Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/78547236-3f10-365d-86ff-3920070fd3ad.roa
File:                     78547236-3f10-365d-86ff-3920070fd3ad.roa (raw, json)
Hash identifier:          jXTKtu/MzEYJ+BlrCqHXq0c0X48iIeKtQoVFeV8YyPU=
Subject key identifier:   23:DD:C2:E0:82:5B:84:17:C6:3F:EC:D6:95:71:92:84:B7:83:E1:1D
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DED7D8BE4BA24A7CFAAE0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/78547236-3f10-365d-86ff-3920070fd3ad.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     46129
IP address blocks:        159.18.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:ed:7d:8b:e4:ba:24:a7:cf:aa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=9dc0de41-3b92-4e6a-a288-e6e81e2d89bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d4:42:a3:b7:5a:9b:af:20:4f:fe:b4:5c:b0:
                    e6:32:35:a1:e7:42:80:46:2a:fd:d1:39:3c:09:cf:
                    7c:e9:88:dc:ef:3e:ab:2e:be:88:30:8d:82:de:69:
                    c0:af:7a:20:cc:a3:5f:24:5f:8d:10:cf:3c:b9:79:
                    db:e8:85:9e:34:77:bb:22:bb:d8:ae:09:c9:37:54:
                    b4:c2:be:35:0b:c8:37:45:18:db:50:27:1a:39:e3:
                    93:47:cb:fc:89:b8:c0:b7:a4:9a:a2:05:c3:8a:a4:
                    70:6d:b5:5f:7a:67:fe:01:84:bb:be:d7:20:d5:20:
                    a9:b0:5b:28:91:08:0e:0d:74:8b:0d:ff:67:ea:15:
                    a7:fc:49:fd:32:9f:a4:f4:49:0d:fd:c7:0f:26:6f:
                    46:f3:3c:cb:f2:7a:8c:13:bf:c8:0b:69:bb:3c:b7:
                    77:00:19:a6:6f:c9:d5:9b:69:a7:01:5e:f7:75:46:
                    32:23:be:49:ee:d3:9d:53:7a:76:25:43:fd:04:b4:
                    7a:50:1e:9b:3a:f3:0f:6b:dc:2b:97:13:10:be:f0:
                    9d:90:44:cb:3d:55:66:62:34:83:e9:df:54:0c:13:
                    5f:35:e3:32:dd:32:92:a2:83:b2:62:3b:46:0f:ca:
                    0d:94:02:07:cb:95:a2:6b:71:ad:9b:f7:c7:00:9d:
                    f4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DD:C2:E0:82:5B:84:17:C6:3F:EC:D6:95:71:92:84:B7:83:E1:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/78547236-3f10-365d-86ff-3920070fd3ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:1b:94:cb:d2:38:d6:88:cb:88:a3:bc:3a:d6:9f:f5:f6:92:
         55:66:40:20:96:a0:ec:f6:32:8b:b5:c2:8a:02:ea:e8:26:2a:
         bc:73:d1:11:7d:dc:d9:db:46:20:e2:67:05:05:1e:d4:0f:07:
         97:6c:64:99:96:d8:ab:26:16:6d:f2:87:bb:56:64:52:c1:65:
         3f:57:25:b7:9b:a8:f4:d6:ac:fc:a8:6a:05:54:6e:d8:4a:ad:
         7c:12:be:4c:77:c1:e0:2c:83:35:e5:1a:59:e1:60:cf:ac:08:
         74:ba:8d:65:b6:e1:80:48:d9:cb:ac:76:6a:98:6c:25:c8:19:
         45:ae:e2:90:46:65:4e:24:40:ec:23:72:a4:a7:7a:01:e8:22:
         6b:1f:3c:d8:d3:99:6a:d2:b6:17:f0:61:53:d1:04:a8:ca:e1:
         0f:54:cb:01:77:ba:11:f4:36:c0:53:bb:72:08:9e:1e:09:c6:
         57:a6:7a:e6:e9:5a:3b:4c:e5:68:af:31:3e:38:39:ac:79:bb:
         d1:2b:a1:5e:66:bb:51:10:e3:33:2f:a3:c2:ed:c2:90:94:21:
         17:5f:10:14:99:30:ca:67:ea:6d:3e:a2:aa:fa:ff:80:f7:af:
         5d:73:51:fb:9c:22:e6:cb:1d:be:ba:8b:6d:0b:6a:7e:f6:62:
         2f:b7:18:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:10:43 2024 by rpki-client on console-fra.rpki-client.org