Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/6cfc4b7f-42d4-362c-98f2-32caa153320a.roa
File:                     6cfc4b7f-42d4-362c-98f2-32caa153320a.roa (raw, json)
Hash identifier:          xrXtVFVsDUJjYV5kTI2J09SSTQ6FC1735zkg3ubXneY=
Subject key identifier:   E6:52:E9:D7:30:FF:83:DC:A0:03:D6:7D:DF:EB:85:53:2F:02:64:3B
Certificate issuer:       /CN=e97da778-a1f6-4dad-9d0a-d3a070010373
Certificate serial:       010D0C9F4328584563F304D8026486BB0A79C740
Authority key identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/6cfc4b7f-42d4-362c-98f2-32caa153320a.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     21538
IP address blocks:        192.131.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:04:d8:02:64:86:bb:0a:79:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97da778-a1f6-4dad-9d0a-d3a070010373
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=9da62356-4b7d-4b08-8f95-ace0272e76e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:46:0a:26:cc:3e:2a:c2:a5:6d:ce:4e:86:bf:
                    b1:f9:56:39:ae:21:f6:53:0f:40:87:fd:24:56:ac:
                    1d:f9:ee:aa:90:15:18:1a:82:8d:7e:00:af:42:f9:
                    b0:9a:45:44:48:7b:8a:da:16:a0:be:b6:fa:ff:83:
                    b7:b0:1f:ab:46:ba:61:f0:cc:36:9c:90:b3:bb:b3:
                    d4:4b:41:85:9d:7b:de:13:99:31:99:00:91:05:83:
                    41:d3:14:83:a2:ac:b5:06:23:b6:aa:ac:a5:0b:3b:
                    4e:f3:c9:bc:39:bd:ca:c1:23:0b:71:b4:a2:05:0b:
                    aa:ef:48:84:c9:19:29:83:54:35:83:bd:ef:25:5e:
                    6d:c6:8f:a5:8e:26:df:8a:0c:2d:13:c1:68:94:2a:
                    af:29:61:80:8e:19:dc:5b:52:f0:d7:c6:41:cb:ff:
                    fd:96:95:e1:8e:2b:54:9e:4c:35:ba:01:4a:6a:12:
                    06:8b:25:e6:be:ae:8e:ac:ea:28:8b:64:cf:11:3c:
                    29:a9:b6:e1:bd:e0:d5:3a:49:45:00:6f:24:f4:bf:
                    cf:85:ce:a8:96:b5:08:d0:06:bf:de:62:6f:aa:7d:
                    87:33:42:c3:56:59:06:c2:81:ec:6c:c8:09:5f:31:
                    6b:d0:41:12:bf:1a:7d:f7:8a:9d:1d:4d:de:94:52:
                    3d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:52:E9:D7:30:FF:83:DC:A0:03:D6:7D:DF:EB:85:53:2F:02:64:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/6cfc4b7f-42d4-362c-98f2-32caa153320a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl

            X509v3 Authority Key Identifier:
                keyid:32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:77:22:6f:b5:d8:77:a7:44:bc:3f:d9:53:f4:ce:ac:c7:f6:
         0c:13:02:5d:5c:1b:0e:85:86:9e:36:d2:04:81:4d:53:c7:52:
         2d:1f:6b:5b:53:31:ff:16:8b:50:36:37:57:72:24:fb:eb:4f:
         57:2f:8e:6a:43:9a:5d:d0:cb:e9:fc:00:76:20:b0:3d:60:0b:
         9d:9e:be:ea:52:8a:e0:0d:4a:ad:f8:9c:b9:16:e0:ba:55:71:
         19:14:08:7a:cc:2b:b4:1a:71:fd:46:91:9c:3f:ac:0f:32:39:
         7f:69:22:44:59:fc:7b:24:a1:04:a4:44:d7:f0:d1:ab:89:cb:
         b5:a3:2c:43:20:cc:59:59:88:d5:a5:6e:a2:ff:6b:22:44:d5:
         f6:b4:b2:16:66:e1:83:5c:80:b9:d3:e1:72:d0:ea:e6:12:39:
         14:aa:25:60:e0:a1:e3:9d:a9:f0:b2:5a:74:a7:d2:99:96:e8:
         3d:aa:f7:88:2a:99:63:25:64:70:fd:c2:1c:c6:01:81:23:20:
         66:a1:67:6e:e7:fd:b3:30:b9:bc:45:b5:4f:b8:d5:ef:22:6f:
         f1:e0:1f:61:5c:99:13:e4:74:6b:c4:73:7e:0f:df:36:9c:06:
         76:f0:fc:5b:fd:56:4b:8e:e4:d2:c3:3e:1d:5f:29:7d:66:ee:
         ea:f4:2c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 17:04:05 2024 by rpki-client on console-ams.rpki-client.org