Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/0ed7512f-d7c7-3f51-9b07-5892aaa511f7.roa
File:                     0ed7512f-d7c7-3f51-9b07-5892aaa511f7.roa (raw, json)
Hash identifier:          IW8W2qJZfnk8KGOExF+iqe4wMNjsQMAKgH3gD5YSJ+Y=
Subject key identifier:   0D:D3:08:AE:06:38:8B:52:D3:FF:5C:98:3E:72:E0:F9:1A:85:71:34
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F43285845BA7E2FCCE1A3DCCDA7C242C0
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/0ed7512f-d7c7-3f51-9b07-5892aaa511f7.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     398712
IP address blocks:        23.227.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:2f:cc:e1:a3:dc:cd:a7:c2:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=bc114442-64f1-4b64-8022-cc6eff00c487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:76:eb:4e:44:1b:7c:72:41:c1:bc:60:4e:
                    82:75:09:c7:a2:63:07:41:68:42:61:85:ad:0b:52:
                    b4:d7:63:46:fa:ed:25:df:59:89:7b:10:de:9d:45:
                    6b:42:e5:2e:fb:53:2f:31:57:bd:93:51:cb:4b:1e:
                    22:bb:3d:dc:e4:00:a1:7c:7b:38:09:18:70:70:4d:
                    3e:b2:ca:6f:6a:59:7b:fa:18:3f:65:e2:83:7b:9d:
                    2c:27:d0:0e:06:e2:de:ae:63:fc:28:e0:20:b1:ea:
                    4b:6f:df:46:00:fe:3e:8a:ea:46:4b:58:bb:fa:42:
                    f6:a5:62:7f:a4:5b:b3:da:fa:fd:ab:80:eb:54:67:
                    25:28:5d:dc:15:66:c1:b5:05:52:5f:4a:9d:ab:fd:
                    ee:aa:91:ba:53:db:88:06:06:3c:34:55:0b:1c:dc:
                    66:30:3e:0b:5f:5d:81:1e:b1:de:51:6a:33:e7:e3:
                    6b:f8:c0:04:35:b9:a0:d5:b7:dd:73:88:7c:78:1b:
                    4a:aa:2f:07:26:87:d2:c1:57:1f:45:df:86:a6:b6:
                    4f:61:2a:8d:ed:c8:85:c5:ca:89:1a:bf:b1:86:3b:
                    9e:19:bd:eb:0b:29:07:a2:6d:81:18:03:ed:2b:ac:
                    75:75:31:a2:75:24:f6:e2:10:75:67:44:f7:da:e5:
                    61:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D3:08:AE:06:38:8B:52:D3:FF:5C:98:3E:72:E0:F9:1A:85:71:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/0ed7512f-d7c7-3f51-9b07-5892aaa511f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:55:09:01:24:38:5a:1e:ad:83:30:06:5e:28:9f:42:58:6e:
         9e:13:19:f2:2e:5b:c3:02:eb:af:16:df:01:9a:59:72:a2:25:
         ac:89:8e:7d:c9:2b:7f:31:07:9c:84:1f:c0:fc:37:b9:e0:01:
         4e:2e:f9:c8:28:60:f0:80:68:3c:82:ff:e3:f7:d4:e0:99:fe:
         ea:76:68:b9:bb:57:e5:26:e9:51:d0:78:0a:fa:d6:ef:8c:fc:
         f6:23:a6:bd:99:f5:fb:4b:b2:1e:bf:37:23:8b:0c:f6:1a:7f:
         ef:b0:3e:e7:5f:fc:b6:2e:27:ba:1f:91:49:56:de:fd:8d:da:
         80:55:80:b7:09:b4:62:bb:ba:a8:01:8c:a3:8e:9a:79:1a:ff:
         f2:04:67:ac:14:91:ac:39:8e:b1:10:99:00:db:f6:8d:ea:55:
         5c:8b:1d:c7:50:91:fa:fa:05:69:8d:ce:f9:65:b5:e8:fd:e0:
         20:50:e1:8c:ff:b5:21:65:e0:35:94:40:a1:82:c4:11:79:8d:
         97:b8:53:b5:e4:48:b6:72:f4:e4:91:1b:30:7b:7e:64:cb:04:
         81:ac:56:3d:de:60:c3:46:07:17:fa:7d:f3:0b:80:a0:7a:1a:
         21:c6:53:7a:20:92:04:b1:22:58:21:c2:da:7e:11:4a:66:87:
         97:ac:57:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 01:59:44 2024 by rpki-client on console-fra.rpki-client.org