Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24e66c2a-3d34-3395-9c5b-41ba383858cb.roa
File:                     24e66c2a-3d34-3395-9c5b-41ba383858cb.roa (raw, json)
Hash identifier:          1G5QQgdpxmwuJPIo+oHMRsM3HrGwhfkIEC7dRuihEHM=
Subject key identifier:   18:72:AA:AA:3E:24:AC:34:94:DC:CE:18:41:F9:FF:6B:F5:7D:EC:38
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B1972FC5C968E41416F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24e66c2a-3d34-3395-9c5b-41ba383858cb.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        76.123.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:19:72:fc:5c:96:8e:41:41:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=e62ac083-ba9b-4e9f-903b-040018c8ce22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:de:29:f1:15:24:91:c0:7e:43:e5:39:9a:
                    67:c0:db:38:41:07:3c:97:97:a2:66:7c:b8:ce:08:
                    d0:ce:81:2c:93:90:c6:5d:ed:a0:cb:d2:93:13:0a:
                    cc:e1:a1:80:ef:66:f1:4f:6e:da:1c:47:84:ba:cc:
                    9f:9b:63:bd:b5:3d:37:cc:c1:cf:95:56:1d:34:9c:
                    c3:a5:69:d7:2c:80:6e:7e:fc:74:1c:dd:ca:f8:52:
                    01:43:da:cc:30:d7:7f:49:58:c1:3f:ba:8e:87:8e:
                    95:3b:40:b9:f3:8e:29:b6:e9:ef:b7:fa:64:b7:dc:
                    a6:a2:c8:09:bd:b9:d7:20:7b:c0:c2:d2:71:f3:4f:
                    63:a8:43:68:2c:d1:65:02:89:04:19:23:14:9a:91:
                    65:e4:dc:3d:9c:fe:42:22:9c:6a:9f:c8:7f:c5:6b:
                    33:c0:a2:a2:ab:bb:57:99:38:e5:d4:35:61:8f:5a:
                    90:f9:dc:52:6f:44:bc:c8:24:4c:31:a8:28:c2:fe:
                    03:e8:11:84:8f:3a:24:c2:5d:96:ff:45:0d:4a:bf:
                    73:6b:61:68:12:03:37:d7:a5:9c:63:87:f1:25:3c:
                    8a:58:57:bd:fb:ec:08:16:a0:e6:7f:ac:7f:83:46:
                    32:ab:5b:07:8b:c3:4a:bf:5a:63:cb:25:bf:0a:9b:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:72:AA:AA:3E:24:AC:34:94:DC:CE:18:41:F9:FF:6B:F5:7D:EC:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24e66c2a-3d34-3395-9c5b-41ba383858cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.123.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:87:0b:4b:2d:37:cf:97:04:04:de:cf:00:a6:3c:af:39:d2:
         fd:62:26:c7:bd:39:40:21:78:67:43:26:c3:7f:91:51:91:93:
         f5:65:72:c4:2b:5a:07:86:b7:d6:62:61:16:1d:76:9d:6d:03:
         82:16:88:98:8f:66:0d:33:d6:c0:b3:0c:b3:0d:13:64:a2:77:
         17:6e:71:df:76:cb:20:0b:a0:61:e9:d7:86:97:79:23:9c:62:
         81:ec:0d:c6:8b:59:db:c1:12:d4:5f:d6:e0:b2:2e:8e:8a:9b:
         06:76:e2:0b:d9:4b:5f:4a:2b:a9:94:4c:b7:de:ab:94:de:5f:
         b9:6e:3f:d5:88:a9:bb:a7:6b:71:b3:5e:59:7e:4c:61:68:4e:
         7e:ad:aa:e4:1a:2c:d0:c1:92:e0:49:78:77:7e:89:63:d6:a9:
         bb:ae:8b:bf:db:75:26:d6:2e:78:32:50:46:3f:0b:7a:12:57:
         ce:cf:39:2b:87:92:3f:ab:4a:ec:bb:1b:d5:1d:32:e8:9e:a3:
         97:16:7d:9b:39:fc:af:6c:be:e5:a3:12:df:8e:ce:0d:40:91:
         79:70:20:f3:0e:83:a5:89:77:87:91:6f:b5:3a:7b:84:44:57:
         8d:8a:dc:72:ac:94:77:be:21:c0:fb:9a:61:cf:b9:0a:07:29:
         b9:78:52:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:28:23 2024 by rpki-client on console-fra.rpki-client.org