Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/a2539617-7315-37c5-84a2-9f369c7e2a2d.roa
File:                     a2539617-7315-37c5-84a2-9f369c7e2a2d.roa (raw, json)
Hash identifier:          mqxZZKphN5VLzZomMEg8Lm8qgQPlT0LA1GkrPWDPSDk=
Subject key identifier:   FD:65:5F:49:4D:8E:80:68:07:1D:A4:23:D8:E5:01:6C:72:6F:76:DF
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F43285845D39E5A910C7065449495C010
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/a2539617-7315-37c5-84a2-9f369c7e2a2d.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     399091
IP address blocks:        23.234.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:5a:91:0c:70:65:44:94:95:c0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=b519ad40-fb4c-4405-b0bd-1523abc5f9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:63:1b:6e:d6:79:74:76:95:f1:4a:30:c3:46:
                    d4:b3:f6:fa:6d:1f:62:c4:21:46:bb:c0:b1:0e:80:
                    55:3b:c2:e8:ef:3b:01:61:c4:0c:6c:f9:14:37:56:
                    d6:65:d3:85:db:e0:4b:ca:d1:3d:d4:04:5b:71:f6:
                    7e:08:78:c8:e2:b8:20:14:02:bc:d0:09:ac:0e:32:
                    67:64:c9:de:b6:77:20:ff:7e:02:b4:e2:53:a8:df:
                    b8:b1:73:d6:54:28:dd:1d:03:43:80:d6:d7:61:78:
                    46:1d:ba:88:6e:7e:09:cf:ab:78:b7:e3:a5:1f:f2:
                    a8:1c:b9:64:20:cf:88:8f:bb:3d:8e:c6:ac:74:53:
                    e4:a6:3e:d8:22:bb:08:fd:40:ac:c6:25:fa:d2:7a:
                    0b:3a:f9:f7:20:0a:4e:0c:df:83:ce:d4:9a:46:0b:
                    aa:de:6c:c0:e5:ba:d6:37:8f:8c:7c:33:61:44:0d:
                    ec:bd:b4:7d:90:91:b7:ad:64:ac:a5:71:b9:3d:89:
                    31:23:a4:45:96:c4:53:f8:fb:5f:9a:9f:c1:59:54:
                    54:66:c3:97:3d:a7:b3:47:f4:89:b4:0e:f8:02:74:
                    66:90:56:e4:5c:b9:26:a2:ce:e0:e6:91:e2:0d:1d:
                    14:bc:f1:39:37:07:20:24:d7:77:b0:21:ba:23:68:
                    df:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:65:5F:49:4D:8E:80:68:07:1D:A4:23:D8:E5:01:6C:72:6F:76:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/a2539617-7315-37c5-84a2-9f369c7e2a2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:57:01:83:cf:2b:9e:cc:c3:a8:e8:8c:c0:79:56:0d:c8:7d:
         55:fb:c7:12:e9:47:3c:78:51:b2:68:56:2d:7e:9f:9e:9f:76:
         98:e8:15:50:b9:7f:08:eb:83:6d:0f:b5:d8:11:9f:fe:be:a5:
         97:f4:f4:05:20:6b:a9:64:57:74:21:47:2c:c1:fc:b2:d3:54:
         2c:3c:c0:3f:91:a0:ed:2a:0c:19:81:03:cd:8a:e5:ee:d6:fd:
         69:80:95:48:1d:35:55:4f:62:af:5b:a1:3f:b3:34:35:f1:95:
         82:6c:c3:ac:e8:57:8a:b9:49:22:63:d7:da:2a:35:8f:00:84:
         d1:ec:c7:5b:61:0c:00:de:c7:7f:59:da:a3:70:0c:c8:e9:90:
         f2:f7:1c:ae:27:c6:45:ae:55:af:87:eb:f7:07:d2:09:ce:da:
         51:16:54:e6:09:b3:f3:5b:82:11:f7:b4:60:18:a7:b8:c4:48:
         e9:3f:7c:ed:cf:c1:56:c7:78:78:66:a4:f2:95:7e:c7:08:d2:
         2b:ff:85:c1:35:b5:77:b7:ab:40:5b:c3:ca:b8:d2:77:83:15:
         91:35:7c:27:2a:6a:91:37:d8:fc:c4:06:99:b1:78:14:6f:9e:
         a1:52:22:3c:dd:83:9b:79:64:95:6f:97:30:b7:c8:de:9e:fb:
         32:88:50:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 15:32:35 2024 by rpki-client on console-ams.rpki-client.org