Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6cd01666-ecd1-3d7b-9bec-87f448307c77.roa
File:                     6cd01666-ecd1-3d7b-9bec-87f448307c77.roa (raw, json)
Hash identifier:          4Ns4GzXal/TNMWZII26FaNv39Iz7N40TLpu8NJ8K4eU=
Subject key identifier:   11:0B:3C:33:BF:EF:09:D5:53:75:1F:A5:88:BC:58:C0:7D:3C:8F:F8
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858486C2B300A7FE352FEA24C0680
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6cd01666-ecd1-3d7b-9bec-87f448307c77.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     395717
IP address blocks:        76.191.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:30:0a:7f:e3:52:fe:a2:4c:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=d6e99314-359f-43ff-ab6d-258493e37c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b0:0a:90:cb:82:76:fa:b1:6a:f3:c3:54:68:
                    1b:0c:cc:99:72:64:09:d4:0c:d5:85:d7:9b:42:db:
                    5e:7e:00:54:34:42:25:48:a1:36:1f:95:7c:af:40:
                    d8:68:9e:21:b1:15:db:76:68:8c:e4:91:37:aa:9d:
                    e2:3e:43:09:ff:1d:6b:30:6b:77:67:0d:fc:c2:92:
                    25:3b:4a:48:4b:68:57:c1:f5:39:7b:2f:36:fb:1a:
                    c6:9e:ec:d3:1c:5c:bd:7a:f0:06:69:bb:79:47:77:
                    90:61:33:d9:e1:de:a2:db:4d:5d:70:93:25:10:e1:
                    b6:df:d1:9f:56:5e:b9:30:b0:06:c7:46:54:6f:c5:
                    07:24:52:c0:81:4f:a2:4e:be:01:d4:02:9e:5c:bb:
                    4a:e8:78:ac:8d:8c:a1:af:28:c5:ce:53:de:f5:cf:
                    d1:0c:ea:cb:80:6a:25:09:62:1a:bb:04:bb:c6:cb:
                    a5:58:7a:19:15:d6:12:d3:ed:f2:f0:4c:e9:64:f7:
                    33:96:9d:ec:a2:11:22:66:38:a7:10:64:2d:a1:67:
                    a7:ef:4d:a9:ea:1b:f7:51:0d:ec:0d:d1:c5:69:05:
                    b4:2e:ac:2e:b3:e7:15:ac:4d:94:88:a4:fa:f3:d0:
                    4a:93:78:57:0e:2b:3b:5e:cc:e9:62:cd:9a:b0:f8:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0B:3C:33:BF:EF:09:D5:53:75:1F:A5:88:BC:58:C0:7D:3C:8F:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6cd01666-ecd1-3d7b-9bec-87f448307c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.191.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3a:b7:93:3b:9e:03:87:5c:ce:7c:6b:cd:79:9e:43:98:51:
         09:13:ac:10:bc:13:55:9f:fe:82:a3:34:0e:a3:79:0f:b7:c4:
         47:fe:fd:18:e8:fb:e1:0d:33:b6:75:3d:23:7d:bc:fc:eb:49:
         08:10:35:fa:11:7c:41:9a:0a:35:e2:dd:11:3b:74:9a:db:f7:
         86:20:be:48:b1:16:e3:00:f9:2e:ac:89:ff:bb:27:bb:8b:45:
         2c:f0:9b:0a:ef:3e:dc:bf:a5:88:48:55:56:40:d1:15:dd:15:
         6b:09:a6:25:f9:ff:0d:1a:e4:0c:76:95:df:24:e9:b5:8e:90:
         c5:b0:72:39:af:6f:e1:fd:17:ce:8e:cf:af:74:ae:b2:39:2c:
         48:bf:74:ad:a7:07:f5:1e:3a:28:b1:98:2f:5d:58:7d:75:a1:
         0a:93:53:ee:a6:b0:11:79:39:ad:4e:d8:f1:0f:6e:13:78:d8:
         2e:50:66:cd:53:0a:96:84:d2:39:7a:b1:ab:10:5b:14:59:9d:
         b1:3b:da:0d:69:34:45:dc:db:be:4c:80:ea:9c:c4:8c:d1:db:
         13:d2:26:b0:1d:3e:ec:c4:30:80:07:32:32:8c:76:7c:94:3f:
         8a:24:4f:cd:4c:0d:27:bd:ec:2f:e4:65:37:40:d6:39:6f:fe:
         f2:25:41:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:38 2025 by rpki-client