Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/359d03d3-28a8-3f41-b79d-fc8a2087fd2f.roa
File:                     359d03d3-28a8-3f41-b79d-fc8a2087fd2f.roa (raw, json)
Hash identifier:          O3e68czmaIh/WpYZMiGn3t6muBBePh3pN0BDjQbpluQ=
Subject key identifier:   EA:CA:65:A2:74:AB:BA:BC:61:EB:CF:44:E1:B3:65:49:A0:F1:C7:E6
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584769D0D7457F823938C34F7F00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/359d03d3-28a8-3f41-b79d-fc8a2087fd2f.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     21859
IP address blocks:        128.1.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:d7:45:7f:82:39:38:c3:4f:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=d27c6288-597e-4957-95f5-4ca0d899ec5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:20:b3:1b:db:db:89:45:d5:7e:ad:d9:5c:
                    36:34:09:89:e5:2b:28:4c:65:6b:3f:cb:8e:80:44:
                    59:1a:ad:37:51:6f:46:b3:78:48:97:63:b2:d4:bd:
                    42:8f:ee:7c:ce:f2:7f:0f:70:b9:ae:a2:f4:83:7e:
                    bc:d1:5d:55:b7:d1:7c:ac:c1:7b:50:eb:2c:c2:de:
                    cc:27:b5:11:8b:8f:13:77:cf:47:e2:80:bf:cc:b2:
                    0f:45:7b:19:98:10:18:53:28:3c:98:f4:f2:3c:23:
                    72:73:3a:9a:aa:32:29:7d:56:e2:95:fd:69:97:1b:
                    3a:76:22:46:20:4a:44:be:58:d8:6b:45:f2:fc:49:
                    82:6d:0f:c2:aa:f1:b6:76:9b:5f:81:65:60:58:82:
                    7c:1c:94:0c:e1:34:22:71:12:dd:65:d0:f3:c8:d3:
                    f9:a1:1c:e0:f9:2b:25:7a:35:05:a7:7b:10:ce:c9:
                    3e:15:fc:d2:65:4a:d1:71:d5:cd:16:85:df:ea:e2:
                    94:95:b9:02:1f:67:57:eb:be:0d:b7:6a:0d:03:ef:
                    b7:a6:56:4a:51:00:42:15:80:1a:5f:45:af:2a:b0:
                    17:bf:17:b7:52:77:6f:49:14:b7:da:2d:0d:0d:95:
                    79:62:0d:80:ba:5d:15:74:d0:42:69:98:ea:af:c0:
                    63:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CA:65:A2:74:AB:BA:BC:61:EB:CF:44:E1:B3:65:49:A0:F1:C7:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/359d03d3-28a8-3f41-b79d-fc8a2087fd2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:f0:6d:e0:4a:e1:e4:88:75:2b:51:a5:f4:35:7b:35:3e:ff:
         35:33:12:e0:71:98:0c:05:e4:a8:21:16:e2:1e:ff:f3:af:81:
         12:52:2b:c8:5f:ea:82:81:1c:92:0f:65:17:a9:6a:65:63:77:
         ab:82:42:a9:e4:a2:61:c8:d4:15:b8:c6:b3:d9:e4:25:46:b0:
         35:67:6e:f0:a6:fd:59:dd:c9:99:9d:b2:98:e0:d9:db:5a:75:
         2b:0e:95:fa:8b:fd:41:6c:60:f4:db:56:e6:15:00:cf:a3:a0:
         dd:02:35:ac:0e:cc:fa:1f:a2:f9:9e:17:d4:f1:8a:0f:f0:d4:
         b2:da:fc:a0:7a:2e:d6:b7:10:0a:5e:bd:24:29:db:f1:6a:fd:
         70:8f:94:6f:1c:e4:39:5b:c6:38:75:f7:fe:3f:ee:8a:a0:db:
         e7:a2:74:6c:b2:72:7b:2c:b8:da:22:0a:bf:5b:17:59:5a:5c:
         1d:01:15:61:52:65:4d:5c:f6:19:31:4b:a4:f2:f9:bf:1b:53:
         05:68:7a:4e:22:05:46:41:b9:76:29:ae:fb:96:46:b6:5b:9c:
         f1:1a:ac:4a:97:45:f5:ea:03:8c:d3:91:05:f6:53:e5:5d:ab:
         ee:54:bb:1b:7e:50:bf:21:9d:31:65:43:d5:e5:dc:87:8b:35:
         4c:31:f7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:27 2024 by rpki-client on console-ams.rpki-client.org