Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a213c9c8-3185-36d3-853f-006a33183b34.roa
File:                     a213c9c8-3185-36d3-853f-006a33183b34.roa (raw, json)
Hash identifier:          ASpaAyYIZpfGCcD/IaDb21jAzpF0n4dVWkJjd7FjdUY=
Subject key identifier:   C9:F3:EB:A8:CB:F0:90:36:22:F6:C6:84:72:25:2F:0B:63:F4:6B:F2
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DCB8CA871
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a213c9c8-3185-36d3-853f-006a33183b34.roa
Signing time:             Mon 14 Oct 2019 18:34:16 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     393536
IP address blocks:        131.103.20.192/29 maxlen: 29
                          131.103.20.224/27 maxlen: 27
                          131.103.21.24/29 maxlen: 29
                          131.103.21.64/27 maxlen: 27
                          131.103.22.0/24 maxlen: 24
                          131.103.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:cb:8c:a8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=295bae86-7be7-4569-956c-2a0f13e3e519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:7f:e5:0d:70:73:f0:de:b6:f2:91:79:b8:
                    2d:12:42:a8:1a:c4:7e:e7:16:34:02:66:26:f6:85:
                    61:cb:77:e4:91:52:87:25:f8:e9:a3:8e:9a:36:ca:
                    b4:ca:cb:05:95:3e:39:96:67:77:ca:ff:fb:31:4d:
                    67:b4:81:63:eb:e0:04:0f:a8:8c:03:bc:99:90:10:
                    9d:94:87:40:58:23:08:86:8b:97:9f:ae:19:3e:fb:
                    e6:4d:0a:eb:73:03:22:e0:7b:f2:24:c1:cf:2e:f1:
                    40:e8:15:ac:8f:74:f4:90:22:3a:fd:51:53:e0:ec:
                    9a:8a:f5:a2:7f:fe:3b:3b:aa:a1:44:c8:63:a5:6d:
                    1d:27:7f:cc:ad:05:54:ad:f4:67:34:be:08:c2:cd:
                    1e:c5:06:b6:a3:d1:93:1c:4f:c5:01:7d:e8:28:c2:
                    98:c4:af:9e:28:9b:e5:47:4e:f9:be:10:e7:ab:cc:
                    a9:47:24:c0:ad:26:18:e1:0c:77:07:42:a1:b0:38:
                    a7:9b:06:bd:ce:98:75:09:ff:24:fc:02:c3:a1:97:
                    59:93:2f:c5:cf:13:26:0e:2e:9b:6d:81:72:f1:fe:
                    49:83:7f:cc:9c:c8:07:55:8b:1a:ff:ee:8d:cc:9c:
                    2b:5b:d7:ea:22:a1:51:52:b0:f0:90:cc:5d:4f:44:
                    11:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F3:EB:A8:CB:F0:90:36:22:F6:C6:84:72:25:2F:0B:63:F4:6B:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a213c9c8-3185-36d3-853f-006a33183b34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.103.20.192/29
                  131.103.20.224/27
                  131.103.21.24/29
                  131.103.21.64/27
                  131.103.22.0/24
                  131.103.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:73:c7:6c:d2:1f:f9:36:17:79:6d:94:bb:a9:aa:8c:6b:7f:
         0e:e6:ad:04:59:0f:a9:f9:1c:a9:6c:c3:34:dc:12:72:cb:72:
         7b:43:cb:9c:d2:43:d5:cb:cb:b3:ca:82:d5:56:2c:fe:7a:5e:
         43:ad:45:af:45:02:c3:5d:91:6c:20:69:b3:e6:f8:6e:76:b6:
         42:8a:33:b4:93:0f:93:b0:e7:68:d6:12:71:40:a3:8f:9f:0d:
         b3:73:95:bd:b2:1f:20:d1:0f:72:dc:2d:4c:1f:49:2c:79:b2:
         f0:6f:d5:49:d6:9e:08:51:a2:c7:9a:36:7c:7c:1d:d7:a1:67:
         e1:bf:2d:5b:99:da:c1:5e:19:0f:c1:67:17:35:ea:8e:af:8b:
         9d:92:47:b6:73:17:34:b9:c7:c7:a3:d8:7b:75:12:8f:5b:c9:
         41:3b:91:15:1e:f0:07:f0:c7:b4:ca:46:69:d8:67:3b:ca:f6:
         d4:14:7d:10:0a:52:ed:fe:f3:41:9f:26:3b:d0:f9:9a:e8:f4:
         32:1d:43:e6:7b:57:62:9a:31:69:fb:5e:f3:27:03:1f:f6:e3:
         03:e0:d0:7c:54:86:65:df:c2:04:de:df:57:16:0c:65:96:c6:
         95:13:68:47:ab:0d:b3:48:c9:eb:57:da:58:54:ce:2e:70:d1:
         cd:12:78:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:15 2024 by rpki-client on console-ams.rpki-client.org