Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1dea2b87-2ac9-378e-9508-bdc020438a1e.roa
File:                     1dea2b87-2ac9-378e-9508-bdc020438a1e.roa (raw, json)
Hash identifier:          Uh9418DsQVu/58KpObRRHEkEAehu8q7a5X267M46Oto=
Subject key identifier:   63:0F:C4:B9:AE:B9:99:78:22:DB:4D:3B:C6:44:64:61:B2:0C:7D:A8
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285845A9BE1A861E98B21E2E724480
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1dea2b87-2ac9-378e-9508-bdc020438a1e.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     62610
IP address blocks:        128.1.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:1a:86:1e:98:b2:1e:2e:72:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=33cddcbf-666a-4922-a749-494aecca9809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:a4:35:59:8f:04:88:a3:3f:b8:cb:51:a7:
                    b4:f7:60:c1:94:89:ca:01:af:5c:87:e3:13:47:db:
                    b8:b9:af:cb:65:74:36:b4:a0:08:32:86:94:b9:60:
                    91:78:d6:4c:97:94:6a:34:6f:2a:91:bf:90:cc:39:
                    49:9b:3a:2e:a8:2f:95:cc:91:1c:8b:56:01:5f:76:
                    83:19:2f:95:7b:33:f8:5d:a1:34:29:9d:b2:0d:54:
                    85:fe:1d:b0:43:49:b2:f7:29:51:e8:e6:62:36:22:
                    a9:25:0a:54:a4:57:51:ea:d0:cb:7e:bd:7c:24:5b:
                    23:c2:24:86:7b:10:bb:3c:25:92:b3:17:6d:49:b4:
                    cb:4c:46:80:44:be:9f:6d:6b:e3:ff:1e:60:50:70:
                    2e:a3:69:1a:b2:3a:88:7c:b7:4b:1e:8e:4e:e4:0a:
                    a8:b9:e4:f5:96:28:56:44:ec:1b:ae:aa:8b:a8:ea:
                    32:be:f5:e2:50:c8:2b:5e:0f:1d:42:40:67:7d:7b:
                    df:71:79:b9:c6:f5:40:71:1d:9f:bc:41:9a:ff:79:
                    d4:15:2c:8e:91:c2:35:25:97:43:77:ef:25:2d:60:
                    04:1b:86:b1:93:0c:5c:9d:ad:e3:68:fd:13:b8:96:
                    0f:84:8b:b2:72:0e:68:8b:b3:ac:c3:fd:ef:0b:ea:
                    1b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0F:C4:B9:AE:B9:99:78:22:DB:4D:3B:C6:44:64:61:B2:0C:7D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1dea2b87-2ac9-378e-9508-bdc020438a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:be:c9:24:df:6c:c4:76:e9:fb:9f:1f:c7:fc:fe:99:5c:b1:
         54:f6:79:a2:93:26:99:e7:a8:37:d0:30:ca:04:be:5b:ad:f4:
         65:22:4c:b8:eb:18:72:db:7c:c3:66:62:4a:bb:ad:e5:54:aa:
         0a:58:ba:0a:ab:f3:f3:72:17:bb:ae:4d:28:3f:9e:76:8b:78:
         44:78:63:03:c6:32:4c:a0:e0:65:60:c9:32:65:4b:df:f5:c6:
         66:23:34:72:d1:50:9e:b5:6f:ec:38:15:ed:5c:06:2c:19:90:
         12:72:15:0b:4b:fa:27:43:5d:e6:c1:a4:27:e0:d3:d5:d9:7d:
         2f:f0:c5:e6:46:a8:60:cf:71:d8:f5:f9:c6:13:c1:b6:cc:7e:
         a9:3d:f9:19:b8:fe:c1:a2:05:aa:b7:6c:5d:94:aa:2b:6e:4c:
         88:34:1e:36:15:1c:e1:b2:d6:70:56:a9:c0:11:74:5c:86:59:
         41:cc:8e:b5:4a:a5:9d:4a:22:26:dd:3b:11:ea:04:db:3e:99:
         d6:fa:3f:26:67:1a:fc:a8:71:d8:e9:b8:4e:e0:a8:b9:76:a1:
         5c:3a:69:a7:ba:c8:0d:07:80:24:da:71:85:12:81:25:69:6a:
         b7:f6:c0:20:e9:b3:c9:d3:13:a5:6e:86:a8:4d:b2:31:bb:a5:
         67:aa:cc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 06:38:43 2024 by rpki-client on console-ams.rpki-client.org