Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/1880f56c-4c60-3799-8a7d-e46c7589380a.roa
File:                     1880f56c-4c60-3799-8a7d-e46c7589380a.roa (raw, json)
Hash identifier:          M/UlAAoNo3RWJ/B08aSg3fNXCm4msTesaRlMl3ukBxE=
Subject key identifier:   2E:41:3F:EC:29:F1:F1:97:D5:F2:F4:3B:33:A9:CD:FA:7E:EF:BE:F6
Certificate issuer:       /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial:       010D0C9F432858467DAA435BA7EC781ABDC69E20
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/1880f56c-4c60-3799-8a7d-e46c7589380a.roa
Signing time:             Wed 10 Jul 2024 10:52:07 +0000
ROA not before:           Wed 10 Jul 2024 10:52:07 +0000
ROA not after:            Tue 08 Oct 2024 10:52:07 +0000
asID:                     6461
IP address blocks:        134.195.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7d:aa:43:5b:a7:ec:78:1a:bd:c6:9e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
        Validity
            Not Before: Jul 10 10:52:07 2024 GMT
            Not After : Oct  8 10:52:07 2024 GMT
        Subject: CN=3f3586ef-101b-4610-92eb-ce1df2dadce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:2e:15:fa:16:9b:7a:84:5f:49:df:97:4a:
                    99:ea:48:93:0d:63:a2:fd:81:20:91:3d:fd:cb:ae:
                    b2:a6:c1:81:2c:6b:ee:d9:cd:b4:b6:fe:3f:27:a9:
                    72:09:5f:7c:e8:e2:93:83:ad:94:4c:72:76:70:ad:
                    bd:d7:30:2f:26:d8:bf:9f:f8:30:9d:5d:45:bc:54:
                    c5:69:28:05:da:3a:87:a8:b9:20:03:aa:bc:df:4d:
                    af:24:85:2f:6f:92:66:18:ac:45:a5:e8:4c:4a:6b:
                    01:f8:37:6b:4e:d4:2f:9a:36:81:9d:69:1a:da:66:
                    04:45:d7:ff:98:7a:57:6a:aa:7e:27:96:23:8c:8b:
                    49:e8:4f:da:af:9d:f9:30:34:97:95:8d:00:49:ef:
                    d6:ed:e3:49:9b:03:e7:89:36:fd:ab:48:bc:27:4d:
                    40:50:50:83:ff:7b:dc:9e:00:a8:0f:7d:fe:e8:21:
                    30:6c:d9:5c:bf:84:85:63:52:fe:63:fa:9d:4a:11:
                    93:6a:92:79:79:bf:3b:9b:70:d5:8c:b7:aa:92:81:
                    a3:a2:a8:dc:c7:ab:2e:e7:22:21:b5:43:40:a2:ca:
                    72:19:d1:c2:01:bc:9c:34:ea:81:1a:39:e2:99:aa:
                    b0:52:75:87:77:fe:40:32:ce:d5:5b:01:45:6b:29:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:41:3F:EC:29:F1:F1:97:D5:F2:F4:3B:33:A9:CD:FA:7E:EF:BE:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/1880f56c-4c60-3799-8a7d-e46c7589380a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl

            X509v3 Authority Key Identifier:
                keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:7d:7b:b6:3e:68:04:c8:42:73:48:c9:2b:d0:9f:b5:58:2b:
         1d:0f:7e:c1:46:9c:e9:51:2f:1e:0f:3f:a8:7d:9f:61:08:c3:
         78:07:66:87:ba:15:e4:0d:d6:1c:72:07:1e:5f:57:36:d3:76:
         cc:29:c2:dc:82:8b:ed:6e:2d:87:42:cb:98:e9:5c:c5:25:70:
         98:35:9c:c8:e1:b2:be:41:38:c4:4e:69:80:ee:6a:53:ab:66:
         8b:20:51:ef:f8:9f:cc:3f:43:cb:bb:e4:c8:49:cb:a7:25:b3:
         68:4c:4f:bf:7c:ef:96:fb:a6:5c:bf:47:99:65:a7:8a:db:84:
         f0:0e:ff:be:4d:5a:d7:84:5f:26:0f:e0:07:1d:37:02:37:d6:
         7f:92:e6:59:46:da:3b:56:c9:64:10:ed:e3:4b:2e:2e:2c:21:
         ea:e8:6e:f7:e1:b5:1d:92:b8:1c:88:2a:87:e5:57:eb:a5:31:
         b9:09:7e:55:46:12:11:a3:39:1d:a5:05:7b:d1:92:39:5a:71:
         73:33:bb:bb:53:02:9e:6f:06:dc:c8:38:e0:59:cb:52:e6:40:
         46:fc:78:64:a1:7d:e4:1a:5a:ba:6a:3c:49:60:24:98:e6:7d:
         70:eb:11:08:a4:c6:6d:49:34:3f:ab:e6:76:14:ae:0e:79:d9:
         f9:d8:e2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 19:18:47 2024 by rpki-client on console-fra.rpki-client.org