Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c132fc62-f9f9-399f-92a9-02aa5d4c0266.roa
File:                     c132fc62-f9f9-399f-92a9-02aa5d4c0266.roa (raw, json)
Hash identifier:          qwr1mlK8VgVwLBNxFl4nfZ9amEQwJW/yImP4Ek4JRxU=
Subject key identifier:   C3:5E:B5:88:52:E6:44:7C:5D:A7:AE:79:7E:FA:9D:F5:11:25:31:26
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F43285847E78F6A679726A14C9917BB80
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c132fc62-f9f9-399f-92a9-02aa5d4c0266.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     401317
IP address blocks:        129.19.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:6a:67:97:26:a1:4c:99:17:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=896a6d9d-4a5d-4d4c-8805-2c28796034f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:93:82:02:61:69:f0:98:91:a9:43:3d:ab:ec:
                    c8:60:68:e4:ed:24:f0:fd:72:be:1b:a8:b3:ee:55:
                    7b:08:8e:97:fa:05:fb:89:77:1f:5c:35:17:85:e3:
                    2c:c7:37:35:67:fe:d7:ac:33:9c:a6:77:ab:7e:81:
                    91:0a:da:38:37:db:5d:5f:01:8e:12:eb:de:ca:e3:
                    e3:c2:8e:7f:aa:8e:10:88:50:b4:e9:6a:f1:b3:62:
                    83:80:e1:df:d4:3f:92:4d:d9:0f:8d:05:1d:42:63:
                    df:01:86:14:0a:03:9e:ad:3e:e1:c8:95:00:70:a3:
                    be:aa:40:d9:67:1d:25:be:9a:fe:27:05:b5:bb:8b:
                    ef:40:7c:a4:66:7d:5b:71:ea:a3:e1:b5:89:f7:d7:
                    66:97:31:70:ee:ca:30:d5:95:da:f6:c1:59:79:47:
                    91:05:ac:ae:86:4e:45:e5:9c:18:10:99:3c:86:84:
                    78:3d:83:35:24:cb:cd:71:cf:49:a6:2c:7b:9a:94:
                    25:37:e6:c3:b4:88:ba:a1:82:17:70:2c:c9:51:55:
                    bb:fc:16:1d:0f:1f:b8:15:22:3a:b7:f2:ed:6d:3e:
                    1a:2e:77:04:de:6c:63:41:54:43:13:95:89:c1:f8:
                    ca:f0:05:0f:5f:f1:c4:54:f9:3d:fd:5a:35:d5:82:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5E:B5:88:52:E6:44:7C:5D:A7:AE:79:7E:FA:9D:F5:11:25:31:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c132fc62-f9f9-399f-92a9-02aa5d4c0266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:85:85:90:08:b5:41:91:c4:5e:3b:25:8a:44:81:ca:48:c1:
         6e:90:33:f8:7d:b6:cc:d5:7f:0f:7a:d5:b4:e0:93:72:dc:f0:
         e6:b9:03:8e:c8:2a:cc:13:1e:c5:1f:87:84:41:e5:65:8e:75:
         eb:ee:6e:b4:c2:d7:64:0f:aa:ab:6b:6f:9a:24:3f:4b:bb:ee:
         0e:de:28:4b:61:27:b0:69:aa:11:ab:37:3e:0b:3e:cd:98:cc:
         ba:95:b0:00:fc:43:76:02:ad:60:76:76:f7:06:de:fc:2b:c3:
         3c:8e:84:a4:13:cd:6f:f8:90:ad:06:28:0e:07:e1:ad:1d:05:
         7e:af:1b:45:3b:af:36:75:ff:aa:4d:2e:26:ba:02:f8:05:d8:
         4d:fd:16:32:ad:e0:8d:ef:65:0d:23:42:4b:97:86:89:18:92:
         ff:4e:f3:6a:74:0e:fc:1c:7b:9e:12:05:06:ff:70:54:f2:96:
         b6:26:e0:ff:b8:e0:46:59:5a:12:6f:05:4e:f4:92:11:af:62:
         a5:94:9a:48:a8:7e:20:64:a8:a0:de:13:8f:05:88:0b:c7:38:
         89:c4:de:b2:fd:c4:e3:4f:f4:e1:25:d7:5b:6e:f8:6b:e4:ab:
         12:cf:c1:7c:7b:de:db:30:0e:08:a8:30:21:bd:c0:84:b9:1e:
         21:d1:20:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org