Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/38c516e0-b8b7-3afc-842c-2f4b02291422.roa
File:                     38c516e0-b8b7-3afc-842c-2f4b02291422.roa (raw, json)
Hash identifier:          uP7U8tHti41G/XtvREPHWEOkHwfw7Yagd/e98QRO4C4=
Subject key identifier:   D5:D8:C4:10:91:29:03:6F:FE:B0:52:29:70:2F:4A:A6:60:51:CB:79
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DCBCB3B7B
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/38c516e0-b8b7-3afc-842c-2f4b02291422.roa
Signing time:             Mon 14 Oct 2019 19:42:36 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        199.73.32.0/21 maxlen: 21
                          192.217.0.0/16 maxlen: 16
                          192.147.160.0/21 maxlen: 21
                          199.73.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:cb:cb:3b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=573334ce-c577-43a6-a11c-465bfadb5373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:73:be:b2:ce:8d:28:74:14:e9:a7:bb:5c:
                    d6:a2:b0:51:ed:f7:f8:91:22:96:fa:a6:76:a6:10:
                    0a:0e:9d:c5:60:3d:de:67:5b:94:34:66:7d:ee:c1:
                    59:52:88:47:6e:1c:ae:51:e5:f8:b7:79:b5:fc:50:
                    ed:3c:8f:2e:dd:c1:f1:9f:60:da:9c:5f:97:43:fa:
                    bf:c3:e2:8c:d1:dd:3a:06:e7:20:bd:0c:c7:a5:98:
                    8c:b9:0f:c4:2d:b3:0e:5b:84:4a:14:ed:97:50:22:
                    8b:31:46:08:93:da:4a:c4:c0:cd:35:67:9f:12:27:
                    cc:c8:b4:9a:61:1b:9e:f8:95:fa:c6:52:b0:fd:bb:
                    65:af:61:25:2a:0a:93:e4:13:e4:b1:2a:6d:84:ba:
                    7c:d7:ed:02:d9:33:51:a9:60:15:c6:d8:47:c8:3f:
                    d3:34:d9:89:02:09:76:39:22:ee:e6:54:74:2c:21:
                    b1:37:9e:a0:5b:3a:8d:58:2c:fb:52:e9:01:e4:b1:
                    60:a1:14:6b:6d:9c:be:19:68:c8:16:c3:43:94:84:
                    75:70:13:58:b9:68:bb:3e:08:8d:23:77:af:4d:7f:
                    4c:a4:23:25:a9:65:9a:a3:03:ae:1d:83:95:36:56:
                    a4:c8:0b:f4:5f:3e:ae:2c:16:f0:d4:b8:33:4c:1a:
                    f3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D8:C4:10:91:29:03:6F:FE:B0:52:29:70:2F:4A:A6:60:51:CB:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/38c516e0-b8b7-3afc-842c-2f4b02291422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.147.160.0/21
                  192.217.0.0/16
                  199.73.32.0-199.73.41.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:d3:77:8a:af:77:e9:5f:f0:e6:03:9e:8f:01:79:dd:31:0d:
         40:3d:18:59:2c:97:4e:72:1c:39:06:fc:3a:74:97:64:b9:64:
         01:9a:a9:bd:62:bd:dc:8a:bf:2b:4b:f3:70:ee:3c:a5:49:43:
         d0:51:61:ad:c8:fc:ff:1e:fd:7b:e4:05:25:6d:15:1d:73:29:
         34:57:6d:27:dc:ce:7e:61:ef:53:51:96:db:c9:2d:24:e6:09:
         32:56:d2:8b:7d:ab:b0:dc:85:32:a3:42:97:d4:3c:6d:45:9a:
         25:3f:28:7a:c3:0e:76:86:6a:09:51:a0:7b:88:43:08:98:ba:
         f9:e3:86:d1:1a:23:b3:e9:a1:8b:24:e2:f6:a3:36:29:7a:38:
         8d:36:3a:05:7e:df:e1:cc:66:fc:b7:78:0c:3a:26:3b:ac:34:
         41:0d:98:2a:48:cd:fa:d8:da:37:21:c3:da:ad:5c:83:02:3b:
         ca:8f:f0:ab:69:a2:b8:c8:2b:c9:1d:0a:e7:23:5d:54:61:e3:
         c9:33:09:27:47:84:84:94:26:a7:bb:74:b5:ed:be:56:40:25:
         60:6e:57:fb:99:6a:97:a4:6d:80:3d:72:86:3a:40:b6:c4:64:
         54:2f:3d:39:00:9c:85:b9:22:ae:00:f2:af:40:14:f4:c7:af:
         66:1e:98:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:02:03 2024 by rpki-client on console-ams.rpki-client.org