Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/8156f173-c530-3489-b066-72053b3b7ac9.roa
File:                     8156f173-c530-3489-b066-72053b3b7ac9.roa (raw, json)
Hash identifier:          QoCqDtDS1L6fauA+jKzS7g9qaMKoka4cISVvS38vqR8=
Subject key identifier:   91:3B:6E:DE:4B:C9:68:6A:D8:1A:3C:6A:1E:F3:96:52:88:B2:99:BF
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F432858457FDDE578A660CCFDE11AA280
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/8156f173-c530-3489-b066-72053b3b7ac9.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     26863
IP address blocks:        104.129.133.0/24 maxlen: 24
                          104.129.132.0/23 maxlen: 23
                          104.129.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:e5:78:a6:60:cc:fd:e1:1a:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=1cec8486-4c88-4643-a7f6-b310baa0931f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:3a:74:8f:a4:e9:9b:c6:2a:03:22:89:ec:
                    22:ef:3f:81:02:69:0a:ae:22:82:25:01:8c:1e:ce:
                    c8:16:dc:ea:b3:e4:86:bc:dd:5a:08:1a:70:f8:d2:
                    83:56:9f:1e:74:21:6c:6c:b7:4a:62:37:2c:0e:c6:
                    ac:ea:41:9f:60:e5:49:4d:c7:e3:47:ab:b7:0c:a2:
                    d2:37:bb:96:59:c6:60:36:81:41:ff:47:dc:b2:b0:
                    23:87:cd:b7:72:40:f8:b3:6b:e1:c4:46:ea:bb:79:
                    da:ab:0d:80:4d:91:07:64:5f:82:81:2a:6d:ec:83:
                    ef:f4:4f:27:ee:95:90:ac:43:f8:08:55:51:1c:1f:
                    5f:eb:e7:d2:c1:c7:a1:ed:c1:95:d2:12:e2:4e:c3:
                    14:7d:d3:ff:3f:4d:07:ab:09:21:74:56:46:f0:0a:
                    b9:8b:a0:bc:e7:b4:97:49:51:89:9c:51:9a:07:4a:
                    fe:6b:67:69:be:a3:e0:2b:4c:8d:8a:65:6e:88:bf:
                    a1:f7:07:40:f3:f3:68:66:eb:d2:92:af:34:ec:68:
                    b9:68:7a:1c:de:65:fb:8f:47:ce:60:e4:8e:d3:6f:
                    f3:c9:3f:de:74:46:eb:98:c4:87:55:b7:e0:a3:74:
                    d3:1a:a8:fe:34:02:23:01:4e:70:92:c4:ca:eb:32:
                    71:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3B:6E:DE:4B:C9:68:6A:D8:1A:3C:6A:1E:F3:96:52:88:B2:99:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/8156f173-c530-3489-b066-72053b3b7ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:80:67:4f:97:62:ed:bf:37:82:81:bf:0b:5d:57:97:6a:dd:
         89:a3:34:bc:dc:35:6f:af:9a:de:ea:b7:2e:07:43:b8:23:3b:
         b7:a8:e2:cc:f5:5b:90:12:f4:b5:8c:86:d9:90:fc:6b:6c:86:
         95:61:7e:c4:1a:65:a6:a0:27:54:fc:08:1d:68:c6:e2:ba:c1:
         35:f8:6a:13:98:4b:b5:52:64:cf:90:42:2f:58:a2:86:53:6f:
         82:22:6c:a3:25:45:4e:2e:d0:33:fd:6a:63:4d:d0:36:f3:f4:
         55:f5:9c:86:37:ee:c7:db:e9:78:98:87:66:4f:ad:3a:73:23:
         4d:a2:cf:6e:5f:0a:01:fb:a5:50:00:36:f7:dd:42:29:f3:71:
         0b:63:13:50:20:85:cb:69:59:08:7d:81:2f:07:a6:09:a2:58:
         03:09:7f:6c:f0:ed:62:8b:2b:22:d2:b0:c7:28:4b:16:59:5a:
         0d:46:b6:0c:f6:7d:78:e0:6b:e7:3e:a3:ac:ec:3d:db:4b:7a:
         9e:10:cd:5b:49:b5:04:75:84:64:54:a7:fb:35:44:3d:42:18:
         2d:cd:fd:6f:94:2d:8a:a8:4d:fa:dd:86:47:c7:33:03:cb:c2:
         f2:c2:07:78:43:bf:de:0b:8b:41:be:91:aa:05:ce:1a:e1:bf:
         80:dd:37:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:36:26 2024 by rpki-client on console-fra.rpki-client.org