Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/05e7d946-4d11-3206-8da5-1ec522ec1910.roa
File:                     05e7d946-4d11-3206-8da5-1ec522ec1910.roa (raw, json)
Hash identifier:          atJuPdvZZPtHvCE89IP+xGUF/3J42wP4vaGzccZ39rQ=
Subject key identifier:   E6:2D:12:3F:79:36:5A:55:A5:68:98:26:C0:ED:E7:FD:CB:A1:B0:FC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285845B0B8AA8DF63C61087A34467C
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/05e7d946-4d11-3206-8da5-1ec522ec1910.roa
Signing time:             Sun 28 Apr 2024 01:00:25 +0000
ROA not before:           Sun 28 Apr 2024 01:00:25 +0000
ROA not after:            Sat 27 Jul 2024 01:00:25 +0000
asID:                     7861
IP address blocks:        209.29.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b0:b8:aa:8d:f6:3c:61:08:7a:34:46:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 28 01:00:25 2024 GMT
            Not After : Jul 27 01:00:25 2024 GMT
        Subject: CN=e3c56d0e-9c05-4c23-9a3d-0bda751064c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:31:96:fe:25:60:da:f3:a9:79:2c:a3:eb:f2:
                    cd:59:1d:ba:87:1e:c6:ae:07:48:a7:42:04:cc:a5:
                    15:f5:df:ac:96:34:1c:2e:7f:60:68:db:eb:e9:39:
                    c6:10:ce:47:5f:06:7c:5a:c5:96:ca:2d:60:1c:f5:
                    83:83:d7:55:c1:d9:ab:a5:93:4e:28:ff:23:62:c8:
                    0b:97:51:0f:20:18:3b:36:59:73:b8:d5:64:95:eb:
                    50:d1:9f:4f:34:15:ab:b5:66:dd:0a:72:ae:1f:6c:
                    7b:b8:46:06:5a:48:36:bc:66:0e:d2:4d:12:62:e6:
                    c7:25:8a:e1:af:27:b2:3f:83:ae:59:25:60:59:1c:
                    3a:cd:81:46:07:a0:8e:e2:75:4c:29:63:dd:f1:32:
                    eb:28:8f:58:29:da:00:59:eb:d5:be:10:56:2c:1b:
                    1d:57:ef:4b:b0:08:da:bc:92:61:36:42:1b:31:8e:
                    e6:6f:8f:48:0b:6f:92:61:64:4c:19:2d:ff:1a:c3:
                    bd:2f:81:56:7d:4a:82:03:94:bd:d0:e8:42:b8:87:
                    84:51:27:20:f1:89:d0:aa:aa:75:dd:d1:2a:de:01:
                    c7:ea:1c:4a:ed:0e:9b:49:3d:51:15:d3:a0:a9:44:
                    6d:18:c4:68:7e:00:ab:50:0e:fa:8c:16:19:8b:ed:
                    dd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2D:12:3F:79:36:5A:55:A5:68:98:26:C0:ED:E7:FD:CB:A1:B0:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/05e7d946-4d11-3206-8da5-1ec522ec1910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.29.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:7f:4a:ac:c1:da:67:12:97:63:cf:5c:1b:22:83:ef:b7:ac:
         f1:be:21:22:ea:ac:60:cc:70:78:53:07:12:e3:9c:dd:33:e1:
         3e:00:8d:7f:1d:68:ef:54:5d:cf:91:9c:05:9b:90:fb:51:1c:
         1c:4e:c6:53:fb:4d:6c:23:b9:5b:a0:61:8f:f3:56:3e:59:24:
         19:7f:1c:2b:54:05:af:24:39:bb:7d:43:23:05:e7:da:76:e5:
         c4:72:67:76:4d:dd:ba:75:05:33:94:03:d7:4e:45:f7:02:03:
         5d:5a:12:65:d2:94:84:ad:f7:43:80:b2:af:c8:c5:a5:89:e5:
         56:3d:d6:c1:22:0c:82:cc:73:5b:9c:81:59:46:c7:14:b7:6c:
         ca:40:84:10:40:32:f3:39:eb:ae:cd:0b:da:17:65:9d:4b:af:
         1d:18:a0:36:66:1c:bf:25:3d:95:a7:79:16:c2:e4:1d:6e:9f:
         7f:db:af:91:a4:ba:42:c7:d6:6d:24:3b:48:4b:fb:02:13:b5:
         8c:af:7a:66:97:4a:96:a2:63:36:9d:95:c5:62:57:38:88:12:
         c9:af:b1:12:75:17:d5:c9:d1:99:ba:15:d6:33:39:d9:9e:ee:
         62:27:80:a3:8c:df:d3:bb:4f:af:e3:22:a9:c2:25:6f:45:1e:
         76:f6:29:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 15:10:10 2024 by rpki-client on console-fra.rpki-client.org