Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3f43baa2-79a5-3eb4-a82c-42bfc84d71cc.roa
File:                     3f43baa2-79a5-3eb4-a82c-42bfc84d71cc.roa (raw, json)
Hash identifier:          BdrxkJjZpJw2jlrgfbf29/q44tD6f6zI9kJR2Z0P1Us=
Subject key identifier:   7C:E0:31:DE:A7:47:B4:BF:24:82:26:85:01:B2:7F:05:E1:1C:75:76
Certificate issuer:       /CN=09c51633-340e-4eac-820c-a36b33746085
Certificate serial:       010D0C9F43285845AC88C5D99ACA4C0B670DFF00
Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3f43baa2-79a5-3eb4-a82c-42bfc84d71cc.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     13928
IP address blocks:        199.21.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:c5:d9:9a:ca:4c:0b:67:0d:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c51633-340e-4eac-820c-a36b33746085
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=77d272c1-6778-4e19-a9fe-267e519b2d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:46:c5:2c:92:03:bf:27:cd:92:e0:3c:d2:
                    79:1a:e7:57:66:07:d4:17:cf:10:b9:84:d9:bb:b4:
                    ce:a5:5c:39:ab:87:ca:54:48:72:a8:19:5e:1f:a1:
                    87:9f:54:a0:d7:a2:92:55:92:92:51:5d:60:0f:7b:
                    d1:ed:f0:c5:e1:15:fa:91:bb:b9:58:db:ea:19:a2:
                    67:9c:97:0b:e6:e8:19:42:ed:7b:64:f5:f8:93:55:
                    66:22:8d:27:f5:4e:5f:dd:7b:62:87:da:31:49:b1:
                    45:0d:72:38:c5:ac:35:4c:54:cf:b2:35:71:25:23:
                    f3:4a:f6:f5:01:a0:58:8e:af:69:00:e8:38:2b:8b:
                    b3:db:2d:c4:5c:64:97:40:e2:b6:c3:3d:cc:87:e1:
                    cc:a8:e0:47:ad:05:0d:4e:ba:c9:79:da:0d:69:a8:
                    35:3b:6a:d9:c9:88:69:63:8d:d1:40:9a:74:0a:1b:
                    c0:f7:c8:16:19:31:54:53:2b:a5:e5:2c:bc:05:99:
                    12:1e:8e:ca:1f:77:f0:d8:11:da:85:56:71:8b:27:
                    c4:a2:77:f1:c4:87:94:2d:9b:84:a6:75:46:f7:04:
                    89:fe:6d:fb:b0:c9:dd:45:f8:3b:07:83:c7:76:13:
                    6f:e2:e9:8d:06:bd:58:8b:fc:be:8e:98:92:c4:ea:
                    a9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E0:31:DE:A7:47:B4:BF:24:82:26:85:01:B2:7F:05:E1:1C:75:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3f43baa2-79a5-3eb4-a82c-42bfc84d71cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:10:14:3f:c5:82:1c:2f:d1:85:a2:95:84:49:3f:1a:1f:89:
         bc:ca:b8:83:37:1c:96:7d:ed:10:f2:29:d6:20:2e:01:a0:fb:
         a5:50:de:7e:3e:9a:9a:5e:3a:75:1f:97:0d:71:de:6f:6c:94:
         59:0e:c6:b7:e1:5f:f6:10:d0:c3:03:89:e5:09:9c:d9:e0:1b:
         e2:f5:24:d9:4a:dd:4e:75:2e:6f:b9:5e:e7:af:39:10:61:bb:
         7c:24:92:b8:69:2a:f7:5a:d4:1d:22:60:f2:86:91:0b:60:01:
         a3:7a:4f:d4:3e:47:4f:90:1b:90:c2:b7:54:de:fe:fb:79:84:
         5e:22:a1:1c:39:36:e5:81:0b:30:93:ab:2f:c5:a7:96:46:bb:
         ba:bd:0d:ff:41:e7:ca:0c:01:38:69:47:5d:ea:db:9c:59:b0:
         9c:76:78:49:ba:81:b5:66:b6:2e:f2:a0:85:58:04:05:79:7a:
         d4:29:da:1a:d4:26:91:63:4f:55:62:db:c4:09:47:87:8e:01:
         64:90:79:42:89:19:f5:a8:72:3d:57:97:ca:4d:73:63:42:7c:
         37:1c:14:d4:41:34:7e:b6:4b:3f:2a:4a:6e:ef:13:64:c7:9a:
         41:dd:46:e9:4c:75:85:61:33:e5:88:42:3b:ea:0e:97:45:7e:
         07:6f:c5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:36 2024 by rpki-client on console-fra.rpki-client.org