Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c34d1bbb-9b9a-37af-9795-ad7b15d1b928.roa
File:                     c34d1bbb-9b9a-37af-9795-ad7b15d1b928.roa (raw, json)
Hash identifier:          XvX8R7iNKwqlmXOZeilxBW43cDdv2A4AFYyAPLTlXmo=
Subject key identifier:   40:B7:51:73:9F:9B:DB:5B:9A:D8:E6:8F:88:7E:4B:BF:4A:0C:62:67
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845E6C3FA8B14188F7353973900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c34d1bbb-9b9a-37af-9795-ad7b15d1b928.roa
Signing time:             Fri 17 May 2024 09:36:52 +0000
ROA not before:           Fri 17 May 2024 09:36:52 +0000
ROA not after:            Thu 15 Aug 2024 09:36:52 +0000
asID:                     20940
IP address blocks:        23.52.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e6:c3:fa:8b:14:18:8f:73:53:97:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 17 09:36:52 2024 GMT
            Not After : Aug 15 09:36:52 2024 GMT
        Subject: CN=5fce40cc-7c7b-48b7-8e02-2d73721fd174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:35:de:79:cc:71:9d:68:90:99:95:a9:21:8a:
                    0e:59:dc:58:4b:05:3c:ef:d8:9a:6d:e3:16:c2:62:
                    37:87:f0:9c:cc:8d:cb:fd:82:aa:aa:19:07:9d:cb:
                    3e:71:78:93:ff:7b:4d:09:13:f5:f2:3e:08:5b:86:
                    cb:03:f8:55:fe:d8:1b:36:76:de:07:59:41:8d:20:
                    0d:f0:40:dc:3f:4f:1d:6d:34:29:1a:b4:e6:0c:3d:
                    cc:69:ca:6a:06:05:d6:21:91:21:fb:80:f4:76:11:
                    d0:c5:6b:28:b7:c5:71:a3:aa:20:70:d8:ab:37:b1:
                    07:5f:88:fd:68:ae:e8:6f:77:2e:1f:1b:a4:4d:1f:
                    11:81:b7:71:14:d9:4b:80:d8:00:94:c2:c9:99:98:
                    02:89:31:ed:e0:30:3f:e2:c6:86:10:26:81:63:38:
                    13:50:59:f7:aa:f6:b6:8b:57:20:b7:cd:51:f4:46:
                    57:cd:8e:54:20:5f:1e:06:bc:86:e1:5e:80:9e:dc:
                    be:6c:74:0f:c1:a6:1c:7f:88:95:33:72:9b:54:ff:
                    67:7b:c6:6f:b2:1e:f0:51:19:5b:74:f4:88:17:c3:
                    6e:20:77:27:fa:31:08:a2:ee:0f:b2:92:e8:9f:9d:
                    d3:93:a8:5f:d4:21:9c:3c:4d:20:16:c0:fe:8f:03:
                    7e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B7:51:73:9F:9B:DB:5B:9A:D8:E6:8F:88:7E:4B:BF:4A:0C:62:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c34d1bbb-9b9a-37af-9795-ad7b15d1b928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:05:04:b8:b1:f2:f3:81:40:d8:10:72:ad:a7:52:f5:8d:9e:
         b0:78:d5:18:b2:79:a1:ac:cb:7f:ef:2a:45:49:b0:8d:90:03:
         f5:b8:d6:ae:39:75:54:9c:ce:68:6e:d0:52:13:47:73:bd:1d:
         8c:e7:99:b1:9a:85:3b:5b:79:1d:8a:41:57:8a:f6:db:cc:90:
         ab:72:ca:26:9c:58:7a:c2:08:a7:17:e9:9d:49:bb:81:63:9f:
         b3:35:5c:96:87:8c:f8:9e:d7:f5:34:a2:d0:ca:3a:38:90:de:
         0e:77:ee:74:44:93:61:3f:3a:e4:e0:62:74:ad:76:02:35:29:
         bc:6c:6d:52:02:73:97:42:3f:02:0c:2e:42:6e:e6:98:66:9a:
         50:79:0b:d3:ab:fe:ef:f6:5c:39:82:da:02:63:3f:66:c5:04:
         f9:55:c7:bb:ce:d0:4b:4f:b6:a0:82:a4:67:50:f5:00:10:63:
         4f:2f:4e:08:df:49:a0:4e:1c:39:75:42:1c:a4:77:b5:73:75:
         32:4c:b9:57:df:9f:09:af:81:48:d4:43:bc:47:91:20:32:6d:
         04:65:09:7b:9c:5b:aa:a4:03:14:6f:5b:cc:9b:3a:fa:a3:d4:
         07:80:f0:74:e8:77:3f:2a:ab:42:fc:0c:b5:9c:ee:a4:6f:aa:
         75:a5:ef:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:59:19 2024 by rpki-client on console-fra.rpki-client.org