Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/e0a348ab-ca16-343f-a8f1-12844853c4b8.roa
File:                     e0a348ab-ca16-343f-a8f1-12844853c4b8.roa (raw, json)
Hash identifier:          OvGsXSR3T7tGsfqfDav+W0pxNNQKwej9gaCxWvCLnbw=
Subject key identifier:   F2:8A:62:76:93:4E:E1:0B:EF:F5:22:93:7E:D9:AB:5F:98:D5:73:24
Certificate issuer:       /CN=10b5a04a-f4e1-44ae-be5f-312a5d1a57c8
Certificate serial:       010D0C9F432858450C2028CBF1C77C1360657200
Authority key identifier: ED:4C:8D:F8:79:6F:9B:C9:5E:AC:3B:10:BA:33:AA:5A:AE:B3:C1:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/e0a348ab-ca16-343f-a8f1-12844853c4b8.roa
Signing time:             Thu 29 Feb 2024 02:00:27 +0000
ROA not before:           Thu 29 Feb 2024 02:00:27 +0000
ROA not after:            Wed 29 May 2024 01:00:27 +0000
asID:                     31867
IP address blocks:        162.213.130.0/24 maxlen: 24
                          163.123.178.0/23 maxlen: 24
                          23.149.192.0/24 maxlen: 24
                          2604:7c40::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0c:20:28:cb:f1:c7:7c:13:60:65:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b5a04a-f4e1-44ae-be5f-312a5d1a57c8
        Validity
            Not Before: Feb 29 02:00:27 2024 GMT
            Not After : May 29 01:00:27 2024 GMT
        Subject: CN=94b38722-b060-41fd-8915-254a6bf0e3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8b:df:c1:0e:f2:98:da:c3:4c:bb:81:97:b2:
                    c0:c5:0b:5d:57:ea:e3:0c:55:17:9e:e4:9d:22:99:
                    80:f3:33:d5:be:0a:c8:08:92:88:1b:04:04:a9:db:
                    89:ed:f4:3a:34:2d:6f:db:30:58:f9:ab:ab:9a:a8:
                    56:97:45:fe:c1:c3:45:92:30:50:46:a7:7c:62:07:
                    5e:04:5a:96:b8:71:69:11:bc:7c:14:66:c2:9a:19:
                    6f:84:41:71:46:8f:f8:01:bf:cf:8d:f1:7e:33:91:
                    8b:e9:51:d3:de:13:ac:8d:de:86:56:48:0a:e6:31:
                    ac:ae:f5:ff:38:f0:a2:fe:62:c1:6d:71:1e:78:79:
                    44:e5:ee:f4:83:41:15:4b:44:77:27:65:89:cb:bf:
                    d4:24:7e:ca:7d:71:b2:85:0c:9a:ae:2e:ce:54:23:
                    58:63:d5:c5:3e:fd:27:ef:93:14:3a:df:5a:2a:62:
                    e0:2e:15:fa:94:fe:9e:58:df:e6:3c:9c:5a:4d:44:
                    3d:3b:fe:78:bc:91:d0:b4:58:2e:51:07:ed:a3:37:
                    01:ff:81:90:9c:c3:36:11:d2:72:06:2a:c1:55:ea:
                    d6:50:70:25:3d:d7:20:51:4f:cf:1a:50:94:e1:8c:
                    d1:5e:26:c5:fd:a2:f4:72:be:e8:6f:db:99:e9:c2:
                    e6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8A:62:76:93:4E:E1:0B:EF:F5:22:93:7E:D9:AB:5F:98:D5:73:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/e0a348ab-ca16-343f-a8f1-12844853c4b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.crl

            X509v3 Authority Key Identifier:
                keyid:ED:4C:8D:F8:79:6F:9B:C9:5E:AC:3B:10:BA:33:AA:5A:AE:B3:C1:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.192.0/24
                  162.213.130.0/24
                  163.123.178.0/23
                IPv6:
                  2604:7c40::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:5b:0c:f0:9f:2f:35:fd:85:f7:d1:10:a9:4c:81:d5:f9:a8:
         3f:1e:93:6d:69:00:3b:5e:b4:27:21:4e:8b:95:61:21:8e:49:
         47:13:a4:af:c4:9e:7a:d4:15:d4:1e:d6:bb:86:d2:f2:21:91:
         8b:c9:d0:47:0d:0b:91:ed:f7:94:c6:a9:d9:e7:dc:05:3d:87:
         62:a2:36:29:e2:ea:d3:8b:89:44:3b:bf:96:db:bf:6a:9e:cc:
         16:ca:d1:c8:92:fc:46:10:1b:d9:02:34:21:41:b5:15:72:b0:
         bd:64:b5:f1:e3:ef:c2:d2:10:bc:c0:fa:a1:7d:e6:43:4b:8d:
         a7:e7:6b:9a:b7:4c:d9:d7:62:cf:c7:b0:ca:48:12:5b:e6:63:
         62:1f:71:dd:2e:2a:a4:22:d1:f4:a4:c0:16:e6:2c:ac:21:72:
         f8:2c:ce:d3:b1:5c:c6:cd:e6:5a:28:49:0f:42:18:e8:ba:ae:
         c2:fa:97:11:73:28:1a:d0:fa:8c:81:04:8e:5e:11:b9:51:24:
         73:2a:af:5a:dc:c7:21:fa:2a:c2:8e:eb:88:9e:f2:6c:17:82:
         77:5c:19:0d:5b:55:b9:6c:7e:5e:20:a7:31:3b:25:f2:93:b8:
         81:54:14:a4:23:1b:84:65:d0:12:a1:b6:53:90:a9:ff:03:c4:
         80:09:cf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:03:38 2024 by rpki-client on console-ams.rpki-client.org