Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/ea2d15c1-5abe-33cf-a92e-c8e4859613a4.roa
File:                     ea2d15c1-5abe-33cf-a92e-c8e4859613a4.roa (raw, json)
Hash identifier:          /r5qBtqkVihp1LoP9iB/xp8eXFRAy6Yed9Dif1Xel7Y=
Subject key identifier:   9C:24:02:E0:73:37:9C:D8:D5:59:3B:A3:1E:BC:D7:0D:29:06:69:3E
Certificate issuer:       /CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002
Certificate serial:       010D0C9F432858473095E7BD951ABAF9D7D4AA80
Authority key identifier: D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/ea2d15c1-5abe-33cf-a92e-c8e4859613a4.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        76.76.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:e7:bd:95:1a:ba:f9:d7:d4:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=7deb4a1a-7bf8-4b61-94fb-24d2e54caaf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f0:db:bc:cf:d2:db:71:94:4b:89:5d:cd:f8:
                    b1:e7:10:d9:1b:c6:38:23:25:2d:ba:49:c8:2b:5d:
                    12:05:bb:51:66:71:ef:8c:6a:9c:2e:aa:d8:ef:4f:
                    20:45:1f:e7:5d:e6:b3:7f:47:52:5d:fe:e9:68:77:
                    41:e2:63:60:19:59:06:ee:c1:2c:9a:99:af:0a:ce:
                    06:4d:5e:f6:62:36:5a:4f:09:44:f1:c7:7d:66:b2:
                    5f:49:e9:a5:d5:a9:2b:9d:6a:a4:30:4f:82:1f:e6:
                    fb:fa:fa:cf:9d:a9:93:7b:c6:0c:60:39:8d:28:f0:
                    2d:c5:97:40:b0:56:da:4f:6b:50:3c:2c:5e:ca:f8:
                    80:c5:ee:b8:6f:fa:33:2f:e8:5b:39:1b:10:c0:77:
                    39:4f:15:f7:59:ac:e2:a2:f5:a5:fd:ca:79:e6:4b:
                    6c:89:5d:0d:da:d5:e8:4e:1d:4a:2b:97:c8:22:fd:
                    de:25:b8:c8:97:b5:5d:ca:50:2a:ab:a6:05:48:a2:
                    06:45:72:08:b4:bb:a7:73:2d:26:33:6b:ca:9b:01:
                    7f:9d:df:5c:fe:63:39:d9:29:09:e7:9c:95:23:a8:
                    0b:d9:68:d0:b1:1b:85:26:d2:09:85:c5:18:f1:65:
                    2a:8a:ea:a4:96:79:cb:88:10:8d:00:03:4d:86:9a:
                    69:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:24:02:E0:73:37:9C:D8:D5:59:3B:A3:1E:BC:D7:0D:29:06:69:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/ea2d15c1-5abe-33cf-a92e-c8e4859613a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl

            X509v3 Authority Key Identifier:
                keyid:D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.76.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:85:e4:df:1b:9a:14:a4:c5:f2:a4:e5:14:c9:41:b6:0d:12:
         9e:70:c5:93:63:77:cd:88:88:1a:ee:18:6d:fa:43:0e:2e:b8:
         d1:74:37:06:f7:51:06:51:25:d5:98:b0:55:b7:02:91:0d:3e:
         4e:11:c8:e8:39:78:03:e6:e4:58:1f:89:8e:28:40:8c:af:ed:
         db:d5:87:45:d4:c1:66:7a:99:64:c7:88:5c:99:a6:69:c8:f8:
         6e:3c:a6:3f:1c:5e:0e:c1:a4:db:d9:a7:d9:c9:44:92:3a:f1:
         6f:14:99:0c:ab:ff:38:96:57:34:c4:c7:85:c0:02:9e:17:c5:
         83:dd:43:12:af:50:99:78:86:d5:f2:2f:e9:08:07:30:5e:35:
         63:2f:2f:04:6b:43:ba:48:3e:9e:a0:dc:ba:93:09:ab:8e:fe:
         7a:16:0f:77:65:b3:6c:79:67:0b:bf:41:ea:7b:13:53:6a:c6:
         5e:69:b5:a8:28:c5:ec:24:5a:f2:41:71:41:98:1b:45:59:e3:
         d0:32:a8:35:75:f2:47:40:08:d9:18:0a:25:ad:79:1b:e2:7b:
         fd:38:fa:a3:a1:80:ea:d4:fe:16:4c:06:83:57:57:01:cb:a1:
         85:0e:84:86:ec:54:78:fb:aa:60:1f:6e:ae:18:95:63:33:f0:
         81:74:ed:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwlee9lRq6+dfUqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQ1YTFmYzctYzg1NC00YmYxLTgyZGQtODg1YmZjY2Qy
MDAyMB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk
N2RlYjRhMWEtN2JmOC00YjYxLTk0ZmItMjRkMmU1NGNhYWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfDbvM/S23GUS4ldzfix5xDZG8Y4IyUtuknI
K10SBbtRZnHvjGqcLqrY708gRR/nXeazf0dSXf7paHdB4mNgGVkG7sEsmpmvCs4G
TV72YjZaTwlE8cd9ZrJfSeml1akrnWqkME+CH+b7+vrPnamTe8YMYDmNKPAtxZdA
sFbaT2tQPCxeyviAxe64b/ozL+hbORsQwHc5TxX3WaziovWl/cp55ktsiV0N2tXo
Th1KK5fIIv3eJbjIl7VdylAqq6YFSKIGRXIItLuncy0mM2vKmwF/nd9c/mM52SkJ
55yVI6gL2WjQsRuFJtIJhcUY8WUqiuqklnnLiBCNAANNhpppcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJwkAuBzN5zY1Vk7ox681w0pBmk+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVh
MWZjNy1jODU0LTRiZjEtODJkZC04ODViZmNjZDIwMDIvZWEyZDE1YzEtNWFiZS0z
M2NmLWE5MmUtYzhlNDg1OTYxM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQ1YTFmYzctYzg1NC00YmYxLTgy
ZGQtODg1YmZjY2QyMDAyL2M0NWExZmM3LWM4NTQtNGJmMS04MmRkLTg4NWJmY2Nk
MjAwMi5jcmwwHwYDVR0jBBgwFoAU0wvQYxi8h42RKjqIclQ23U+MRZwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVhMWZjNy1jODU0LTRiZjEtODJkZC04ODVi
ZmNjZDIwMDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATEwRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2F5N8bmhSkxfKk5RTJQbYNEp5wxZNjd82IiBruGG36Qw4uuNF0Nwb3
UQZRJdWYsFW3ApENPk4RyOg5eAPm5FgfiY4oQIyv7dvVh0XUwWZ6mWTHiFyZpmnI
+G48pj8cXg7BpNvZp9nJRJI68W8UmQyr/ziWVzTEx4XAAp4XxYPdQxKvUJl4htXy
L+kIBzBeNWMvLwRrQ7pIPp6g3LqTCauO/noWD3dls2x5Zwu/Qep7E1Nqxl5ptago
xewkWvJBcUGYG0VZ49AyqDV18kdACNkYCiWteRvie/04+qOhgOrU/hZMBoNXVwHL
oYUOhIbsVHj7qmAfbq4YlWMz8IF07eQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:49 2024 by rpki-client on console-fra.rpki-client.org