Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/3c3cc499-a372-3fa0-aa81-54a147cdcd7f.roa
File:                     3c3cc499-a372-3fa0-aa81-54a147cdcd7f.roa (raw, json)
Hash identifier:          6agv3cqhX2CIDyNa04Ndo/EsFkxsaGRfKRDsPuRTjDI=
Subject key identifier:   37:A5:61:C6:0E:29:99:16:8D:CE:36:82:E4:F2:D9:30:7C:A9:3F:23
Certificate issuer:       /CN=7aaedf42-8faf-449b-8735-b772a5f92af2
Certificate serial:       010D0C9F4328584596334963A23E1674F8400F40
Authority key identifier: 53:47:BF:66:C8:68:67:B2:33:9F:6A:F6:9C:2D:95:0D:27:A6:E6:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/3c3cc499-a372-3fa0-aa81-54a147cdcd7f.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     398014
IP address blocks:        131.226.230.0/24 maxlen: 32
                          131.226.228.0/24 maxlen: 32
                          2604:7ac0:900::/40 maxlen: 128
                          2604:7ac0:a00::/40 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/7aaedf42-8faf-449b-8735-b772a5f92af2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/7aaedf42-8faf-449b-8735-b772a5f92af2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:49:63:a2:3e:16:74:f8:40:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aaedf42-8faf-449b-8735-b772a5f92af2
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=94d39cbc-51a7-4d89-9db9-ab3a7407e8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e6:bc:7a:25:10:08:61:76:62:f5:72:db:da:
                    c9:65:33:5b:17:cd:e3:39:ba:d8:d9:c9:51:3e:6b:
                    18:8d:d5:91:6b:f9:39:9c:03:a8:7e:94:6f:c5:64:
                    d6:7f:eb:06:ef:18:ea:8a:44:8e:76:e8:e0:3a:24:
                    1a:f2:f4:99:1c:2e:c1:6b:79:11:54:4d:80:2b:e1:
                    5c:b3:fd:de:bd:d1:de:86:e1:f8:0d:7e:48:5c:a9:
                    4b:d0:4b:c7:1c:30:e7:c5:e2:64:07:ea:c5:73:3d:
                    f9:3f:40:74:f4:7e:45:f5:a2:55:b4:ea:72:e4:12:
                    20:79:d7:8c:a9:0b:03:30:36:57:48:d8:62:b8:dd:
                    58:d7:88:af:f0:d8:e7:f0:ac:7e:c6:07:bb:6e:a8:
                    ea:97:3e:3a:7b:3d:2f:39:d2:71:86:c4:fd:5c:c5:
                    14:ad:05:09:57:cf:34:c1:63:39:fa:24:aa:49:14:
                    01:cf:43:1c:ae:a7:a4:62:8b:a9:aa:d2:f1:c4:46:
                    57:17:1d:4e:9d:cd:34:40:f9:29:10:70:1e:c5:56:
                    48:ae:1e:6c:01:5e:24:39:0a:27:3d:4f:d7:de:99:
                    15:2e:bc:72:ff:16:62:35:2d:af:66:1d:45:5d:b0:
                    d6:e1:92:58:99:79:67:21:ca:c4:74:19:f3:65:4f:
                    45:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A5:61:C6:0E:29:99:16:8D:CE:36:82:E4:F2:D9:30:7C:A9:3F:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/3c3cc499-a372-3fa0-aa81-54a147cdcd7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/7aaedf42-8faf-449b-8735-b772a5f92af2.crl

            X509v3 Authority Key Identifier:
                keyid:53:47:BF:66:C8:68:67:B2:33:9F:6A:F6:9C:2D:95:0D:27:A6:E6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.228.0/24
                  131.226.230.0/24
                IPv6:
                  2604:7ac0:900::-2604:7ac0:aff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:de:d3:43:e9:1f:54:13:83:87:90:2d:d0:f1:67:56:90:20:
         95:c0:5c:80:3f:ec:10:c8:25:f7:60:99:74:c7:1d:09:c2:6c:
         09:5a:8b:8a:49:cf:5c:70:94:ef:76:6a:5e:91:18:75:f6:2b:
         7e:51:80:f8:39:9e:61:5a:83:17:39:05:7b:4f:30:99:b3:76:
         23:c4:ba:29:12:b2:ee:d7:22:66:bf:bb:cd:7c:8d:38:be:07:
         a9:21:a7:44:dd:1c:be:5a:db:38:f9:11:9c:2f:0d:c3:a3:55:
         7a:06:07:d3:d9:65:2c:cc:fb:86:e8:38:26:e8:6c:fb:34:3b:
         7e:86:34:ed:86:f2:bb:6c:5c:e9:14:55:78:97:94:bb:cd:74:
         98:c7:68:11:1b:68:26:b5:bf:48:be:50:88:21:e6:66:b3:75:
         74:20:4e:28:c2:b9:21:13:af:1c:8d:7a:08:87:f1:a7:6d:8f:
         7f:14:02:9e:dc:f1:31:d3:07:4e:0f:be:4a:57:db:66:0d:01:
         d2:01:95:c9:16:57:20:c2:a6:0f:73:e2:b7:45:84:b9:4f:d2:
         bc:ad:12:2c:4f:ae:b4:78:fb:e7:a6:ee:a1:93:26:25:74:a9:
         d5:c7:bd:a7:d6:bd:b0:3f:01:32:e6:b7:e5:d7:6c:dd:ea:0b:
         13:32:a8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:54:29 2024 by rpki-client on console-ams.rpki-client.org