Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1f728d17-d602-32b0-9c88-b5cec1a7af9d.roa
File:                     1f728d17-d602-32b0-9c88-b5cec1a7af9d.roa (raw, json)
Hash identifier:          q93EWW/fXQf3DNKQmH0QzPoYbeN+1+3LJB1Dzfq7LI4=
Subject key identifier:   79:E5:AB:F0:64:D1:D8:84:B8:B4:D5:06:FE:40:96:AD:00:72:FD:58
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC166421B1446
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1f728d17-d602-32b0-9c88-b5cec1a7af9d.roa
Signing time:             Fri 05 Oct 2018 02:42:42 +0000
ROA not before:           Thu 04 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     3949
IP address blocks:        204.2.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:1b:14:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=98b0f0c6-e885-481d-af28-c4bcfc038d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:b9:b4:d4:f1:3c:cb:57:96:e8:56:12:68:
                    51:f6:53:49:7f:f6:86:44:0a:76:12:9a:da:7b:28:
                    db:75:76:91:0b:95:1f:21:92:6e:39:fb:ef:78:af:
                    2f:1e:35:18:1e:9b:41:6f:3f:8d:ec:8e:bb:6d:58:
                    6f:cd:cb:16:73:69:dc:10:bf:e4:74:20:a2:ab:d3:
                    80:55:58:83:7d:29:12:d6:30:f8:82:9e:d7:16:56:
                    28:ef:82:d8:c0:68:e6:11:00:a2:e9:94:b0:97:54:
                    36:8e:92:74:12:6c:ae:55:34:8c:9f:14:a1:3f:bf:
                    d9:be:82:d6:60:16:f6:ba:d3:42:4d:44:46:81:05:
                    93:30:12:fe:f6:aa:0d:04:6f:2c:eb:a2:d6:e2:46:
                    30:27:89:66:05:b7:36:5f:a0:3a:bf:e3:7f:83:15:
                    8c:51:66:92:7e:4b:7e:e2:18:0c:1f:6a:fc:8a:4f:
                    0d:c1:04:d9:c1:fe:d9:8f:80:ee:83:47:2b:f3:f6:
                    b0:db:83:33:e2:ad:55:99:43:e0:0c:b9:91:01:59:
                    3a:8a:37:b2:1f:5d:76:a8:b3:1d:0f:36:c1:c2:af:
                    36:21:8f:c6:5e:23:b8:1c:ac:81:64:4c:9f:c3:cf:
                    d8:71:b4:de:8c:fd:3f:ae:99:f2:71:55:2e:cf:6a:
                    1f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E5:AB:F0:64:D1:D8:84:B8:B4:D5:06:FE:40:96:AD:00:72:FD:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1f728d17-d602-32b0-9c88-b5cec1a7af9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ad:34:09:53:b9:2a:bb:00:11:76:d0:cb:9e:38:a4:69:ff:
         8d:9d:d4:c0:66:aa:f0:a6:8e:7c:70:3c:14:d1:7e:96:92:95:
         7e:e4:2b:94:c6:45:a1:e4:f4:ca:7d:b4:0e:0c:9b:b6:28:29:
         0f:f8:45:65:f4:c8:73:54:80:83:d3:9e:7b:ec:99:51:04:7f:
         b5:81:a8:e2:92:6c:91:0f:d7:19:35:92:7a:d7:b2:39:51:8a:
         b0:b5:a5:0d:fd:6b:4d:d6:4a:2c:b1:b6:a7:9f:60:d7:f7:65:
         70:3f:db:7a:e5:ba:1f:72:d5:01:c4:e5:d2:60:5a:8c:81:e5:
         6c:81:0e:3b:9c:42:7d:46:ec:1a:32:22:a3:5a:7f:61:69:83:
         de:a7:72:88:98:f4:7d:2d:55:58:82:08:1a:66:dd:43:ac:d0:
         24:5e:4d:4e:65:08:e9:de:67:17:e6:43:04:0c:78:e1:a7:87:
         5d:fd:29:ff:44:0a:6a:0b:54:f3:c2:88:70:9c:a8:92:d2:ab:
         06:5c:19:38:a8:c6:be:19:be:ee:74:f2:09:0e:cc:b1:17:a2:
         a4:7b:d4:d0:8c:fb:49:ea:b6:52:ee:1f:95:be:be:cf:91:69:
         fb:8e:72:94:ac:a2:ed:a4:6d:f0:53:cf:27:2e:77:41:1a:3c:
         77:f4:10:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:58 2024 by rpki-client on console-fra.rpki-client.org