Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c57102d8-3cbd-3865-8113-05facb712676.roa
File:                     c57102d8-3cbd-3865-8113-05facb712676.roa (raw, json)
Hash identifier:          X4BAfn6RTkMlE8KAxq8ZbnoGYrDS5K1x5fTHEiJCm5s=
Subject key identifier:   D1:8C:8F:E1:77:7D:7D:A3:5F:B1:5F:FC:5C:67:0B:0D:08:F6:6D:83
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F43285845068AC5B4A9806F72D7CDD080
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c57102d8-3cbd-3865-8113-05facb712676.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     7922
IP address blocks:        161.129.40.0/24 maxlen: 24
                          161.129.37.0/24 maxlen: 24
                          161.129.38.0/24 maxlen: 24
                          161.129.33.0/24 maxlen: 24
                          161.129.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:c5:b4:a9:80:6f:72:d7:cd:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=d251b194-1316-4bf4-8e34-c6b2d0d5c0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:eb:62:37:64:50:4e:1f:f5:80:fc:5d:3f:
                    79:d4:c3:c6:ce:d4:58:4f:1c:64:a4:be:f5:a7:fb:
                    21:f0:5e:b0:8c:72:bf:53:e0:17:9f:d6:af:39:9d:
                    5d:6b:c8:78:fb:82:bc:7e:1e:fb:16:bf:c1:ea:02:
                    71:1f:97:4f:a2:4c:fb:f4:d7:50:4d:54:ad:83:6b:
                    7e:7b:95:9b:1e:42:45:19:15:44:ab:a1:36:31:13:
                    bf:f9:86:df:53:78:ed:a9:5c:95:80:a1:cd:f1:c7:
                    e2:c8:67:9b:51:38:48:a0:eb:1c:14:d4:82:08:bb:
                    74:ac:ac:33:49:44:cd:16:e7:d6:5f:94:0c:2e:69:
                    a9:6e:ba:b0:5b:22:13:6e:85:ff:c5:9c:a8:11:5b:
                    ab:19:d1:d5:4a:d8:c9:41:9e:2f:da:da:1b:54:52:
                    f5:7d:6c:93:4a:d3:cd:89:ad:35:96:69:cc:ae:e0:
                    64:02:57:c9:71:30:6a:8d:d0:fb:d2:00:33:49:db:
                    c3:2e:47:d0:db:d2:99:bf:b8:34:eb:c0:5c:a6:48:
                    82:07:bb:59:ce:38:07:c8:d5:8c:4f:52:36:23:17:
                    44:3f:c7:c6:e5:22:c8:37:95:59:ab:10:97:98:03:
                    5c:47:11:88:94:50:cd:17:0e:34:fd:94:29:fa:37:
                    dc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8C:8F:E1:77:7D:7D:A3:5F:B1:5F:FC:5C:67:0B:0D:08:F6:6D:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c57102d8-3cbd-3865-8113-05facb712676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.33.0/24
                  161.129.36.0-161.129.38.255
                  161.129.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:6b:b1:f3:86:da:ea:41:4f:0c:09:f6:1d:39:73:4d:18:94:
         24:93:14:53:be:1a:99:ce:1a:73:95:4a:f8:35:55:d7:18:b6:
         32:83:13:cd:38:e2:15:f0:6c:8f:64:ff:d3:f6:61:5d:62:6f:
         a9:40:11:0c:f9:99:d4:3d:14:1f:a6:1a:86:76:ae:8d:d8:b7:
         f7:62:de:a6:93:c8:ea:b5:61:43:ad:7d:67:c0:d8:0e:3d:b9:
         58:d4:ea:f9:75:c9:38:9c:b6:b6:2a:8a:82:ca:bf:f5:a4:e0:
         d7:c2:b2:6c:25:70:7b:40:cd:21:60:8c:a9:16:70:b8:be:c2:
         bb:46:a9:31:e7:f5:22:5a:89:f9:85:13:88:3c:32:3c:08:04:
         93:cf:d7:cb:4f:e9:24:69:e4:7b:31:3a:8a:2f:f2:94:cf:63:
         15:31:1f:a5:2f:e8:be:dc:14:3e:48:55:65:bb:36:6a:92:19:
         49:01:67:cb:bf:b7:07:0a:e7:fc:74:8c:ec:fc:f0:72:78:05:
         79:bf:97:dc:d3:92:98:6c:ac:69:62:15:0c:4b:0d:66:5e:20:
         7e:58:85:a8:b1:23:1c:ff:d2:76:74:48:11:3e:ec:72:d9:f2:
         11:41:77:42:12:b3:ab:5f:7a:74:65:1b:92:ee:fa:78:47:c9:
         78:ab:12:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:32:37 2024 by rpki-client on console-ams.rpki-client.org