Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d04651b9-e83b-3291-aafb-6299b726c5b4.roa
File:                     d04651b9-e83b-3291-aafb-6299b726c5b4.roa (raw, json)
Hash identifier:          7HBgtkLXb5o52NKliv4eyITzwGxYW4MhrL1Wp6HRMUc=
Subject key identifier:   8F:50:BB:16:4A:BE:FC:EA:BA:D4:2A:B9:18:B3:53:AD:C3:7F:22:FE
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584598FE0D2449FC2D275CC12F80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d04651b9-e83b-3291-aafb-6299b726c5b4.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     1225
IP address blocks:        165.254.21.120/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:0d:24:49:fc:2d:27:5c:c1:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=9b5cfcd1-adce-4c0f-a3c9-d8559036550e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:ce:36:5e:61:b2:04:b5:55:eb:a7:95:92:
                    cb:27:82:17:b3:c1:55:0c:aa:7d:62:b2:0b:6a:0b:
                    af:86:96:11:2a:9a:8f:54:86:7e:c4:d2:e7:2b:f3:
                    59:07:e2:0b:fc:df:27:f1:f0:81:c5:08:6b:7b:4a:
                    75:2a:13:95:36:ae:a4:82:6e:d7:b2:21:23:f3:49:
                    2d:8c:65:f6:d3:3d:f2:f4:b0:1f:67:f4:cc:0b:a8:
                    5b:20:6f:63:89:3c:1b:d7:fe:38:95:32:88:58:ea:
                    f8:1e:df:ab:eb:49:d0:69:f9:96:86:d2:7b:8d:8c:
                    b5:f6:41:9f:79:98:b4:2d:0a:4f:b1:cc:20:c6:a2:
                    d3:e7:ab:84:80:e3:71:21:b5:f8:65:05:0f:08:cd:
                    a5:9d:bb:b6:a1:0a:6f:d5:26:c8:4f:d0:f9:0c:c5:
                    39:0d:59:33:5e:a4:e9:ab:b6:7d:a6:fa:2e:be:d4:
                    3d:e8:a1:ac:c2:8b:02:bc:94:88:37:7f:ff:4d:86:
                    cd:8d:a4:c9:74:0c:7a:cc:3c:70:24:8e:5c:eb:7f:
                    c9:7e:1e:99:63:af:7d:56:77:e7:61:d4:81:39:fc:
                    3b:e0:31:a5:7f:e6:80:c6:1f:d1:89:2f:13:86:a0:
                    7c:ef:fa:e4:db:5b:8c:82:e3:64:5b:b0:fd:ef:1d:
                    58:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:50:BB:16:4A:BE:FC:EA:BA:D4:2A:B9:18:B3:53:AD:C3:7F:22:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d04651b9-e83b-3291-aafb-6299b726c5b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.21.120/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:5f:2d:14:88:f0:59:89:ac:b6:5d:0d:56:72:d6:37:7d:ed:
         02:6d:a9:3b:d7:6a:1e:16:eb:31:5e:6e:3c:57:44:8b:b2:5f:
         0b:bc:7f:e1:73:5e:19:ea:85:92:5f:20:19:e8:c2:84:a1:99:
         45:f0:2e:b4:e6:26:73:35:4d:01:a4:64:44:21:dc:61:97:e1:
         32:67:40:e1:7f:72:df:39:29:51:84:29:67:88:70:d0:d7:79:
         08:80:39:fa:7c:b5:83:93:1b:a3:d0:82:46:ac:b2:04:00:81:
         ce:c1:f8:35:9e:0a:1e:26:7e:b0:53:03:8f:cf:fb:bb:9a:40:
         2d:79:26:5e:8a:a6:c2:23:41:dc:25:d6:91:b6:d5:1f:cc:08:
         f2:18:82:58:05:c0:3f:4d:be:01:76:df:3b:23:c5:a1:ba:da:
         09:6a:62:a9:b0:5a:de:41:3f:0a:13:36:17:08:c7:37:b5:7b:
         95:20:65:bd:a0:a0:d2:3d:bb:0b:2f:70:b2:3a:09:a5:24:31:
         2f:5e:31:52:66:82:5f:80:1d:07:c5:76:62:c1:92:34:b9:0b:
         31:90:43:94:5e:e4:43:69:94:43:38:75:95:e5:11:bc:d1:18:
         dd:a9:32:5f:17:78:b7:d9:2a:25:8d:30:e7:f7:f8:21:81:1c:
         ba:29:7a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:56:16 2024 by rpki-client on console-fra.rpki-client.org