Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/c6786d24-a67a-351b-a186-9ef602225e4d.roa
File:                     c6786d24-a67a-351b-a186-9ef602225e4d.roa (raw, json)
Hash identifier:          EOZ07/TOeviEGMO7b8YCkT7YGbi/udrtebc/VdWUhz8=
Subject key identifier:   5C:B8:28:F3:52:FC:08:43:D0:50:DE:3E:AA:D8:62:33:AE:7F:42:CF
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F432858450EEAD34609D765964C44E0A0
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/c6786d24-a67a-351b-a186-9ef602225e4d.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     33442
IP address blocks:        149.23.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:d3:46:09:d7:65:96:4c:44:e0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=7aba7085-b7e2-4eb7-b7d7-7a488f6fa415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9f:49:0d:32:eb:c4:ce:b1:5d:dd:25:5f:5a:
                    10:20:6d:20:df:64:91:f6:f3:0e:30:02:00:d2:2f:
                    59:08:c0:99:cf:4d:78:42:48:66:be:a3:b0:f5:c5:
                    a4:b0:fb:31:f1:cb:85:31:12:59:ab:a3:c9:4f:16:
                    24:78:5e:e7:d3:bb:1f:85:eb:86:b7:7d:8c:b7:1e:
                    3d:90:17:98:00:da:bf:ec:97:39:70:8c:07:dc:68:
                    04:78:e2:71:44:30:d3:39:d9:4a:bc:ea:85:33:c2:
                    e1:b8:8d:6d:df:95:96:c9:6d:d1:e5:09:3f:81:60:
                    09:3c:55:bb:31:ae:f8:e6:18:5a:07:8f:3a:c0:14:
                    70:ee:70:9f:b1:36:0c:f2:fb:e7:3d:f1:06:0c:8b:
                    eb:9a:7a:5d:1b:52:7f:22:21:35:72:9a:31:ce:ca:
                    8e:ad:7e:7b:d7:db:ed:62:92:5a:f8:a4:65:e6:f8:
                    bd:96:ee:82:0e:5a:19:ca:d5:a6:13:82:b5:1e:42:
                    a7:d7:21:41:11:b4:ee:22:19:d4:d7:bc:87:57:5d:
                    db:5f:8b:01:77:af:67:a9:c7:5c:62:2d:08:a7:c7:
                    de:57:81:9c:2d:c6:d0:04:88:06:c9:e2:33:73:eb:
                    c7:c0:94:9a:f3:4b:01:20:d6:c7:3f:6f:b8:53:da:
                    6f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B8:28:F3:52:FC:08:43:D0:50:DE:3E:AA:D8:62:33:AE:7F:42:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/c6786d24-a67a-351b-a186-9ef602225e4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.23.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a3:0e:78:83:80:ec:6e:61:37:01:81:b6:33:97:af:25:4d:
         5d:bf:2e:20:07:3a:9d:5b:de:4e:2b:74:40:d1:c5:5c:0f:2d:
         82:f8:1f:9c:86:c8:51:21:28:19:80:1d:9a:b7:b1:97:5c:aa:
         5a:fa:35:f9:33:2d:47:5e:2e:6d:ee:8b:e6:f5:b9:3e:fc:e9:
         a6:fe:09:d2:ec:8b:a3:4a:3e:5c:37:c8:a9:7a:6a:82:3a:88:
         7c:12:c5:9d:12:37:7d:c5:8c:fa:55:39:5f:1c:07:a7:2f:dd:
         2b:9f:50:24:54:6c:ce:f5:4e:7e:24:79:ef:2e:7d:0a:ae:fd:
         44:00:d0:e4:67:97:61:0d:e9:ea:d7:18:36:8c:26:3f:25:73:
         e5:7b:cc:7b:9c:51:88:be:ca:ba:68:01:3f:04:02:ac:6a:1a:
         35:ec:7e:8e:5f:2c:a0:d0:66:9b:a9:e7:68:ff:0e:6b:2c:ba:
         0e:70:aa:f0:e1:f4:e4:79:f6:7a:8c:77:66:10:d0:ff:65:72:
         0c:f1:25:54:55:6f:3e:bd:d0:43:a8:a9:6d:c1:df:74:27:07:
         7a:49:cd:c7:b6:22:de:7a:12:7b:2f:b8:40:c2:8c:88:83:d9:
         2b:a7:d5:1a:b2:c2:21:b4:71:f6:38:9f:dc:ba:cc:49:04:db:
         c4:49:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 05:50:06 2024 by rpki-client on console-ams.rpki-client.org