Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa
File:                     9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa (raw, json)
Hash identifier:          7xr67edf65+TOma7RN083x++sEeWd08gETtVEI0LrW8=
Subject key identifier:   E0:74:E4:0C:2B:53:53:71:82:04:AE:4F:CE:11:49:19:C2:4A:E3:9A
Certificate issuer:       /CN=4a7ff3d3-2f19-43a4-a36d-ece1ee05055b
Certificate serial:       010D0C9F43285845B64E0A6DD07A1784E5D530C0
Authority key identifier: E7:A1:6E:79:93:AD:1C:35:B1:EE:64:2D:25:BE:67:5D:02:9D:ED:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa
Signing time:             Tue 30 Apr 2024 01:00:25 +0000
ROA not before:           Tue 30 Apr 2024 01:00:25 +0000
ROA not after:            Mon 29 Jul 2024 01:00:25 +0000
asID:                     63023
IP address blocks:        23.168.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b6:4e:0a:6d:d0:7a:17:84:e5:d5:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7ff3d3-2f19-43a4-a36d-ece1ee05055b
        Validity
            Not Before: Apr 30 01:00:25 2024 GMT
            Not After : Jul 29 01:00:25 2024 GMT
        Subject: CN=39b3b380-d117-4541-9d88-8457552fdd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:32:17:be:d8:96:f0:c4:5d:3d:f0:5b:29:6d:
                    40:51:d8:91:9d:b6:c0:f3:cc:a4:ea:1d:65:cc:4b:
                    c1:ba:52:7b:75:49:f4:0d:e1:c0:fa:11:bc:21:13:
                    b5:0c:a5:90:23:33:37:9a:cb:b4:6f:c5:21:4c:eb:
                    f8:5d:2d:20:d8:d1:bf:3d:3d:9b:62:5d:4c:9f:0b:
                    f0:51:2b:f2:5c:94:e7:71:76:a5:5d:91:c9:9f:30:
                    78:1d:79:d2:c4:7e:62:cd:4d:de:d3:6e:50:e7:e8:
                    78:c6:08:48:e1:16:7a:50:cf:f8:bd:d9:00:dc:6f:
                    9c:9b:42:b6:ee:ca:fe:07:fe:92:3d:51:63:34:8f:
                    8e:05:ed:69:ed:70:9f:6b:1a:d6:4b:ef:b8:53:81:
                    f6:7e:55:c6:57:fb:89:1b:36:91:d2:66:ed:7b:7e:
                    42:c2:e1:bf:31:5b:89:87:3e:f1:87:a3:b5:7a:ef:
                    ca:aa:a4:3d:19:18:da:ac:12:cf:5c:36:b0:d9:1f:
                    d7:36:b4:3b:d3:7f:59:b7:a4:a9:70:f8:02:59:5d:
                    64:cc:bd:23:82:f8:3e:6a:0d:7b:ce:98:5a:4d:6e:
                    ae:85:68:07:e6:fc:ae:9e:76:50:62:e8:5d:10:a3:
                    ed:cc:ff:a7:fe:80:71:f9:1a:de:4a:d8:73:fe:a1:
                    87:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:74:E4:0C:2B:53:53:71:82:04:AE:4F:CE:11:49:19:C2:4A:E3:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A1:6E:79:93:AD:1C:35:B1:EE:64:2D:25:BE:67:5D:02:9D:ED:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:6c:ba:a7:e9:ea:98:94:be:a5:b0:e0:e9:5f:2d:be:ad:7f:
         81:b8:4e:bd:e2:dd:cc:51:43:79:ad:0a:5b:4c:aa:ec:35:ba:
         07:79:42:b0:ab:96:55:ca:d5:28:08:08:1b:f7:ca:16:1d:72:
         09:c8:e0:0e:1d:d0:4b:e2:be:91:b8:57:d8:74:aa:ad:08:bb:
         a4:e6:a1:d2:b2:5e:19:91:a4:d0:9b:78:76:7c:bb:13:e7:c6:
         f9:f4:c6:16:f8:b9:87:36:90:e1:7b:8c:b3:25:b9:7f:c2:d8:
         c7:34:cb:98:76:b9:7e:9f:2a:bf:56:8d:69:14:90:3e:9a:2d:
         a7:1f:39:4b:9b:b4:5f:60:8c:a4:ab:d4:bc:90:09:d0:34:27:
         58:6f:c3:70:9b:cd:ca:b8:7e:bb:9c:f2:d3:60:6f:ca:65:c2:
         fb:5b:22:ae:e4:77:ca:0d:d3:71:03:9e:3e:9e:2d:a8:ee:cf:
         e3:58:77:dd:d1:e9:33:6a:d6:2d:a7:1c:a7:ea:e0:35:a7:7d:
         5b:65:ea:26:c6:04:df:09:33:79:d1:f2:94:ab:b9:7a:5e:74:
         28:a0:b7:13:d0:26:fc:e9:81:2d:c5:ae:f1:cd:15:5d:da:4c:
         3f:ce:99:66:ca:e7:bc:06:a2:ca:6a:c5:c5:67:a1:13:f7:06:
         80:f1:3e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:12:02 2024 by rpki-client on console-fra.rpki-client.org