Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa
File:                     34c75caf-5f31-3ddf-b113-d584f51f166e.roa (raw, json)
Hash identifier:          k7qwzeCpKWBWy+DZJ9lCa8Y0cdGbuzuyjOPPV+A0i/w=
Subject key identifier:   22:70:7E:B8:5E:3A:4A:DF:15:F4:01:EC:61:4C:C9:A2:70:6C:7B:CA
Certificate issuer:       /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
Certificate serial:       010D0C9F43285845BA7E2E4C019ADB9A4B47C180
Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     8075
IP address blocks:        204.209.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:2e:4c:01:9a:db:9a:4b:47:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=5ca6848d-34ab-4442-97ed-cc8f76d06ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:71:5f:5c:21:25:19:86:be:11:76:58:41:36:
                    8e:04:ad:d7:01:0d:2e:14:57:78:d1:a5:e9:56:4f:
                    7d:00:60:0b:9f:0a:66:1d:a5:ef:0f:2d:01:91:69:
                    8d:70:28:6f:61:13:64:74:ee:5b:37:f0:a7:8c:0e:
                    81:0b:81:99:93:ac:cd:1b:e5:1d:5c:64:b6:a9:57:
                    30:6b:c2:10:76:e8:80:f3:a5:77:ab:14:67:52:a6:
                    fa:40:fe:7f:6b:f9:8a:4e:2f:9b:41:5c:ef:1f:ed:
                    d9:e3:8f:40:e4:f5:0f:5d:77:75:06:9e:1b:d5:ef:
                    e2:e2:a1:c9:51:6c:f7:8e:c9:cd:5d:47:ce:63:78:
                    16:ba:07:81:7b:00:fa:74:80:2e:b9:34:63:1b:ca:
                    21:5d:4c:2b:82:f1:54:ca:1b:86:04:f3:73:4f:22:
                    c2:2d:41:69:58:5e:5d:2c:d4:b6:3e:67:e1:13:a2:
                    13:2e:fe:9b:2b:b9:61:69:e3:5a:07:76:7f:78:dd:
                    ff:fb:d6:53:f6:a7:04:ca:9d:26:09:fa:27:09:10:
                    b9:95:61:0b:6c:93:b8:9c:4b:46:6f:bc:c0:41:6e:
                    8a:d8:ca:b0:91:c4:34:61:ca:b4:8f:37:7b:6a:75:
                    3b:0a:fa:81:06:3d:6a:a9:df:56:5e:32:4e:f8:d1:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:70:7E:B8:5E:3A:4A:DF:15:F4:01:EC:61:4C:C9:A2:70:6C:7B:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl

            X509v3 Authority Key Identifier:
                keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:9c:ff:fd:99:e5:b3:cd:25:12:90:ed:d1:ac:e7:29:13:48:
         f6:fa:e4:34:ea:82:19:7f:56:79:8f:e3:a9:38:ff:3f:99:b3:
         ab:26:c6:b8:66:c2:93:90:20:d5:53:7c:5b:16:04:55:92:0d:
         5c:3f:32:70:3e:00:ed:4a:dc:4a:05:3a:b3:50:80:90:42:69:
         5b:c9:76:96:aa:fb:cd:0e:c6:0f:04:45:ef:a8:38:91:e8:d4:
         17:51:3f:dc:25:b5:74:62:67:fc:95:27:9e:ca:30:17:aa:23:
         b0:8e:a4:ff:5b:74:6f:1c:ec:8e:c5:69:05:14:5a:29:70:d6:
         67:fe:cc:29:66:ab:93:a5:00:61:e1:12:7c:f4:e4:97:f7:d2:
         24:06:c0:ff:94:3d:05:c8:d7:a9:52:3b:a8:50:5b:ad:61:76:
         86:52:47:41:74:7b:cf:f5:72:3e:db:86:8e:d6:38:4a:a6:cd:
         3c:71:33:f8:2a:a6:c3:cc:b2:e0:c1:0b:f1:5a:96:2b:a3:2a:
         73:c1:c4:93:ab:f3:c0:b4:12:2d:98:2b:b6:f2:3e:5d:20:de:
         db:7b:b5:d7:a8:4f:be:0e:33:6c:b4:cb:aa:69:a9:b7:1c:5b:
         d4:38:17:d8:6c:a3:2d:5d:1e:77:42:5c:61:4c:0c:1c:26:bd:
         3d:72:a9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:58:23 2024 by rpki-client on console-ams.rpki-client.org