Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7715dd69-28d9-33d0-96a6-7ff8d2f93a96.roa
File:                     7715dd69-28d9-33d0-96a6-7ff8d2f93a96.roa (raw, json)
Hash identifier:          OSbT6hYfi7CEJ+Z60dS8Q5rHvKYNT431bzBzf9GUGUM=
Subject key identifier:   C0:57:4F:22:59:D4:5F:51:25:43:E1:F0:7C:24:F4:DE:3A:5E:53:75
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628DE6F6DE512D4A22A7A900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7715dd69-28d9-33d0-96a6-7ff8d2f93a96.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11351
IP address blocks:        47.231.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:e6:f6:de:51:2d:4a:22:a7:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=5859563d-ac5b-4eaf-bab8-dec84deec450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:6c:63:0d:17:23:f1:d4:83:46:cc:2d:b6:
                    8e:67:16:7e:fe:7c:82:c4:e9:22:46:9b:7a:c0:8e:
                    d4:85:0b:9a:0d:be:ef:f5:53:ca:7b:dd:1d:58:67:
                    87:1f:65:69:92:ad:92:3e:ff:b0:16:32:cb:28:e0:
                    2d:13:9e:6f:61:f4:1c:f4:c0:25:4c:98:b7:83:78:
                    5f:14:52:4a:0e:a3:a9:48:e2:98:66:27:65:05:d2:
                    16:ac:7f:bf:76:31:ac:6f:e4:f3:80:ce:9d:01:3e:
                    bf:5e:af:6f:62:a7:30:db:67:07:41:b8:ca:41:9d:
                    39:e4:cc:31:9f:ae:13:28:f8:54:bf:6f:0f:74:5a:
                    a8:b7:98:18:8f:2b:d8:46:e7:14:c7:24:44:ed:3f:
                    e1:79:94:a5:a8:eb:2c:db:56:ba:c0:9a:db:a6:fc:
                    49:24:da:fd:70:15:bf:04:ca:40:4b:a1:e1:72:07:
                    32:25:70:33:5a:ae:69:3e:10:a4:68:37:62:f8:1b:
                    ff:d1:30:48:a9:33:bb:28:7a:9e:56:be:41:32:8b:
                    20:c2:aa:71:78:32:47:87:c8:e5:27:14:03:17:b2:
                    d6:82:9a:87:3e:c7:16:61:cc:59:92:c9:78:5b:5e:
                    bc:2f:04:a8:fa:0b:4a:3e:33:e2:f2:1b:c9:b7:7c:
                    b1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:57:4F:22:59:D4:5F:51:25:43:E1:F0:7C:24:F4:DE:3A:5E:53:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7715dd69-28d9-33d0-96a6-7ff8d2f93a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.231.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:54:29:e0:db:69:5a:4a:21:65:cb:fb:4c:7d:15:cd:01:df:
         9f:7d:5b:36:e4:91:34:d5:5a:86:08:ee:82:a3:a4:1c:a6:f8:
         cf:7e:20:aa:c3:bf:2e:1c:64:85:87:bd:80:b2:01:e8:f5:22:
         0a:6e:3e:e1:c7:f5:c7:1b:ea:2a:3b:0b:97:3f:98:3b:1a:97:
         dd:b8:63:85:4b:9f:e8:e2:3c:91:b4:d2:84:0b:65:cd:69:fd:
         3f:03:c4:2c:db:11:6d:35:cb:b8:d4:3a:9f:f0:1f:1b:c3:a6:
         ab:4c:06:d0:2e:12:1c:a5:cb:70:33:a6:97:16:7a:03:c0:60:
         7b:ff:73:26:cf:5f:01:a5:9b:77:da:b6:0c:3d:df:97:58:3a:
         57:5b:e8:dd:f9:d9:88:c4:63:09:43:56:1e:94:43:86:2c:5a:
         ee:33:77:1c:cd:bb:a8:19:f2:e2:e7:c4:61:81:d2:4b:11:b0:
         53:ef:2e:49:e9:ea:b7:80:a7:01:8c:35:17:e5:5b:93:2c:30:
         b2:65:e0:ee:69:ea:0d:61:b4:3e:2e:ee:0a:ca:33:1c:57:a7:
         b4:b6:57:1f:a0:28:f2:bb:85:4c:18:a2:47:a0:80:9f:e4:11:
         94:29:2c:e2:83:d5:9a:0e:10:74:9f:8c:f5:16:a1:18:c1:e0:
         d2:70:89:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 16:00:20 2024 by rpki-client on console-fra.rpki-client.org