Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/defec8e7-4153-3b4e-aa87-af25e41b63e0.roa
File:                     defec8e7-4153-3b4e-aa87-af25e41b63e0.roa (raw, json)
Hash identifier:          hDDfD0kioNi2gaGQtcDiyr4N9jlN8Twz1L8QfzTmim8=
Subject key identifier:   1F:F6:30:C5:57:79:F2:85:29:EF:9C:F8:F2:29:38:5E:C0:64:C7:73
Certificate issuer:       /CN=7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158
Certificate serial:       010D0C9F432858455498194AEC827BC0EE24F0C0
Authority key identifier: 28:F6:4B:EA:12:08:2C:FE:26:90:08:15:D5:3D:99:F6:12:C0:77:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/defec8e7-4153-3b4e-aa87-af25e41b63e0.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     400620
IP address blocks:        23.135.120.0/24 maxlen: 24
                          2620:a9:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:19:4a:ec:82:7b:c0:ee:24:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=fbc22d16-0262-4c68-902e-7f084c776973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:19:1f:5d:e5:84:ea:c5:e9:6f:e9:b4:26:22:
                    cb:38:7e:76:50:16:8c:30:d6:59:ac:25:9c:58:83:
                    e7:c9:b9:35:75:ee:37:52:23:19:f6:c7:bd:6a:e9:
                    02:dc:2d:50:87:c0:1e:cd:55:f2:4f:03:24:38:03:
                    a4:41:62:d3:6b:d9:33:ef:8a:c9:f3:74:4e:ff:73:
                    b2:42:ca:b7:fc:6e:10:63:4b:53:7d:4d:4c:01:ca:
                    d6:f4:46:f9:37:0e:d3:cc:f7:95:8e:02:7b:29:42:
                    9e:0a:f5:a3:8b:2a:db:93:37:24:77:10:a7:93:1a:
                    1d:79:a0:55:4e:23:d6:7a:33:0c:e7:4c:6f:28:26:
                    22:5c:0e:b8:9d:3e:e7:70:39:fc:a9:99:15:80:84:
                    d0:58:88:c6:a7:9c:26:7d:7d:28:8a:5c:12:82:31:
                    21:66:f7:20:27:14:cf:cb:ff:58:2f:e6:a2:b3:74:
                    ee:fc:28:5a:1b:ea:87:1e:e5:3d:5b:23:59:68:85:
                    e5:49:aa:be:23:dd:02:9e:2a:a2:ed:ba:c2:2f:0a:
                    a7:88:87:73:98:b4:04:b2:69:70:86:7d:d9:2c:d1:
                    cc:b6:f0:d8:1b:25:ce:5d:70:a7:de:b6:19:bf:8d:
                    4b:c8:1d:49:ed:b5:9b:81:ba:75:fe:a5:ea:aa:7d:
                    a0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F6:30:C5:57:79:F2:85:29:EF:9C:F8:F2:29:38:5E:C0:64:C7:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/defec8e7-4153-3b4e-aa87-af25e41b63e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.crl

            X509v3 Authority Key Identifier:
                keyid:28:F6:4B:EA:12:08:2C:FE:26:90:08:15:D5:3D:99:F6:12:C0:77:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.120.0/24
                IPv6:
                  2620:a9:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:85:6f:cd:b8:0e:f8:fa:2e:17:ff:7b:55:97:7a:fd:1f:21:
         68:e7:29:1d:03:63:0b:a8:75:22:fc:95:56:33:69:5a:c3:40:
         c7:48:7e:ae:30:71:53:d2:ee:6c:eb:c5:08:a5:30:ce:b6:fb:
         91:61:5a:34:3d:03:08:e7:03:03:fe:05:ea:11:5f:2f:ae:93:
         97:df:34:51:58:1e:7d:e1:9f:ca:c4:3a:40:76:4b:62:bf:0d:
         5a:1f:0f:0c:bf:d6:85:c7:c5:74:a2:cb:db:3b:08:97:a7:cf:
         dc:ad:47:ff:2c:a5:c1:77:86:e4:b1:ff:ed:7a:92:a6:01:4d:
         cb:bd:d7:a7:38:43:6d:f9:4d:64:e3:6e:6c:4d:21:1e:12:c1:
         5a:97:37:0f:fc:ec:0c:67:a0:64:1e:fe:01:6f:21:7c:25:3d:
         14:5a:f9:24:e1:b3:50:55:9d:8a:12:f8:b0:58:64:1a:f5:8a:
         51:e4:0f:e6:ac:3e:ca:66:6a:80:d6:bf:fa:37:af:4b:d7:59:
         6a:3b:5b:b9:4e:3c:ad:42:45:25:a0:c1:cf:e5:66:ec:a4:b3:
         3b:e7:14:91:e8:83:49:d6:fc:e5:5a:bf:21:b5:5f:7b:5d:b1:
         a2:c1:d1:ac:6b:8f:c5:9e:27:30:82:c2:3c:59:24:1e:7e:e8:
         de:82:90:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:32:59 2024 by rpki-client on console-fra.rpki-client.org