Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/77a9f4bd-d644-3289-897d-5ca18f7a1ca6.roa
File:                     77a9f4bd-d644-3289-897d-5ca18f7a1ca6.roa (raw, json)
Hash identifier:          DND8s6DfVPkmvkRk7eBFtrY7I7kD7piQ9Z7F0jEQ3Wg=
Subject key identifier:   F7:18:2D:D0:77:89:B4:C7:8E:24:94:DD:2E:64:FD:08:8D:CC:91:6A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838479AE83DFE0631BC4DEFAA00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/77a9f4bd-d644-3289-897d-5ca18f7a1ca6.roa
Signing time:             Tue 15 Dec 2020 05:00:00 +0000
ROA not before:           Tue 15 Dec 2020 05:00:00 +0000
ROA not after:            Tue 08 Dec 2026 05:00:00 +0000
asID:                     33363
IP address blocks:        174.134.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:47:9a:e8:3d:fe:06:31:bc:4d:ef:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 15 05:00:00 2020 GMT
            Not After : Dec  8 05:00:00 2026 GMT
        Subject: CN=3fbc9863-6aa0-4c29-8551-adf8864ffb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:0c:f3:8e:49:d8:8e:b0:91:b6:f2:eb:c5:
                    90:25:a4:9a:1f:78:90:b6:a2:6a:19:8a:14:4e:de:
                    e7:10:3e:4d:8b:b1:90:c6:ae:c8:20:1e:69:66:8d:
                    f7:59:32:f9:2c:77:6b:04:0d:18:77:0c:f7:bb:05:
                    38:90:c5:ab:1f:c7:c2:f0:05:52:18:b4:e1:d0:60:
                    ba:56:ef:4d:0c:c6:66:0a:b9:37:26:85:32:63:2a:
                    4b:02:eb:4f:5c:ef:19:2c:b1:c5:72:b6:5f:69:22:
                    d2:81:bf:33:74:07:73:6f:82:29:36:40:98:3f:9b:
                    19:7d:6c:e0:9c:d4:66:bf:36:11:5d:3a:4a:bb:6b:
                    5a:0c:a9:db:88:de:9e:84:36:1a:81:14:97:d2:46:
                    73:41:5c:d7:61:c2:5e:77:15:4f:d4:45:49:b6:ad:
                    f0:8e:fc:43:d5:ce:d0:d2:8c:d9:f0:17:f0:8b:aa:
                    ce:28:37:19:15:49:03:ea:17:a7:59:84:45:63:9e:
                    12:e5:16:f3:65:4a:c5:e1:63:78:c9:b2:cc:55:da:
                    76:71:5c:07:87:d5:86:39:4b:cd:f2:a2:1f:44:3f:
                    c5:44:ae:e4:28:da:62:2c:31:84:41:a6:aa:f0:49:
                    e3:4d:36:ca:ef:d5:cd:55:e4:7b:28:ec:8e:31:6e:
                    94:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:18:2D:D0:77:89:B4:C7:8E:24:94:DD:2E:64:FD:08:8D:CC:91:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/77a9f4bd-d644-3289-897d-5ca18f7a1ca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c0:42:ae:5e:99:28:ba:47:e3:4f:50:f1:e2:31:f8:04:c8:
         70:78:f7:ec:57:36:97:b0:56:09:49:5b:61:72:1d:19:6b:06:
         2e:16:cd:b9:13:a9:35:be:44:aa:17:9b:0a:1e:59:6a:f2:3c:
         21:0f:06:fb:73:f6:b4:f8:f3:c0:01:45:74:88:f9:fa:65:96:
         27:53:78:7d:2b:9b:98:6e:b0:1b:f8:47:53:49:46:20:a0:54:
         b7:1c:68:cc:d4:cc:29:1d:07:db:3b:41:c5:ff:62:0c:09:5e:
         6a:5f:4e:42:0c:22:ba:3c:ed:aa:31:3e:00:8d:5a:c5:8c:c8:
         50:0c:25:fd:4b:59:e1:a2:1b:5b:02:72:f8:6f:c2:6c:e4:39:
         56:47:f0:b9:19:ea:35:76:a8:a1:0b:22:fc:ce:40:77:06:39:
         4c:93:95:3e:ed:c0:6e:d0:df:9e:cd:2d:cd:0b:73:fc:c9:8e:
         fd:3e:62:33:d8:da:b7:d4:2e:d0:5c:d8:a0:9d:5d:06:f6:5c:
         2d:83:6e:89:3a:56:81:5c:03:af:f1:66:66:a4:ac:7f:c4:31:
         d6:f0:c8:83:bf:7f:69:a8:fc:ac:f7:14:96:10:9a:29:2f:3d:
         13:d0:58:7d:60:f6:d3:e7:2d:03:4f:cf:97:b5:5c:22:1f:27:
         bb:ee:46:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:37:15 2024 by rpki-client on console-fra.rpki-client.org