa:de:
                    a4:34:99:ff:67:a8:64:5e:27:54:31:7e:85:35:e2:
                    17:1a:0c:c5:96:62:36:cb:98:13:75:56:a8:99:da:
                    22:a8:b3:da:a8:80:f3:be:72:34:cf:05:33:fc:9b:
                    31:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:16:B0:EC:97:CB:35:AF:4B:D3:31:B3:83:3D:A8:15:18:B2:F8:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/48cc5098-b9ab-3fe5-8f52-f944b864b648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.14.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:60:93:91:3d:53:10:f2:d7:2c:26:1f:16:31:76:49:13:52:
         99:4a:9d:16:45:d1:a1:06:ba:91:27:ab:92:23:8b:f8:20:fb:
         b8:ae:b7:5f:13:44:6f:45:b1:3d:fe:4f:10:19:2e:c9:8d:c4:
         81:e1:fd:66:4b:09:8c:2d:19:ee:23:1b:0c:97:d1:5b:81:9f:
         72:c8:4b:13:2d:e4:cc:a3:6a:94:70:e1:b5:6c:bb:88:e8:80:
         cf:c8:22:eb:53:f1:ea:f5:e7:53:35:1c:e0:85:a1:72:26:86:
         c8:11:4c:be:9c:17:ff:ae:1a:04:6d:f1:3d:cf:72:61:4a:f7:
         60:06:de:36:de:aa:cb:48:9e:42:2d:10:47:80:4d:d6:7e:8c:
         a1:f5:78:4e:b7:f3:7a:31:32:2f:51:73:08:91:3e:92:aa:28:
         3b:c8:b0:ce:e1:b5:68:24:c3:22:d1:08:99:1d:73:7a:5a:7a:
         12:5b:1b:8c:f0:4e:f8:5c:a1:0e:c7:db:f2:2c:56:ff:fd:bf:
         f0:36:3f:8d:08:aa:49:06:02:c2:ad:bd:56:7c:8f:af:9b:8b:
         b2:59:cc:ff:d0:50:8c:ba:10:3c:12:42:34:49:86:f1:7c:c3:
         4f:b0:d5:a1:8e:7b:40:f1:c8:5a:20:10:11:55:94:12:95:7b:
         07:85:c5:da
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWETu0AE+mXEyBLU0+kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk
ZmI5YmRhY2QtY2MzYy00MzhlLWEyYTAtZTg0NTIxZGIyMDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcM1v5p8gKtexT9pHqtBUe9vNem9PnzB8atq
ZSG87SBadTtdRh10ygwH/oilTgn9opxG12hipoGkeV3D5qvH20VZWsZavTNXwwOn
nF4EYRqv4QzR/Rt3fnkUu4mxKhh2Msc7RYj5wgu0OoXIpN1Fa4veL5Ii7tKw+VDr
+8/STDrwLoloA7d7yOnk65yKYq5iT/LVM0va1m0oFKNFTkKqKgUu3/HXe07oC5hM
sCxMeKJRYsN02InWYt6z9Ziq7VG+dkLGcLzUKykkXd4KEew0+t6kNJn/Z6hkXidU
MX6FNeIXGgzFlmI2y5gTdVaomdoiqLPaqIDzvnI0zwUz/JsxbwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOEWsOyXyzWvS9Mxs4M9qBUYsvi+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNDhjYzUwOTgtYjlhYi0z
ZmU1LThmNTItZjk0NGI4NjRiNjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMATA4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZGCTkT1TEPLXLCYfFjF2SRNSmUqdFkXRoQa6kSerkiOL+CD7uK63XxNE
b0WxPf5PEBkuyY3EgeH9ZksJjC0Z7iMbDJfRW4GfcshLEy3kzKNqlHDhtWy7iOiA
z8gi61Px6vXnUzUc4IWhciaGyBFMvpwX/64aBG3xPc9yYUr3YAbeNt6qy0ieQi0Q
R4BN1n6MofV4TrfzejEyL1FzCJE+kqooO8iwzuG1aCTDItEImR1zelp6ElsbjPBO
+FyhDsfb8ixW//2/8DY/jQiqSQYCwq29VnyPr5uLslnM/9BQjLoQPBJCNEmG8XzD
T7DVoY57QPHIWiAQEVWUEpV7B4XF2g==
-----END CERTIFICATE-----
Generated at Thu May 2 22:30:40 2024 by rpki-client on console-ams.rpki-client.org