Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067/25d66069-ff85-361c-875a-e107a3461d71.roa
File:                     25d66069-ff85-361c-875a-e107a3461d71.roa (raw, json)
Hash identifier:          Tnhm9dwgSfoHCcaxm6qYokTDmpi0c71XhxkwmNdyBlM=
Subject key identifier:   68:60:CD:D4:9C:55:15:9A:0E:31:CE:D5:B9:6D:EF:BB:36:56:6B:AD
Certificate issuer:       /CN=b398d648-0ea3-4f7b-b160-eeb674498067
Certificate serial:       010D0C9F4328584523DAF81905FE521DD7F698C0
Authority key identifier: 8F:87:33:9D:95:8B:5E:03:C2:1B:43:A8:12:1D:1A:F8:2A:CC:DB:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067/25d66069-ff85-361c-875a-e107a3461d71.roa
Signing time:             Fri 08 Mar 2024 14:00:30 +0000
ROA not before:           Fri 08 Mar 2024 14:00:30 +0000
ROA not after:            Thu 06 Jun 2024 13:00:30 +0000
asID:                     400642
IP address blocks:        23.142.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067/b398d648-0ea3-4f7b-b160-eeb674498067.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067/b398d648-0ea3-4f7b-b160-eeb674498067.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:da:f8:19:05:fe:52:1d:d7:f6:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b398d648-0ea3-4f7b-b160-eeb674498067
        Validity
            Not Before: Mar  8 14:00:30 2024 GMT
            Not After : Jun  6 13:00:30 2024 GMT
        Subject: CN=198d40a3-4af0-45e3-a00d-1a18d19e9e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0c:02:c9:96:c6:16:af:38:72:87:27:27:9c:
                    91:62:ce:17:54:00:b2:89:20:fd:07:0c:5d:9e:31:
                    78:2d:20:54:12:55:17:10:19:d7:fc:29:b2:20:0a:
                    81:43:de:4d:53:e1:61:b5:7d:40:06:08:de:41:18:
                    9e:ac:3a:5e:2f:9f:a8:4f:d3:ee:19:7a:8b:8d:60:
                    7f:06:09:63:cf:41:47:18:c4:d6:57:c7:fd:85:42:
                    ca:e4:ad:e3:0e:b5:90:1c:25:2b:7d:f0:12:53:7c:
                    f6:b8:79:67:69:21:5a:61:85:3f:2b:6d:3d:30:65:
                    66:43:ee:e7:d8:28:94:3f:ba:92:e6:f1:ce:e5:83:
                    c6:8f:4f:c1:39:f5:ba:64:21:fa:83:1d:65:94:57:
                    97:ff:54:19:b6:4b:e5:d1:ac:e4:bd:cc:c8:f6:be:
                    3b:57:ff:55:e5:41:2b:26:45:b7:d2:3a:08:25:1a:
                    9c:1c:5a:cf:45:f8:00:94:56:3b:02:5a:f8:0f:f0:
                    b2:84:f4:b6:01:aa:3e:9d:7e:7e:1b:fc:23:79:da:
                    e1:bf:cd:74:f8:ba:c3:a7:86:fc:37:7f:2f:3c:51:
                    db:a1:43:7f:dc:0f:2c:00:65:2f:95:db:e3:d9:cd:
                    34:16:23:c5:50:12:42:79:cd:9c:bb:65:77:98:c7:
                    0d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:60:CD:D4:9C:55:15:9A:0E:31:CE:D5:B9:6D:EF:BB:36:56:6B:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067/25d66069-ff85-361c-875a-e107a3461d71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067/b398d648-0ea3-4f7b-b160-eeb674498067.crl

            X509v3 Authority Key Identifier:
                keyid:8F:87:33:9D:95:8B:5E:03:C2:1B:43:A8:12:1D:1A:F8:2A:CC:DB:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:7f:09:dc:15:f9:b1:4a:03:94:17:f6:4d:bc:a8:2c:e2:be:
         75:2f:9a:27:86:ef:c4:57:d3:9f:f3:f1:18:54:48:3d:7c:90:
         0a:3a:54:ac:96:d4:a1:18:8d:09:78:80:ef:a8:2b:c2:89:55:
         b8:4b:a3:ed:af:71:54:62:95:10:76:1c:56:e7:f1:e0:55:3c:
         91:24:45:c7:6e:7a:4d:73:2f:35:7e:88:7b:04:46:6a:36:96:
         42:08:f4:13:d0:f6:3b:3a:c1:bc:d5:5c:47:4d:d9:ed:9c:17:
         5f:71:a1:db:e2:06:65:e6:0f:72:60:e3:83:f4:04:97:13:de:
         8f:c7:9e:ad:ae:1e:5d:59:56:18:dc:fa:d3:19:b7:7a:49:8f:
         30:25:e3:67:c5:37:29:45:39:f4:84:78:d3:d1:81:5b:8f:8d:
         e0:a4:03:fc:cc:de:41:13:e8:31:d2:03:77:14:aa:95:3b:1d:
         50:c9:68:c0:ce:f1:d1:06:df:3b:98:76:10:f5:a5:f0:d7:9d:
         eb:cd:0f:07:bb:0a:54:a0:b7:2c:e8:69:29:15:50:57:5b:c4:
         ed:ae:95:da:34:8e:11:29:2a:c2:8a:bf:9d:03:da:27:a5:50:
         59:2e:0e:65:2c:cb:7f:cb:c1:40:13:d1:89:2f:8a:16:99:d6:
         06:3f:03:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:02:37 2024 by rpki-client on console-ams.rpki-client.org