Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/f3805def-12ab-3eea-993c-463a8a73c36a.roa
File:                     f3805def-12ab-3eea-993c-463a8a73c36a.roa (raw, json)
Hash identifier:          blDwKeRnWEMiwUoZ9EoatpK5e9EIOXbvPsKUwM38N54=
Subject key identifier:   9D:2E:56:31:CE:E2:84:90:9E:B1:E9:86:57:87:38:43:9F:F1:FE:AD
Certificate issuer:       /CN=a4607f8f-ba19-4447-a356-e3ec6823f923
Certificate serial:       010D0C9F4328584632C23978FFCD1748767F8000
Authority key identifier: 3D:96:7D:2C:26:DD:A2:17:5F:C9:83:33:0B:43:4A:AA:38:74:01:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/f3805def-12ab-3eea-993c-463a8a73c36a.roa
Signing time:             Thu 13 Jun 2024 14:54:46 +0000
ROA not before:           Thu 13 Jun 2024 14:54:46 +0000
ROA not after:            Wed 11 Sep 2024 14:54:46 +0000
asID:                     400938
IP address blocks:        23.143.248.0/24 maxlen: 24
                          74.120.232.0/22 maxlen: 22
                          2602:fad1::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/a4607f8f-ba19-4447-a356-e3ec6823f923.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/a4607f8f-ba19-4447-a356-e3ec6823f923.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:32:c2:39:78:ff:cd:17:48:76:7f:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4607f8f-ba19-4447-a356-e3ec6823f923
        Validity
            Not Before: Jun 13 14:54:46 2024 GMT
            Not After : Sep 11 14:54:46 2024 GMT
        Subject: CN=63cd5551-6fbe-48cd-ada7-d9062acffa5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c7:bd:90:64:21:9a:81:ff:0f:72:80:50:f2:
                    a0:39:82:d8:9d:a3:b9:40:96:eb:e6:34:56:ce:15:
                    0f:b0:b7:d5:c5:5c:a9:e0:63:7d:22:f4:29:1a:f8:
                    db:15:78:09:5a:90:4b:d9:53:cd:df:e5:ad:ed:17:
                    92:9e:ae:20:03:3c:1e:a7:53:8f:98:c5:b5:14:52:
                    ef:87:95:2e:50:74:5b:3a:36:08:64:4d:2e:b4:f1:
                    c0:55:04:92:d8:ee:b1:b0:07:76:7f:e0:0d:89:ce:
                    31:e7:e9:d0:43:c9:b8:46:04:b1:bb:8e:8c:fd:14:
                    5d:76:a1:11:96:4d:36:a8:8d:62:31:8e:8f:1f:53:
                    0d:05:81:fd:ad:ce:b1:de:fb:66:d6:d0:a9:d0:cf:
                    6e:0f:e0:96:0c:34:33:a0:34:51:48:0d:63:eb:f7:
                    7b:16:a8:0d:8a:f4:32:05:18:10:27:52:73:09:78:
                    8c:ad:b6:a1:a9:99:7e:ca:50:b2:22:92:70:36:ec:
                    94:d7:f6:cb:85:36:74:b3:75:62:80:34:de:84:0c:
                    1f:4b:e9:63:e0:5d:0b:ae:8d:3a:17:72:9b:26:70:
                    c0:54:f9:e2:54:cc:87:de:12:f8:e0:1e:e8:3b:72:
                    82:ad:f9:94:48:f7:ad:88:88:6a:6c:9c:92:eb:a0:
                    cb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2E:56:31:CE:E2:84:90:9E:B1:E9:86:57:87:38:43:9F:F1:FE:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/f3805def-12ab-3eea-993c-463a8a73c36a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/a4607f8f-ba19-4447-a356-e3ec6823f923.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:7D:2C:26:DD:A2:17:5F:C9:83:33:0B:43:4A:AA:38:74:01:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.248.0/24
                  74.120.232.0/22
                IPv6:
                  2602:fad1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:d7:e0:eb:12:6f:74:c1:32:f9:02:7a:38:4e:f1:86:49:71:
         cd:7b:7a:af:2f:1c:80:6b:9d:62:e7:85:52:e0:f7:92:88:da:
         65:8a:60:37:be:8d:61:d9:61:fc:40:2c:18:6d:8c:e5:f6:1d:
         1f:15:e0:01:7f:0f:35:ee:fe:30:b5:7f:e4:8d:a5:ac:61:ca:
         14:66:5e:b9:74:c9:e7:cd:19:2c:63:35:58:f2:06:f7:60:dd:
         f4:8a:69:61:0f:ff:9a:24:73:93:95:09:03:01:92:1b:b7:9e:
         12:93:70:70:9a:da:ef:85:68:35:94:f3:cc:b4:69:a1:4c:bf:
         16:99:2c:60:e0:e2:6c:e4:96:16:e6:59:db:8b:da:62:34:db:
         67:a8:52:30:c9:a0:86:9e:30:e0:b4:b0:35:5a:9c:16:66:bc:
         39:78:8f:a6:41:28:88:ab:13:b6:02:b9:c9:5d:40:d8:7c:22:
         4c:c8:b5:e3:ff:e2:46:2f:da:cb:6a:0d:92:57:55:2d:26:27:
         18:16:a1:6a:f7:4f:5d:60:10:5c:1b:b8:42:ab:04:28:7e:62:
         92:cc:85:28:a4:cf:5a:19:4c:3b:1a:f3:73:03:09:84:58:e9:
         71:1b:14:92:87:e3:83:ea:ba:a2:4f:d8:e8:c9:04:c6:23:f5:
         98:e6:08:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:37:00 2024 by rpki-client on console-fra.rpki-client.org