Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/9e55505e-fa19-3b06-96c9-8080da376ec7.roa
File:                     9e55505e-fa19-3b06-96c9-8080da376ec7.roa (raw, json)
Hash identifier:          nrL/pBC3JXsJyXnTnj6Gzcocc0kKY4LIjSR571UAmc4=
Subject key identifier:   84:7A:A4:C2:BF:86:55:B7:F4:0D:B6:A6:13:75:6C:0F:CD:A8:2D:51
Certificate issuer:       /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Certificate serial:       010D0C9F432858461C72C495D53270E54D89F5C0
Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/9e55505e-fa19-3b06-96c9-8080da376ec7.roa
Signing time:             Wed 05 Jun 2024 15:06:53 +0000
ROA not before:           Wed 05 Jun 2024 15:06:53 +0000
ROA not after:            Tue 03 Sep 2024 15:06:53 +0000
asID:                     152705
IP address blocks:        23.247.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1c:72:c4:95:d5:32:70:e5:4d:89:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
        Validity
            Not Before: Jun  5 15:06:53 2024 GMT
            Not After : Sep  3 15:06:53 2024 GMT
        Subject: CN=7d17734a-a986-4154-a9e9-0dee2cd498ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d9:8d:c0:0a:5c:5a:c8:4a:55:7b:5c:93:ae:
                    e8:6f:1b:e2:87:d7:cf:33:d6:08:21:40:88:b0:ff:
                    b4:17:cf:eb:cf:39:ed:ba:28:83:b0:b7:a1:73:5e:
                    ea:f4:19:08:f9:0a:ab:ce:26:e9:1e:eb:3b:ac:48:
                    5f:5e:a5:bc:33:64:cb:22:65:96:7d:c6:75:37:9d:
                    4f:92:9c:aa:bf:20:07:f2:a7:40:ea:2e:ac:3b:a3:
                    e0:f4:07:f9:0e:74:fa:fb:3b:95:95:e9:13:1d:b0:
                    76:05:91:cf:ad:24:4a:a4:b6:1c:4e:6f:33:2b:54:
                    f4:ce:56:3b:b7:ff:3f:6f:ed:91:cb:9f:fc:30:11:
                    81:8e:4a:a2:a9:d2:b4:50:3b:ba:cd:fe:e4:41:dd:
                    5f:78:12:98:47:10:00:c7:ad:34:99:d1:1e:4e:b9:
                    3e:a9:bf:ce:3a:e6:3d:96:38:7a:74:13:1d:1a:1d:
                    b9:40:b8:bd:1a:ff:cb:7e:e5:bb:b5:57:ff:8b:8a:
                    4f:25:65:fe:e8:ac:4e:76:d1:8f:44:e6:39:62:4a:
                    1c:36:1a:aa:10:53:54:c6:f7:d6:74:36:bf:f6:19:
                    87:9e:19:b1:26:74:53:4b:6c:9a:06:fe:44:be:31:
                    60:d9:77:07:38:c8:75:e7:95:08:10:37:09:a7:2a:
                    5e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7A:A4:C2:BF:86:55:B7:F4:0D:B6:A6:13:75:6C:0F:CD:A8:2D:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/9e55505e-fa19-3b06-96c9-8080da376ec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl

            X509v3 Authority Key Identifier:
                keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:38:57:9d:16:55:12:a0:1f:c8:dd:fd:2b:70:25:84:82:b8:
         81:c8:df:5d:73:5a:40:33:c3:9d:86:2a:a8:5f:eb:04:f7:54:
         6e:f2:09:e1:14:71:98:71:f1:6e:80:63:13:1e:8f:c0:a4:50:
         f9:0e:f5:e4:04:dc:24:f4:77:5f:85:78:b5:28:ba:6c:f3:c1:
         6c:47:09:ad:e4:92:c0:7e:39:4e:32:77:7a:52:51:4f:57:ee:
         52:51:2b:87:c6:4a:a7:29:bb:8f:8c:89:8b:f8:b2:df:04:be:
         bc:59:07:03:19:40:29:fa:6f:5b:99:90:41:10:25:66:a5:6f:
         fb:aa:7f:74:78:28:54:b7:1d:d7:6f:8b:9e:6b:68:e9:f7:c5:
         3b:92:60:eb:40:f5:96:13:c7:3f:b6:04:ce:89:9f:fa:60:5f:
         21:5e:93:e9:6e:cc:de:94:b0:53:30:52:6f:62:b1:96:b1:f5:
         0d:3a:0d:bb:fc:49:80:b8:6c:44:d1:c1:79:d0:eb:fa:73:23:
         9e:89:3b:d4:43:d6:e4:a2:4d:83:70:14:14:09:56:b2:07:85:
         d0:31:b6:ba:69:e2:30:13:c5:a8:54:20:50:52:d7:96:a0:0d:
         9b:92:6d:a8:e1:2d:87:cd:49:2f:b6:6e:66:45:c2:07:6e:de:
         2f:87:20:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:37:01 2024 by rpki-client on console-fra.rpki-client.org