Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/df6e2c46-7773-32ce-a7a8-1ceb0f999a35.roa
File:                     df6e2c46-7773-32ce-a7a8-1ceb0f999a35.roa (raw, json)
Hash identifier:          m7YdFLC+SpRMqegGE1M7OjJ8UlGw93xVF+FjlzDRGZc=
Subject key identifier:   0B:07:4C:68:74:BC:BC:1A:4A:C2:FC:A4:6C:BA:1E:CC:76:2A:40:CA
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F43285845C179168BCE6B6626DAB18880
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/df6e2c46-7773-32ce-a7a8-1ceb0f999a35.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     3257
IP address blocks:        23.234.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:16:8b:ce:6b:66:26:da:b1:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=0ed331d1-a37d-4b23-a233-4ad88798b586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:03:46:91:fc:55:57:e7:3c:6c:58:5a:f6:4d:
                    a8:f8:27:1e:44:31:fc:36:52:78:29:d0:4c:b5:95:
                    a9:76:1f:47:70:d0:7a:ae:30:79:67:5f:86:16:b9:
                    12:64:0b:77:22:e2:9e:9c:fa:0e:b1:7c:a6:2c:c1:
                    d8:7e:76:1d:09:85:a6:f5:41:68:dd:57:2e:6e:0d:
                    0c:65:e7:aa:71:00:d5:b9:a1:84:26:56:59:a3:ac:
                    91:91:39:60:69:8f:68:be:75:0a:2a:5e:0b:8a:6a:
                    2d:ca:62:52:12:22:b2:13:bd:4c:ab:f8:c8:77:4b:
                    25:0d:92:08:c8:32:a0:f5:94:90:9d:ee:1f:e6:e8:
                    17:e8:9a:6f:ba:59:85:ce:82:99:29:8f:65:83:85:
                    00:99:dd:55:93:d7:6c:e6:66:66:8f:dc:76:34:47:
                    3f:ae:a5:38:0f:e0:68:b9:09:33:f0:c0:e7:d8:89:
                    35:24:9c:98:5a:ac:3b:ba:28:2b:58:cd:25:9c:f9:
                    35:ae:97:33:87:62:9f:81:eb:b3:6c:94:78:ce:4c:
                    88:58:3e:9b:d8:dc:2e:78:26:f4:2b:d2:48:47:50:
                    72:e5:8c:cc:48:d6:4f:6a:45:81:3e:5b:26:5a:6f:
                    e0:63:f0:96:81:35:1d:2a:4b:8f:d6:e7:a1:56:d0:
                    1f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:07:4C:68:74:BC:BC:1A:4A:C2:FC:A4:6C:BA:1E:CC:76:2A:40:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/df6e2c46-7773-32ce-a7a8-1ceb0f999a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:6f:e0:21:0f:bb:80:26:f9:95:92:35:55:b1:36:14:27:54:
         b3:75:22:85:b2:34:37:f5:fb:50:34:b6:52:0b:c6:c4:56:65:
         57:5d:1f:fd:cc:33:e8:de:98:2c:0b:ea:69:9a:65:2c:e2:ee:
         dd:2a:73:24:5a:ba:98:49:c5:0e:08:e8:e0:01:f5:83:4c:2e:
         d2:08:e1:73:a3:de:36:68:be:cb:74:1c:55:22:37:23:70:1c:
         f8:ea:e8:94:7e:d6:48:a6:ec:e0:81:e6:2e:e4:9f:f0:11:bf:
         1f:e8:fe:9b:f6:49:9b:5d:6a:d6:cc:14:66:bb:ce:5d:3f:b6:
         e2:89:06:94:61:79:95:3b:b7:1b:6b:d2:2f:3f:06:8b:79:36:
         e6:38:c7:39:01:fc:85:fb:9f:74:f7:5b:66:cb:7d:6f:56:67:
         b6:68:58:62:48:05:c4:16:3b:ee:9a:07:ac:5f:49:b5:d4:91:
         98:ef:5f:a4:d9:75:fc:71:51:bc:01:bc:c0:c6:d4:fa:0d:27:
         78:33:dd:76:40:3c:97:33:f8:17:a8:ce:57:33:2f:45:e9:24:
         d3:7e:86:e8:f7:fb:a0:42:aa:cf:b2:a4:16:fd:ce:34:19:dc:
         c9:0d:73:0c:ed:29:af:a6:4f:c3:86:66:a8:d9:62:da:05:cb:
         48:da:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:06:39 2024 by rpki-client on console-ams.rpki-client.org