Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/1c469c0a-d4ca-346c-acf1-814ba866a653.roa
File:                     1c469c0a-d4ca-346c-acf1-814ba866a653.roa (raw, json)
Hash identifier:          PpzIHF0etAZaaYu4iJ26jf+BDviVRW2+Xfryt2NekWg=
Subject key identifier:   C5:27:28:36:41:66:AA:EF:B7:BA:1F:62:29:F6:83:14:81:61:76:4A
Certificate issuer:       /CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b
Certificate serial:       010D0C9F4328584613D40BD3FED1ED70A0386A00
Authority key identifier: F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/1c469c0a-d4ca-346c-acf1-814ba866a653.roa
Signing time:             Sun 02 Jun 2024 13:00:36 +0000
ROA not before:           Sun 02 Jun 2024 13:00:36 +0000
ROA not after:            Sat 31 Aug 2024 13:00:36 +0000
asID:                     209242
IP address blocks:        23.167.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:13:d4:0b:d3:fe:d1:ed:70:a0:38:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b
        Validity
            Not Before: Jun  2 13:00:36 2024 GMT
            Not After : Aug 31 13:00:36 2024 GMT
        Subject: CN=7c3248c3-366a-45cd-9cca-5484a202bf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5c:07:c3:aa:e9:44:db:74:0b:93:d5:f6:8f:
                    fc:40:e5:61:81:b5:7d:76:56:9e:df:32:04:89:2a:
                    12:07:63:bb:f1:a7:e9:0b:10:86:ef:37:5f:e9:dd:
                    21:2e:d8:fe:0f:9b:d3:e3:cd:69:19:d7:9c:ff:95:
                    99:36:1c:d0:2c:e0:d9:f2:ff:8e:29:b1:9b:93:14:
                    45:0a:cf:91:2b:91:94:1c:e2:2a:7b:ae:d1:f1:c1:
                    56:77:e8:f9:bf:48:84:ec:63:4e:03:75:00:9c:9a:
                    39:45:1c:2d:ed:c8:2f:82:31:45:dd:64:e2:25:12:
                    de:18:64:2b:ec:5f:9d:a3:fe:15:05:11:e8:fb:b9:
                    8a:71:22:92:31:e7:45:f0:12:2c:15:46:62:79:27:
                    61:ee:94:82:2e:3b:4a:81:5f:ab:ef:28:a2:c1:1d:
                    ed:89:a0:b6:1b:e6:78:6b:f7:a5:04:24:95:2d:3c:
                    ac:89:26:72:90:92:60:ec:bc:c2:a7:0f:5c:c3:fa:
                    b1:39:97:fb:1b:97:2d:38:82:8c:43:b1:96:4c:24:
                    62:95:46:ab:a1:ef:bb:ba:42:16:4d:c7:9c:e6:cd:
                    81:af:e3:77:a0:24:f6:84:ae:29:1e:94:ec:39:1c:
                    d9:ad:46:f2:10:64:0e:60:40:26:e6:2f:6d:e0:de:
                    41:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:27:28:36:41:66:AA:EF:B7:BA:1F:62:29:F6:83:14:81:61:76:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/1c469c0a-d4ca-346c-acf1-814ba866a653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl

            X509v3 Authority Key Identifier:
                keyid:F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:7f:56:63:7c:0c:72:2a:4f:2a:79:45:20:38:e9:06:65:15:
         ef:43:78:f1:a8:5a:dd:83:9e:37:ab:51:da:58:01:4f:92:21:
         16:8e:67:80:b1:d4:19:7c:38:8c:9e:63:b6:75:f7:ac:de:a8:
         56:f5:da:a8:1c:ff:6e:51:ac:49:6d:1a:9e:e0:42:a3:a8:24:
         8b:0a:d5:5c:08:3a:52:50:86:e5:32:49:e4:35:74:0b:69:cb:
         4b:8c:bc:8d:c0:88:96:27:e3:bb:50:69:b8:41:1c:fa:a8:c8:
         73:ac:40:6a:77:2c:b3:11:2d:3f:3c:86:32:4b:cf:dc:84:3d:
         cd:63:bd:d0:ee:e8:8e:07:87:d7:af:ac:d8:c8:70:09:28:80:
         49:a0:54:43:6e:c5:f0:8d:d3:2c:02:af:2a:e7:6a:67:cc:5a:
         63:ac:85:24:eb:33:13:7b:52:db:09:b9:ac:38:86:8a:4a:b5:
         cb:0a:c9:76:38:f9:a7:64:4d:09:03:25:56:93:7a:f5:3a:db:
         2f:ce:25:ec:53:7b:ff:01:a1:96:85:7c:81:31:26:d1:e6:2f:
         a7:66:40:19:12:34:f1:80:1f:2a:d3:2f:2f:8a:9a:60:6a:33:
         e7:29:9e:21:dc:e9:74:2f:06:78:3d:ca:0d:ef:32:ea:4b:f2:
         12:0c:e8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:24:46 2024 by rpki-client on console-ams.rpki-client.org