Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/2173f68c-b59a-3132-8a96-0bf15dff1b15.roa
File:                     2173f68c-b59a-3132-8a96-0bf15dff1b15.roa (raw, json)
Hash identifier:          dmJWBbztpE3AbCrOfsJMpSn4ua7MywvpI9b50P3qUcA=
Subject key identifier:   D2:D0:DC:5F:53:32:D3:62:3B:DE:A6:7E:9D:B4:E3:72:05:15:38:F3
Certificate issuer:       /CN=77dc753c-bede-4a42-99ae-484402f9795c
Certificate serial:       010D0C9F43285847C1DF57F27CB10C56F0ADE080
Authority key identifier: A1:E7:A3:EA:9E:9C:B6:3D:C9:5D:7D:E3:16:97:55:46:51:9D:20:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/2173f68c-b59a-3132-8a96-0bf15dff1b15.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     399337
IP address blocks:        172.110.176.0/22 maxlen: 22
                          208.81.16.0/22 maxlen: 22
                          216.73.176.0/22 maxlen: 22
                          2606:9340::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:57:f2:7c:b1:0c:56:f0:ad:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dc753c-bede-4a42-99ae-484402f9795c
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=2afd5f66-47bb-40a8-863a-109de10cb2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:f0:d5:ee:2a:ca:0e:69:d1:12:0d:4e:ed:
                    59:fa:1b:fc:d4:7f:96:2b:af:e9:9d:b3:cf:cb:ea:
                    76:e3:75:4b:95:82:be:41:c9:c6:f3:c2:cf:83:95:
                    a3:54:ac:62:6f:17:c5:f3:50:5e:4b:c3:7b:d9:f6:
                    ec:63:9e:ff:95:38:43:ff:4d:1b:6c:42:75:87:10:
                    d4:c6:a1:be:c6:c4:be:a7:98:a1:3e:aa:ab:b6:e1:
                    9f:00:a5:8a:1f:74:6e:52:f2:ec:7f:3b:bb:6b:27:
                    f0:5d:84:c4:8e:29:43:21:8c:d0:43:a4:19:47:28:
                    5e:4b:e8:38:21:3d:3f:d6:d7:fc:64:64:c9:2f:6c:
                    a5:84:15:93:ae:d4:ef:51:2a:d9:31:47:ba:54:be:
                    65:42:c1:e2:bd:af:0a:71:49:a7:b6:fb:a1:8c:c9:
                    59:4e:e1:bc:f9:9d:48:b5:30:21:ff:5a:65:05:d0:
                    a6:30:50:85:64:06:08:20:fa:96:b6:c1:79:2d:36:
                    27:df:70:ad:2c:f0:e9:a2:f6:d7:5c:9b:4d:16:b0:
                    e1:b0:e3:b0:8e:0a:b7:8f:f3:9f:51:2d:e2:59:2b:
                    90:6a:70:e9:29:30:13:31:af:03:8b:39:7b:ce:2c:
                    7e:61:ab:a5:2a:ce:28:75:62:f5:61:92:d1:d2:46:
                    ee:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D0:DC:5F:53:32:D3:62:3B:DE:A6:7E:9D:B4:E3:72:05:15:38:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/2173f68c-b59a-3132-8a96-0bf15dff1b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:E7:A3:EA:9E:9C:B6:3D:C9:5D:7D:E3:16:97:55:46:51:9D:20:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.176.0/22
                  208.81.16.0/22
                  216.73.176.0/22
                IPv6:
                  2606:9340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:60:81:99:46:18:f9:d6:59:2b:f1:ca:e8:06:ff:b9:68:0f:
         0e:f5:a2:d9:71:a9:41:d9:63:f3:77:0c:ce:eb:2c:4d:9f:2c:
         c0:a2:be:bb:fb:5a:0c:f1:a1:f0:5b:64:1b:c8:46:5a:09:17:
         0f:8d:ab:23:6d:ff:6b:68:01:12:37:de:23:b4:db:5b:59:0f:
         ec:76:23:f2:de:2d:96:35:27:23:a3:9b:21:9b:5e:ba:14:67:
         5c:b1:35:49:cf:5a:f9:ab:59:ef:25:6c:60:58:d2:a2:18:06:
         e8:70:ef:58:aa:b3:b6:af:74:90:43:56:9a:46:45:32:56:f7:
         37:7d:3b:51:1f:8d:70:c7:69:3d:dc:93:36:d7:20:c4:54:c9:
         6c:a6:f2:3a:e7:23:ce:17:cd:5e:54:f4:5c:60:c0:73:11:ce:
         35:0f:0d:6e:a3:21:96:8f:78:4c:20:0d:40:a4:b9:78:3a:e4:
         36:5b:4f:b2:84:76:fe:b6:e6:54:77:1f:a0:a1:55:e7:55:cd:
         a5:97:bc:78:c0:40:96:a6:d1:60:b2:a6:d3:9c:05:a1:5a:d8:
         83:d9:19:8b:26:15:f4:33:0e:ac:7b:e2:ef:3e:51:a5:2d:4d:
         c1:79:8b:b7:91:b1:ea:59:5d:cb:50:1e:84:9b:ba:e4:6a:4a:
         20:0e:e9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:07:50 2024 by rpki-client on console-ams.rpki-client.org