Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c1bf3fca-9ddc-32ba-8ff8-4b30c4025ef3.roa
File:                     c1bf3fca-9ddc-32ba-8ff8-4b30c4025ef3.roa (raw, json)
Hash identifier:          FuYWZYg5/VjxLcjTA79QzZ29j1uRUlKz6YY6VX0hsHE=
Subject key identifier:   1E:9D:F8:41:55:EB:C7:08:DA:AF:C7:D4:C7:18:82:C1:39:33:58:C1
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16641D9FAE2
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c1bf3fca-9ddc-32ba-8ff8-4b30c4025ef3.roa
Signing time:             Fri 05 Oct 2018 01:31:36 +0000
ROA not before:           Thu 04 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     393259
IP address blocks:        204.2.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:41:d9:fa:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=555c1a29-7a13-4628-adc7-36bedf3a543f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:c0:59:4a:67:43:63:b9:ba:fb:c5:dd:b5:
                    2d:46:1a:28:4b:bf:21:da:b0:0a:70:39:02:35:10:
                    05:70:6f:21:d0:1e:47:7b:93:39:59:03:ff:21:55:
                    9f:d7:06:4d:53:0d:10:22:bb:2f:45:d0:ed:07:0b:
                    0b:f3:36:51:7e:7e:50:a1:1b:f0:66:a5:3a:0a:cc:
                    2c:a6:70:3f:b3:51:ae:2b:24:43:91:6d:80:80:7b:
                    63:d9:a7:70:c8:5a:8a:7a:d5:1c:1b:c1:aa:23:b1:
                    45:9b:ec:17:84:2a:80:02:e3:44:04:ae:fd:de:35:
                    13:46:f3:65:e4:69:89:ec:df:ae:63:af:2b:43:bf:
                    c6:2d:c0:ab:35:20:fa:1c:eb:95:c0:2e:58:e6:b3:
                    2e:f0:1b:56:b2:f8:be:4c:99:90:ee:00:74:b2:a0:
                    de:11:cd:bb:74:3b:6a:54:9a:a0:64:cc:36:98:ba:
                    fd:fe:a3:a5:f6:97:2b:6f:90:00:0d:b2:ed:4f:52:
                    1a:c7:ea:31:31:5b:c4:ff:cf:0f:0b:e9:ce:91:1d:
                    bb:a6:50:99:44:6a:72:7d:85:d3:7f:cd:5c:08:8a:
                    36:3a:ec:7a:ff:4d:0d:7f:26:cd:95:9b:d7:6d:63:
                    ee:28:a9:d9:02:c8:c3:43:4c:1d:8b:f4:1b:51:ed:
                    80:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9D:F8:41:55:EB:C7:08:DA:AF:C7:D4:C7:18:82:C1:39:33:58:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c1bf3fca-9ddc-32ba-8ff8-4b30c4025ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:a8:01:aa:ad:9e:4d:af:8a:5c:74:e0:03:af:83:ce:a5:31:
         bb:d5:4e:f3:07:2b:be:d5:d2:02:f5:16:48:48:b9:7a:08:05:
         b1:bd:fe:2a:dc:31:1f:89:bd:92:c7:a8:14:75:bc:45:4c:90:
         a8:7b:c1:6e:33:cb:b8:98:b9:69:62:be:7b:e5:10:b8:43:1e:
         2e:e7:e1:23:cd:f9:b2:ca:2c:ff:c3:dc:f0:06:31:0c:0d:8f:
         30:6b:d7:2c:c7:77:c8:d7:c2:e4:8d:4d:10:63:31:72:bd:1e:
         87:41:e1:db:06:1d:52:0d:57:20:9d:f3:64:ec:59:ea:84:8c:
         80:8b:cc:81:3c:8e:46:b7:19:03:6e:b4:a0:4b:49:84:f1:df:
         06:5a:b6:d7:44:d6:6c:c7:45:61:d2:46:64:5a:71:54:1a:a3:
         12:fb:a4:d7:a1:d9:97:3e:01:89:ee:c7:bf:37:ac:65:ce:5b:
         44:87:d2:a8:17:25:54:45:78:af:ad:93:33:af:f2:c2:d5:e1:
         96:8e:81:6f:c5:d4:1c:03:f2:f3:79:06:13:15:93:14:b4:fc:
         27:b4:ed:26:3d:4e:ea:60:1e:bb:41:6a:31:11:6e:8f:2e:3c:
         6e:a5:b3:09:4c:f1:e1:33:a1:42:2b:c7:2f:ab:dd:9d:50:f6:
         d6:62:b9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:50:12 2024 by rpki-client on console-fra.rpki-client.org