Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/2ae97979-16d5-393c-a787-3ce400c70ade.roa
File:                     2ae97979-16d5-393c-a787-3ce400c70ade.roa (raw, json)
Hash identifier:          JDXZXpYLrfYmbsugi9vQaMy2c1ZcaSS1f7ecU2qxmmY=
Subject key identifier:   EF:34:F9:11:E4:75:DC:5C:61:5D:25:16:89:B3:59:57:A5:BD:BF:9D
Certificate issuer:       /CN=143dcb45-9a31-4d19-a1e6-f07027b13219
Certificate serial:       010D0C9F4328584509556C6AE9183E75C23E2040
Authority key identifier: 1D:02:1B:AD:49:59:2B:A2:AD:2A:37:5D:4E:62:47:28:4A:33:C2:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/2ae97979-16d5-393c-a787-3ce400c70ade.roa
Signing time:             Wed 28 Feb 2024 02:00:26 +0000
ROA not before:           Wed 28 Feb 2024 02:00:26 +0000
ROA not after:            Tue 28 May 2024 01:00:26 +0000
asID:                     32281
IP address blocks:        23.140.184.0/24 maxlen: 24
                          2602:fb22::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/143dcb45-9a31-4d19-a1e6-f07027b13219.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/143dcb45-9a31-4d19-a1e6-f07027b13219.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:09:55:6c:6a:e9:18:3e:75:c2:3e:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143dcb45-9a31-4d19-a1e6-f07027b13219
        Validity
            Not Before: Feb 28 02:00:26 2024 GMT
            Not After : May 28 01:00:26 2024 GMT
        Subject: CN=573343b9-74f5-40d1-8573-182f859285b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1b:e5:32:a6:25:11:de:d4:db:e9:6f:25:93:
                    88:10:e0:4e:d4:f4:88:e6:dd:60:b9:b1:d1:0f:42:
                    6c:e6:fa:8f:c2:6e:1c:38:85:75:74:8d:bc:e7:48:
                    32:9b:02:6c:c7:7e:2c:0e:39:e6:18:c4:5f:7d:f8:
                    ce:64:87:90:2f:70:da:0a:46:c8:72:57:05:3a:49:
                    5d:b0:08:e5:cd:4c:1c:ef:1d:af:78:ce:5f:b5:1c:
                    16:51:16:20:7a:47:30:fc:8e:b6:52:4d:0c:6b:2d:
                    93:3f:52:63:6f:f2:d2:9a:51:07:85:d2:29:74:cc:
                    ef:8e:4d:f1:f4:db:e5:6d:80:e9:6b:2e:0a:91:0f:
                    4f:1c:6d:18:74:fd:1f:5d:90:5b:3e:a7:3d:07:1a:
                    10:c0:61:df:9e:96:eb:32:f9:4a:00:fb:4e:e3:72:
                    93:45:d9:10:18:b0:47:ca:e1:2a:7f:41:04:08:21:
                    ab:bf:7a:69:04:a1:52:a4:18:6b:27:6c:1d:80:ff:
                    9b:9b:e7:a2:bb:9e:5b:65:d3:be:a3:ae:a3:6f:3a:
                    97:92:65:cb:ce:72:fb:95:ed:58:81:0e:43:cb:be:
                    ec:75:27:bc:cf:65:96:fd:46:be:cf:b9:4b:5e:e7:
                    24:6d:01:74:38:7b:cf:93:14:56:d0:68:c8:6d:68:
                    52:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:34:F9:11:E4:75:DC:5C:61:5D:25:16:89:B3:59:57:A5:BD:BF:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/2ae97979-16d5-393c-a787-3ce400c70ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/143dcb45-9a31-4d19-a1e6-f07027b13219.crl

            X509v3 Authority Key Identifier:
                keyid:1D:02:1B:AD:49:59:2B:A2:AD:2A:37:5D:4E:62:47:28:4A:33:C2:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.184.0/24
                IPv6:
                  2602:fb22::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:2d:fc:e2:ab:2b:80:b3:f5:16:c4:4a:a4:51:15:b0:ff:9c:
         78:a7:98:59:fa:43:f2:65:6d:d3:d1:3f:48:f9:32:71:e2:3c:
         b8:3d:89:18:d3:22:22:6f:ce:2d:1a:97:47:4a:2e:9f:f0:ba:
         c8:0f:70:9f:e1:e9:d4:61:c0:6a:96:ea:30:4d:4f:71:e3:61:
         60:0a:79:77:d3:a0:e4:14:cf:91:a7:37:0b:5a:89:c7:52:96:
         75:fb:73:c1:88:c9:02:65:30:a6:69:c6:34:87:f3:d0:6a:12:
         3e:77:d6:39:1d:47:fe:03:20:d8:55:1d:64:d2:58:92:9d:6c:
         2b:10:6b:a1:00:6e:9e:5a:6e:be:8e:d2:e6:c1:92:87:dc:39:
         46:7b:3a:17:18:8d:1a:de:a4:24:43:d2:c8:b4:31:78:28:80:
         c8:0f:41:3c:86:8a:9d:c7:c7:5a:c5:2b:d4:04:64:94:36:0d:
         b8:77:e7:3d:98:e5:96:8f:60:bd:7e:db:c2:79:50:1f:c9:7d:
         33:f7:7a:4b:7d:85:f4:b3:a2:5e:b9:d2:8f:c4:d9:65:f5:4a:
         5d:28:04:0f:b6:06:01:41:01:31:f5:8c:3f:a1:b1:07:87:09:
         ee:15:36:76:19:e1:44:cd:15:ab:e8:37:21:3a:03:c5:2b:c3:
         36:32:94:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:00:37 2024 by rpki-client on console-ams.rpki-client.org