Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/cd1864d4-e3e2-334f-86a3-d88d4d0d9bf0.roa
File:                     cd1864d4-e3e2-334f-86a3-d88d4d0d9bf0.roa (raw, json)
Hash identifier:          DPjHIPuDtivVSukpAo6L+YpJOq3J+jv+g2V+ZRT5sZY=
Subject key identifier:   08:3C:0C:81:2E:13:33:A9:0D:84:DA:BB:E7:00:53:D6:66:D7:C2:D1
Certificate issuer:       /CN=7aaedf42-8faf-449b-8735-b772a5f92af2
Certificate serial:       010D0C9F43285845963349547BE63E8914E83F80
Authority key identifier: 53:47:BF:66:C8:68:67:B2:33:9F:6A:F6:9C:2D:95:0D:27:A6:E6:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/cd1864d4-e3e2-334f-86a3-d88d4d0d9bf0.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     12213
IP address blocks:        24.170.128.0/18 maxlen: 32
                          131.226.192.0/18 maxlen: 32
                          149.137.192.0/18 maxlen: 32
                          2604:7ac0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/7aaedf42-8faf-449b-8735-b772a5f92af2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/7aaedf42-8faf-449b-8735-b772a5f92af2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:49:54:7b:e6:3e:89:14:e8:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aaedf42-8faf-449b-8735-b772a5f92af2
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=48141256-4c89-464b-8928-e0195d577cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:41:d5:5a:8b:ce:d2:0d:97:22:57:f2:9b:55:
                    10:7b:67:fa:f0:6a:40:63:d6:2f:86:57:c8:13:62:
                    5e:ab:4a:4b:b4:b6:b9:ad:86:c6:2b:d7:a1:c7:4f:
                    66:3d:84:a9:69:44:8c:ed:1d:76:d0:0c:08:8e:a7:
                    74:24:4d:db:20:ea:71:7b:95:21:73:0b:56:85:35:
                    08:ac:51:36:b7:aa:f8:f2:87:11:28:ab:5d:6e:6c:
                    38:cb:f6:c9:33:68:0a:9e:59:b2:f9:6a:5e:ff:c8:
                    cb:8f:b9:b0:44:12:c4:ba:5a:71:7b:db:70:6f:14:
                    b1:fa:62:bc:3d:28:05:94:4c:91:29:46:bc:01:07:
                    14:4b:9f:cb:eb:8d:13:74:d4:d6:a5:cd:d2:9a:e5:
                    39:54:82:70:12:04:d4:4f:90:84:fa:c6:9b:87:3f:
                    6a:ce:e3:cc:de:12:0e:9b:47:07:03:9a:8e:09:c8:
                    43:51:4f:df:9e:4f:3c:4c:bb:e9:7e:2b:f3:5d:a2:
                    af:1f:13:d8:75:3e:cb:7a:10:97:3d:e5:9a:98:0d:
                    dd:be:d4:f0:a3:ea:64:3b:14:ca:89:6c:9b:ba:1e:
                    12:72:b8:f2:b5:01:f2:6c:19:12:3d:41:86:1b:50:
                    65:26:2c:b7:82:b7:24:fe:e4:a0:eb:29:bb:27:40:
                    96:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3C:0C:81:2E:13:33:A9:0D:84:DA:BB:E7:00:53:D6:66:D7:C2:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/cd1864d4-e3e2-334f-86a3-d88d4d0d9bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/7aaedf42-8faf-449b-8735-b772a5f92af2.crl

            X509v3 Authority Key Identifier:
                keyid:53:47:BF:66:C8:68:67:B2:33:9F:6A:F6:9C:2D:95:0D:27:A6:E6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.170.128.0/18
                  131.226.192.0/18
                  149.137.192.0/18
                IPv6:
                  2604:7ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:05:50:be:02:f1:41:fa:85:d1:37:57:c0:51:77:78:aa:47:
         a1:f9:f1:70:a9:dc:9c:ff:38:6f:b8:08:33:8d:2f:26:02:25:
         cc:d8:c1:c7:79:05:57:92:a0:f5:f7:ae:84:ce:5b:08:24:d9:
         4b:5d:6a:14:44:fb:b4:24:e6:da:f7:e9:c9:10:60:8e:63:73:
         38:ca:ff:73:02:5d:68:f8:1c:55:27:64:89:44:c8:d9:39:0a:
         d4:c1:7d:4e:c6:9a:8c:be:7a:3c:33:33:81:99:6b:ef:e8:7f:
         49:43:c8:1b:8f:93:96:75:19:2d:93:4c:ee:32:04:42:69:b1:
         27:91:37:83:9f:02:70:36:32:dd:b6:dd:02:08:dc:ec:ab:62:
         94:03:9e:c2:7a:df:0c:d5:26:fb:92:e0:cc:39:f1:a9:b4:8f:
         90:cc:e3:ca:41:2d:62:6e:32:7a:20:d5:fe:a6:11:2c:5b:ca:
         18:c8:32:33:4e:c2:46:ac:ba:e5:c3:39:58:70:83:c3:c2:7b:
         00:66:f2:6a:2a:1b:5b:7c:5c:18:52:ec:1c:12:7e:e1:d2:7e:
         15:9d:10:c9:d7:a0:cc:d9:51:c3:ea:ac:e5:a5:17:62:d8:0c:
         e4:2b:bd:77:e7:0b:d4:0a:e0:33:c4:9f:91:10:22:5f:ed:07:
         ec:32:01:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:23 2024 by rpki-client on console-ams.rpki-client.org