Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/5f16356a-9348-336f-aee4-e4ace7aff025.roa
File:                     5f16356a-9348-336f-aee4-e4ace7aff025.roa (raw, json)
Hash identifier:          ZjnZtCLufGzN2BTaBfl1AibvxQcUp9WK+rxfPTlxLzw=
Subject key identifier:   C8:0C:32:FF:43:5D:52:61:A5:2C:FA:DA:1D:3F:C3:B9:E2:28:4C:D1
Certificate issuer:       /CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92
Certificate serial:       010D0C9F432858471775C7C1CBE662C4CB56FB00
Authority key identifier: D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/5f16356a-9348-336f-aee4-e4ace7aff025.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     3851
IP address blocks:        131.216.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:c7:c1:cb:e6:62:c4:cb:56:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=a2a66b03-8812-4821-8d5a-092dcca8aff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:81:ea:cc:72:f8:71:9b:78:0c:4b:cf:00:c7:
                    56:22:b6:f2:1d:fe:fc:30:8b:8e:6d:b9:1a:c5:d8:
                    dd:e3:a3:ea:ef:3e:d9:d9:77:eb:b9:44:53:71:86:
                    db:92:b0:02:45:8e:36:01:1f:46:02:21:f3:22:9a:
                    82:fb:48:97:47:c6:c8:58:24:ea:72:69:c3:c0:75:
                    cb:bb:39:f8:04:c2:74:9f:cb:b6:31:14:3d:56:b3:
                    86:ea:32:c3:16:5d:52:1f:9b:85:83:a4:fa:1b:cd:
                    8d:68:da:c0:e3:cb:bd:f7:1a:6a:d4:2a:5a:9f:61:
                    13:11:f7:9b:a2:bc:87:c9:47:86:82:ff:66:37:80:
                    b7:cc:9d:f9:74:7e:d9:83:f8:2d:da:ec:59:4a:c0:
                    ff:b5:68:ac:fe:b3:1e:63:2b:14:a4:49:d8:d8:90:
                    ef:27:33:14:ba:d1:39:f2:4f:1d:67:63:f4:4b:5c:
                    d3:82:a6:e4:5a:41:97:cc:51:7d:ad:46:33:d9:a1:
                    fd:ac:b4:67:5a:e2:a7:02:58:17:95:9e:ef:ee:9e:
                    25:09:1f:7b:e0:86:0d:2c:46:c0:11:b0:0a:3f:4d:
                    b0:29:3e:f6:4b:f3:b4:19:a3:86:ea:1e:8e:0b:44:
                    32:07:52:01:f0:72:be:b2:5d:a4:5a:1a:28:13:d8:
                    31:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0C:32:FF:43:5D:52:61:A5:2C:FA:DA:1D:3F:C3:B9:E2:28:4C:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/5f16356a-9348-336f-aee4-e4ace7aff025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.crl

            X509v3 Authority Key Identifier:
                keyid:D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.216.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:8e:bd:bf:37:9c:7d:75:79:53:6b:1a:c0:a7:bb:96:90:a8:
         ea:2b:5e:82:e0:ec:91:c1:e6:72:83:3d:39:06:0c:d8:c9:f5:
         27:6c:3a:9e:44:cc:b7:2d:60:53:06:bd:28:98:0c:7e:e4:a8:
         8e:af:80:c0:d5:17:90:12:78:89:a9:d7:02:09:ba:31:f0:ae:
         49:b4:2b:f5:78:3c:66:32:98:c2:32:bb:c6:a0:02:f8:3b:00:
         38:fd:e1:95:6b:e8:1f:37:3c:a7:bb:09:df:6e:e1:ca:fb:7d:
         e2:ec:d2:79:4d:2f:01:df:68:66:fb:76:96:1d:d0:63:d9:a7:
         09:2c:1b:f3:07:e2:f6:ef:d0:80:82:1f:30:ef:40:28:63:d5:
         6e:7a:be:c7:9c:e6:a4:f8:a3:de:74:84:ca:21:d8:30:b8:48:
         bc:0b:95:62:3c:83:a6:f7:a9:e7:6c:2e:2a:2f:ea:8a:2a:9b:
         dc:41:fb:e9:2f:24:8e:c1:ee:2b:7f:2b:b3:1e:10:37:3e:60:
         33:0d:e2:bd:2c:06:3b:ba:a2:86:00:76:4e:70:b5:77:61:cd:
         2f:65:7c:0f:3e:84:20:64:2c:99:b1:3a:e9:c7:5f:cb:24:22:
         65:ec:44:1e:04:6b:a4:98:f8:f6:1a:c1:3d:de:a7:aa:c6:47:
         28:fc:cd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:39 2024 by rpki-client on console-fra.rpki-client.org