Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29b0455b-b0db-3bef-ad71-5d8eab166a05.roa
File:                     29b0455b-b0db-3bef-ad71-5d8eab166a05.roa (raw, json)
Hash identifier:          7MGVLOmr36PGnXP1a9TUyd3jYqbjap3+/xEzpaZp8js=
Subject key identifier:   9A:E8:18:EC:38:16:3B:21:12:AF:77:06:96:07:E4:A7:4E:02:28:04
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F43285845AB23551949C7026D63F43E40
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29b0455b-b0db-3bef-ad71-5d8eab166a05.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     13768
IP address blocks:        64.29.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:55:19:49:c7:02:6d:63:f4:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=83e40bb9-4713-4afa-972d-03824a5bf812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:d0:53:27:10:f8:36:7f:7e:a0:94:17:6b:
                    ad:5f:8a:6f:32:31:11:38:bd:65:9b:27:ad:a6:38:
                    45:66:89:c2:e0:5d:e6:d5:75:23:34:bd:7e:7d:fd:
                    ee:fa:dd:d5:dc:bc:08:c3:59:1f:1c:49:9d:f2:09:
                    bd:b1:dd:18:15:67:64:6a:27:2f:87:8b:7a:72:07:
                    8b:98:c8:b4:2a:11:d8:0c:f6:3d:38:c1:05:9d:c8:
                    6f:60:28:48:fe:cb:a2:61:62:98:be:7e:37:0f:10:
                    d1:6a:24:9d:7b:01:d9:dc:ec:a4:58:77:ff:e5:21:
                    c3:2c:8b:cb:4b:ac:e1:8b:69:58:21:ed:49:0f:9d:
                    95:fa:cf:cf:bd:91:4c:34:e0:cb:be:e3:96:d2:3d:
                    70:07:27:0d:bf:c7:19:b3:29:51:39:c8:d7:4e:45:
                    80:c1:49:92:63:5c:1b:0c:cc:17:28:0f:f2:bf:43:
                    12:80:b2:e6:1b:4b:93:6b:b7:49:26:c3:52:58:97:
                    94:98:5d:c5:b1:6a:d1:af:52:b4:e0:cd:4d:60:f9:
                    44:22:2a:a0:60:26:c8:36:2c:af:76:5f:f8:f6:d6:
                    1f:d9:ae:7e:89:3f:91:8e:68:66:13:6f:1c:b6:6b:
                    a3:39:14:f8:d7:3f:c0:d0:db:a8:5e:ce:43:a2:c3:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E8:18:EC:38:16:3B:21:12:AF:77:06:96:07:E4:A7:4E:02:28:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29b0455b-b0db-3bef-ad71-5d8eab166a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:87:38:2d:01:04:73:c1:72:c5:76:7e:07:8c:84:8a:f1:ce:
         46:3e:d7:02:56:f6:ed:3e:18:f1:09:83:f3:65:14:59:44:ee:
         e6:9f:5e:d9:70:8c:a8:52:6f:4b:cd:ec:68:0a:bf:03:8f:5c:
         13:5f:1e:5c:73:d7:e5:09:f1:2f:3d:ca:96:80:6f:89:00:a7:
         ea:33:a5:b5:b1:30:43:75:f8:97:c5:fe:51:c5:52:a2:af:53:
         86:4e:f1:d6:c5:87:10:cf:f6:1b:40:51:58:a2:33:67:f8:fa:
         b9:d4:8c:24:86:36:9b:a0:1e:3b:8e:3c:95:ab:7e:e3:9d:db:
         ec:96:62:d0:d5:cf:63:5e:49:db:f6:a3:58:c2:5a:d3:d1:4c:
         bc:66:ab:05:ad:08:aa:13:06:d9:1d:5a:b3:b6:22:74:d4:f6:
         8f:f2:1b:b8:6c:7d:49:bf:b2:bc:6f:02:1c:f2:db:fd:79:34:
         c4:9d:f3:90:c0:e5:06:8d:66:a5:3f:af:61:b9:8a:b1:fe:70:
         ff:8b:a8:8f:df:b9:98:f6:e1:73:29:56:72:e2:bc:d7:f7:e8:
         b3:f3:72:a1:cc:23:ad:e1:66:ce:2a:cf:15:d5:e0:58:e5:13:
         17:56:2e:61:a9:33:00:12:9c:e9:85:57:6c:b5:3e:40:e2:c2:
         b8:7d:89:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 21:24:33 2024 by rpki-client on console-fra.rpki-client.org