Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/622fba5a-faa9-3db5-8070-7f458a1b77ec.roa
File:                     622fba5a-faa9-3db5-8070-7f458a1b77ec.roa (raw, json)
Hash identifier:          t8nFQip7K905Aa0kXwKYwIDu5eHWEhHoe7NaYMHEfxc=
Subject key identifier:   E7:79:91:12:6D:3D:6E:89:BE:37:FD:B7:25:00:3E:52:9B:5A:30:04
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F432858452EE7EC94E382E58AC54D4380
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/622fba5a-faa9-3db5-8070-7f458a1b77ec.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     203470
IP address blocks:        134.195.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:ec:94:e3:82:e5:8a:c5:4d:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=1ddf1714-7c4f-4512-8f12-78946fbd5959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:20:9b:0e:ef:3c:7a:67:1d:c0:f2:74:fb:eb:
                    0a:fd:58:c3:bf:7e:02:1e:7e:9a:88:d7:0e:78:f5:
                    3e:af:94:29:12:39:be:da:c4:a6:20:c6:e9:e8:5a:
                    21:a5:61:c5:19:79:06:e3:5a:88:4b:5c:31:80:b1:
                    43:c5:34:3d:20:fa:9c:37:07:7e:9e:6b:80:e9:07:
                    cf:07:a0:34:e6:34:3d:fb:d5:a2:d3:da:b0:1a:3f:
                    4b:70:42:7d:e1:71:0d:0a:ca:c7:12:18:04:e1:75:
                    5d:8a:b0:6f:2d:e3:d5:3d:57:c4:02:ad:00:12:63:
                    09:30:aa:30:af:06:39:dd:ad:d9:4a:a1:ae:c1:95:
                    b6:e2:df:eb:cb:85:24:f8:1d:91:d9:bd:d4:4c:86:
                    f1:17:80:24:d8:80:b0:67:8c:b7:40:f3:0c:8d:ab:
                    cd:28:60:db:44:cb:6f:c6:ef:3e:2b:c9:95:a6:ce:
                    a4:3a:86:f6:c6:26:a0:b2:4b:9c:ff:60:d2:c2:85:
                    e7:ba:03:9e:58:c7:5e:34:7e:c3:02:24:8b:86:25:
                    ac:42:93:c5:b9:2d:80:c2:dd:22:56:fb:5b:68:f6:
                    a1:46:d2:d4:4c:ec:6a:04:5b:13:2b:cc:14:31:c4:
                    b0:63:14:1b:4b:98:a3:a5:07:ef:7e:6b:f9:22:2c:
                    c4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:79:91:12:6D:3D:6E:89:BE:37:FD:B7:25:00:3E:52:9B:5A:30:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/622fba5a-faa9-3db5-8070-7f458a1b77ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:45:43:62:0a:83:89:ad:17:a7:bc:e9:c5:30:8a:71:89:19:
         18:ea:45:f7:c9:80:e5:3f:65:d0:fb:35:80:f1:ec:e3:0b:be:
         73:eb:16:99:88:d5:c4:b2:84:5c:22:8e:b9:a9:36:29:81:6b:
         c0:3a:6f:bc:3c:4e:f9:44:14:e6:9c:58:7e:1d:b3:72:e8:d3:
         4d:dd:c3:da:f5:3b:a0:95:6d:9f:22:e9:4c:96:be:a6:5d:c0:
         b6:2f:a8:7c:02:51:f9:cc:5e:fa:2b:4e:38:37:be:66:5e:05:
         5c:ef:ca:4b:03:f4:21:a6:2a:b3:56:ea:e1:8d:88:2f:6c:a5:
         b1:62:d6:7a:27:e7:36:dd:3b:80:d3:5d:32:85:44:82:d1:c0:
         fe:2d:44:37:54:56:55:08:f4:bd:78:a9:6f:ee:41:e3:c2:05:
         28:c6:78:07:01:77:ba:a4:53:80:87:92:2c:81:b7:49:6f:bb:
         da:b5:9d:29:a3:a0:45:1e:68:24:0c:38:6f:18:aa:53:82:99:
         74:6f:34:f8:6c:ca:a8:89:52:37:5c:27:0c:75:61:f1:64:d0:
         3d:d4:ea:89:77:ab:60:3f:b7:c0:2e:92:54:8e:34:4e:81:d7:
         09:ba:ba:24:22:cf:7c:39:10:0b:60:c5:72:dc:1c:ca:1a:3a:
         a2:2a:15:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:55:05 2024 by rpki-client on console-fra.rpki-client.org