Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/436267ae-bf59-3390-b958-3a31c5690391.roa
File:                     436267ae-bf59-3390-b958-3a31c5690391.roa (raw, json)
Hash identifier:          XBTUHHfJClxgIDokIkDBc9wT4StVr0oltrh3JLU/VDo=
Subject key identifier:   DF:92:7A:99:7A:0A:B7:C1:FD:D4:CE:A1:DA:0C:A5:B0:BB:C6:4D:C4
Certificate issuer:       /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial:       010D0C9F4328584510502A32E73B9745F1A28680
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/436267ae-bf59-3390-b958-3a31c5690391.roa
Signing time:             Fri 01 Mar 2024 14:00:30 +0000
ROA not before:           Fri 01 Mar 2024 14:00:30 +0000
ROA not after:            Thu 30 May 2024 13:00:30 +0000
asID:                     18994
IP address blocks:        162.134.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:50:2a:32:e7:3b:97:45:f1:a2:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
        Validity
            Not Before: Mar  1 14:00:30 2024 GMT
            Not After : May 30 13:00:30 2024 GMT
        Subject: CN=59df058c-7b52-446a-8101-743b6e4b8f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f6:62:fa:44:cb:31:44:51:f0:1d:dd:48:ae:
                    95:d6:d6:0e:f0:40:81:6f:7c:05:c5:ff:dd:2f:f7:
                    79:bb:7f:b2:38:58:59:cc:38:d5:4d:0c:60:5d:f9:
                    7c:75:5b:84:00:93:20:4d:bd:f1:ae:fd:33:e3:b7:
                    0d:9b:1f:24:04:a7:8e:df:7d:b8:0a:b0:2c:6e:b0:
                    32:e8:e5:cd:72:0f:a0:63:10:0a:fe:b6:df:0c:44:
                    25:22:53:9c:1c:90:78:7c:5d:dc:27:dd:af:87:7b:
                    1f:9c:3e:71:4f:7a:36:3a:6c:4a:83:a0:67:57:19:
                    5e:01:13:64:14:af:7b:48:61:df:3d:3b:4b:86:ef:
                    58:a4:43:8b:a3:1a:05:4e:99:a6:37:64:1d:32:3f:
                    3d:f7:5b:e6:fd:3f:25:8b:e1:7d:4c:11:72:27:37:
                    fc:72:f9:23:9b:9b:c1:61:0c:ad:3e:e5:fe:4d:2a:
                    39:e6:df:a4:24:e7:b6:34:ad:fb:41:5c:34:d7:ed:
                    08:ab:03:e9:4e:05:c4:56:ae:59:12:0b:0c:62:ff:
                    f5:ab:30:a8:d5:16:16:c9:59:a8:e3:0d:08:1c:bd:
                    40:e2:81:67:c6:7a:63:cb:6d:82:3d:4a:a2:ef:33:
                    95:d0:fe:d7:7e:96:51:c4:99:06:6b:9c:a3:69:dc:
                    7e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:92:7A:99:7A:0A:B7:C1:FD:D4:CE:A1:DA:0C:A5:B0:BB:C6:4D:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/436267ae-bf59-3390-b958-3a31c5690391.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl

            X509v3 Authority Key Identifier:
                keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.134.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f7:3b:57:5f:2e:ab:41:b4:ec:19:f0:4c:f2:ab:07:52:7f:
         c1:a5:a3:b0:ac:d9:8c:39:8f:d1:d8:3e:71:de:27:94:98:9a:
         c2:89:5e:19:de:fc:ec:3b:d0:56:1f:8a:1d:79:8f:c2:38:3e:
         2c:5d:e9:6a:f3:37:3b:e1:21:d5:91:d2:53:3b:16:59:98:d2:
         56:ea:f7:c9:16:c1:f8:db:22:e7:7c:35:de:7f:24:f2:39:e6:
         8b:74:24:4a:ef:5e:33:a0:0e:4c:e9:1b:c4:72:5c:44:8b:d8:
         2b:f5:c2:75:5b:5e:57:cb:32:64:b8:a6:e2:ff:54:4d:61:3c:
         2a:c3:41:c7:ba:97:0e:14:d9:fe:c5:98:94:b4:91:79:64:7d:
         67:4a:24:46:f4:03:0b:9e:d6:62:b9:f8:69:3f:5e:31:99:5d:
         91:50:de:ef:7e:ad:66:de:8e:03:a3:59:c1:bd:b7:50:ee:2b:
         3f:1c:97:9e:8d:21:e1:70:36:29:24:c1:1e:95:4a:a6:04:b3:
         f8:be:be:00:10:43:98:99:fa:d4:2e:2d:e9:70:3f:8a:da:04:
         12:a2:29:79:90:8c:62:b7:50:1f:69:09:e8:dd:70:59:a7:2d:
         b0:e1:ea:3a:2d:83:2f:4e:53:17:7a:3f:96:78:97:56:fc:a0:
         22:ad:c9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:28:14 2024 by rpki-client on console-ams.rpki-client.org