Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/eaff245a-576b-320b-a418-9d77a00b9661.roa
File:                     eaff245a-576b-320b-a418-9d77a00b9661.roa (raw, json)
Hash identifier:          qRZQM7VyZWId663+s0xpDjzVRWPHLKrMm3+P4U/9QVw=
Subject key identifier:   79:3A:C1:E3:7B:CC:25:FF:71:97:EE:4F:D6:4A:E2:C1:26:8E:98:0E
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F43285845068ABF3AED9D1E8C8E1BE400
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/eaff245a-576b-320b-a418-9d77a00b9661.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     931
IP address blocks:        161.129.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:bf:3a:ed:9d:1e:8c:8e:1b:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=fc8b3361-2da1-4861-814c-a14608eb3d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b5:bd:9d:16:18:c4:12:85:51:67:af:fe:c5:
                    24:6f:60:b1:15:a6:21:e4:9a:8d:68:2f:a6:42:93:
                    a9:01:14:28:41:2c:7d:ca:eb:d4:6c:51:e7:d8:16:
                    3e:94:e2:f9:78:30:f5:79:4a:d5:c6:b1:e3:7a:83:
                    8a:2a:97:16:a9:e7:76:58:98:b4:b0:d7:9f:a7:cb:
                    a3:3f:13:39:a5:9a:60:57:53:d3:27:16:5c:f4:84:
                    91:97:92:95:1a:c7:de:06:b3:31:64:9d:d3:3a:11:
                    77:89:8f:89:2d:da:53:20:c1:7c:3b:af:8c:30:ad:
                    22:d2:a1:95:f5:38:a7:01:63:c0:18:ae:d4:ad:98:
                    d8:99:40:6e:d1:f4:c8:a3:26:31:8b:b6:b0:0f:4a:
                    12:d6:54:0c:dc:2e:49:ae:f8:60:dd:7d:d8:28:9c:
                    ff:81:5a:c8:da:df:91:a8:af:76:73:08:bc:40:98:
                    67:82:5d:fb:d0:a1:be:3a:0e:25:f4:83:f0:5e:42:
                    ff:7c:24:75:0b:88:01:a7:5c:95:ae:5b:43:ad:29:
                    02:f6:9b:90:b8:a3:be:98:d1:b6:68:1c:93:db:d6:
                    87:cb:fd:8f:3f:ca:43:35:cd:a2:f5:47:94:bc:31:
                    66:53:44:bf:7d:b1:21:75:8e:f3:12:35:ae:de:6c:
                    8e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3A:C1:E3:7B:CC:25:FF:71:97:EE:4F:D6:4A:E2:C1:26:8E:98:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/eaff245a-576b-320b-a418-9d77a00b9661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:1a:6f:cb:7c:09:a6:a7:5e:1f:0e:02:d6:ac:e5:91:15:66:
         ae:b2:c3:bd:89:7f:28:4f:7c:b0:5a:0e:a2:1e:72:f6:56:e2:
         d0:ff:51:c6:03:73:99:23:66:21:8d:c1:a6:bc:9d:91:78:be:
         36:0e:cc:ff:94:70:36:4a:67:63:ac:12:6b:f9:9c:e4:44:af:
         0a:ac:6a:67:81:3b:9e:01:a2:e6:cd:95:a3:e1:58:a8:29:db:
         82:a9:05:1c:d5:44:e4:7e:30:c3:59:bf:47:e8:cd:97:9c:03:
         ef:31:07:c0:5d:36:41:5f:ae:36:11:ad:96:a6:e0:af:b0:6f:
         24:e1:0c:18:ae:37:a2:9c:a1:08:2d:bb:ae:89:d7:78:57:ad:
         a8:88:cc:ca:97:4d:c2:03:72:8d:e5:2e:13:98:48:76:c6:9f:
         c3:5b:91:98:98:f1:7e:5e:b1:41:32:41:88:f6:ba:44:5e:d7:
         ce:8c:26:d2:5e:38:fd:13:d0:2b:cc:c2:52:fb:53:a0:bf:9b:
         57:3e:b9:59:4f:e8:42:80:53:4c:c6:42:41:93:75:d3:ef:05:
         39:8e:2c:73:76:f1:74:b9:54:28:a9:8c:83:e0:b1:4b:a5:4b:
         e3:46:ea:f4:2a:38:f6:62:b1:67:8c:38:5e:d4:d5:4f:4d:b6:
         b4:da:0a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 20:54:20 2024 by rpki-client on console-ams.rpki-client.org