Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7355733f-b374-3a9e-991e-62608414b78b.roa
File:                     7355733f-b374-3a9e-991e-62608414b78b.roa (raw, json)
Hash identifier:          vufzacWCQ9VRTMGaqQMI8Ay541o+KZIRj1sW5SwNPPo=
Subject key identifier:   06:1F:AA:54:A7:F4:90:1A:EE:EF:F8:D0:7B:FF:1E:38:EE:58:D3:35
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285845A15DFF3B57DEC39390FE88E0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7355733f-b374-3a9e-991e-62608414b78b.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     29538
IP address blocks:        128.1.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5d:ff:3b:57:de:c3:93:90:fe:88:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=0c53f718-f650-42fc-ac30-175690321cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:30:65:e6:3d:72:fa:8c:15:b5:c3:53:1c:
                    6c:cc:16:78:70:08:3f:96:67:d4:52:e3:f1:91:68:
                    45:47:d8:38:7b:e5:6b:75:09:8c:d4:30:37:f1:1c:
                    54:e6:3f:7e:d6:64:53:5f:98:26:35:d1:28:7f:09:
                    b9:c2:86:93:07:3d:b1:61:63:a8:28:c7:d4:99:05:
                    df:56:b2:a9:5c:6a:f2:9b:34:4a:14:04:41:02:f5:
                    71:e0:5b:33:6d:20:6b:38:bf:bf:14:01:f5:bb:ec:
                    54:f3:66:17:d9:2e:ce:55:eb:1b:2c:cc:4c:06:01:
                    78:66:aa:fe:2d:b9:6a:cf:32:ef:fa:5d:73:29:5f:
                    60:65:05:af:a7:0a:aa:b6:7e:26:2d:a9:57:cc:f5:
                    fc:bc:fb:83:b3:9e:b3:fa:43:07:ae:e2:de:3d:44:
                    c0:12:74:c9:2e:4e:b1:a7:d2:a3:b5:59:ea:97:fd:
                    d0:48:7c:69:58:07:7f:44:57:22:82:86:4f:47:e7:
                    7c:cb:7c:16:62:96:58:7a:3b:1b:66:70:13:d2:9c:
                    64:02:35:78:58:23:e2:be:c2:a2:d2:f1:7f:f3:c3:
                    68:36:0b:db:bd:a9:09:1e:db:67:94:4f:01:61:41:
                    7e:17:29:7d:8a:7f:fc:82:a6:07:9e:65:e8:84:06:
                    de:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1F:AA:54:A7:F4:90:1A:EE:EF:F8:D0:7B:FF:1E:38:EE:58:D3:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7355733f-b374-3a9e-991e-62608414b78b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:4c:87:c7:f7:b2:74:ee:f1:43:d4:3e:d7:2c:1f:87:1a:32:
         0c:f6:15:bd:a4:0a:22:d7:ba:5b:8f:31:e5:26:11:c8:e1:5d:
         7b:95:ee:d6:56:c4:da:bd:bf:b5:8f:1d:bc:c6:bf:c6:da:75:
         9f:20:79:c5:44:8e:ac:0a:83:66:6f:5d:e0:d8:0a:37:b1:d9:
         cb:bf:95:c0:9e:e5:fc:5a:5b:94:84:46:a5:27:47:f8:c2:f2:
         8a:86:a5:84:c9:5b:fc:0d:b6:3f:d7:5c:66:e0:b8:eb:8e:a1:
         94:8d:04:e0:41:80:83:a1:8b:97:2e:7d:0b:a1:66:2d:b3:c3:
         98:49:a5:b3:b9:79:2d:1d:a1:ff:b5:13:ec:26:06:ac:ce:99:
         f2:07:24:5f:e5:ec:6f:52:ee:ed:26:eb:04:4c:fd:96:3c:76:
         93:33:fd:1c:81:98:21:0e:6e:38:18:a4:c1:21:1b:4e:33:3c:
         71:c6:45:ab:8a:23:b3:fa:42:8b:29:3b:09:d1:0b:9c:ed:65:
         52:b3:a3:62:9e:f2:49:27:40:f2:0f:83:e7:e0:99:cb:c0:ea:
         92:5e:ef:45:f0:21:34:af:e3:d7:a5:35:59:91:bb:3d:cf:97:
         26:68:53:a4:ae:bc:0d:1a:0b:c2:20:0d:73:2a:7a:65:ae:70:
         74:d9:84:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:03:56 2024 by rpki-client on console-fra.rpki-client.org