Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/576b1d7b-1627-3d93-915f-91e0366f9f95.roa
File:                     576b1d7b-1627-3d93-915f-91e0366f9f95.roa (raw, json)
Hash identifier:          z7wzkIcWrEHjvOuyflrqNSRmcZgDqoSVlP1yGr7T9LA=
Subject key identifier:   2C:E9:2E:DB:9B:FD:0F:FB:67:A9:58:6B:EF:05:1D:36:39:77:E8:F9
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285845E193C0434542B7D368243060
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/576b1d7b-1627-3d93-915f-91e0366f9f95.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     26421
IP address blocks:        64.129.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c0:43:45:42:b7:d3:68:24:30:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=6b065d57-8d09-43f9-8a0f-b88a3f56096a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:5c:3a:3c:ed:d0:d8:4d:9c:48:08:b6:33:
                    62:45:68:17:0c:f1:8c:f3:03:1c:b1:18:2d:f1:7f:
                    12:4d:18:e8:af:a2:7b:0a:5a:dc:ee:6f:0d:9c:92:
                    23:23:bf:17:e7:29:a2:9b:0f:a6:05:65:d1:88:1c:
                    e5:c9:89:3d:a2:18:e1:ef:62:cf:bf:93:0d:d0:59:
                    1e:e1:f4:8d:33:ea:84:bb:db:6c:72:dc:31:86:4e:
                    a8:81:8b:ea:35:f2:57:06:1b:dd:b5:01:e6:09:5b:
                    35:b8:80:36:e5:f7:6a:b6:5e:f8:8b:bf:3a:25:b3:
                    09:a3:df:2f:3a:09:ea:d0:77:d5:bb:5d:bf:04:77:
                    8c:98:81:25:25:d5:08:69:6f:41:ee:0f:98:64:78:
                    2d:7d:c8:4e:9c:df:8d:d0:26:c0:10:05:0c:be:7c:
                    d7:4e:72:01:0b:da:8c:5a:2f:1b:4f:1a:2b:be:9c:
                    bd:45:ba:e8:08:50:93:e0:93:2f:db:e0:06:1b:dd:
                    d9:d1:e9:2f:e2:b6:33:aa:f3:b2:78:dd:34:75:23:
                    e3:00:d0:3a:ab:17:a2:06:07:c2:3a:04:40:ef:52:
                    96:b1:87:d1:87:46:9b:99:11:5d:f5:94:3d:74:1d:
                    62:f3:4d:cf:80:7d:46:e3:1b:bc:f9:cb:d2:ff:2a:
                    93:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E9:2E:DB:9B:FD:0F:FB:67:A9:58:6B:EF:05:1D:36:39:77:E8:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/576b1d7b-1627-3d93-915f-91e0366f9f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.129.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:dd:80:7d:7e:a0:31:10:64:04:0b:1a:11:d6:68:67:03:f4:
         91:c4:83:ef:95:6e:ae:d1:ec:21:92:e1:92:6f:18:4a:94:ec:
         4a:fa:c6:88:8e:7d:47:0e:0b:dd:7f:d7:5f:bc:72:0a:80:ac:
         d6:fc:fd:97:de:3a:54:bd:23:5a:86:7b:aa:da:a1:24:ed:ce:
         7f:74:67:56:1b:70:9a:c5:4a:f2:dc:de:8b:9b:0a:be:e3:ba:
         8f:79:91:47:20:ca:96:06:dd:09:d6:a7:c2:cb:72:34:2d:fa:
         2c:b7:76:b3:7b:0f:71:a9:91:9b:86:f0:74:f9:2e:69:62:16:
         0d:e8:0b:e5:d4:51:ea:40:13:a9:cd:f1:97:32:91:d1:55:ed:
         81:9f:a1:da:bf:e3:5d:52:0f:bf:96:33:a5:4b:e1:73:c6:f9:
         7c:26:fb:cb:11:d9:9f:23:f1:60:2b:11:a0:a6:ed:c1:49:41:
         e5:78:f8:c1:79:a6:ac:31:43:cf:ea:3c:a5:33:71:6b:07:6c:
         2d:75:b8:c9:5c:fb:98:7e:27:3b:f8:a1:9c:c5:d7:36:4c:45:
         0c:57:68:60:5c:10:f6:82:f0:d1:75:97:21:4a:3a:34:55:b4:
         6b:3c:be:f0:9e:81:a8:db:16:6d:55:1a:ba:f2:0b:8f:bd:0f:
         f2:19:44:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:24:11 2024 by rpki-client on console-ams.rpki-client.org