Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/96ff1ca6-293a-3f0c-aa9f-36fea8938052.roa
File:                     96ff1ca6-293a-3f0c-aa9f-36fea8938052.roa (raw, json)
Hash identifier:          4fQphGOZK+k/CYUGZ/Uz8cMljY+PFVws6ENRZNT5ebM=
Subject key identifier:   3B:CD:7B:46:F3:51:E9:82:1C:E6:07:82:79:25:EA:54:34:89:22:3F
Certificate issuer:       /CN=4132bf8c-4af7-4b01-9cd6-dfa2193d127d
Certificate serial:       010D0C9F43285844F2FFF600A7C39A873E0A8440
Authority key identifier: F2:BC:3F:60:15:23:0D:8B:6B:7C:E6:52:59:78:6E:78:AB:21:17:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/96ff1ca6-293a-3f0c-aa9f-36fea8938052.roa
Signing time:             Tue 20 Feb 2024 02:00:26 +0000
ROA not before:           Tue 20 Feb 2024 02:00:26 +0000
ROA not after:            Mon 20 May 2024 01:00:26 +0000
asID:                     20473
IP address blocks:        192.206.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f2:ff:f6:00:a7:c3:9a:87:3e:0a:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4132bf8c-4af7-4b01-9cd6-dfa2193d127d
        Validity
            Not Before: Feb 20 02:00:26 2024 GMT
            Not After : May 20 01:00:26 2024 GMT
        Subject: CN=bf268fd6-92a0-461f-8abb-4ff1f63cb66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a6:57:71:f7:a5:ab:20:d4:9e:80:60:1b:14:
                    61:58:ab:c4:95:0a:1e:7d:da:05:58:3a:f7:9e:26:
                    24:2e:4b:3b:18:a4:d9:fe:92:ce:5c:4b:56:45:dc:
                    58:37:49:ed:c1:ce:49:b2:da:37:26:62:d8:04:df:
                    64:1a:5f:32:4a:a6:52:ab:e6:6a:9c:df:41:30:a5:
                    2c:86:1e:d8:56:67:1c:2d:35:44:fc:62:b3:98:13:
                    a6:be:af:a4:24:d6:f2:77:97:cf:e9:53:7b:93:4e:
                    77:d6:8a:14:d6:d4:6f:60:35:55:c6:2f:9f:42:58:
                    59:56:ab:0a:98:c1:6c:7f:57:83:d3:81:d2:2a:44:
                    cd:82:60:08:af:80:9f:5f:16:bc:61:b9:49:88:51:
                    f9:e5:b1:45:64:ea:13:8d:fb:55:26:f5:2c:23:b0:
                    df:ff:cc:14:c8:74:56:e5:83:43:b0:d4:a6:00:5c:
                    8b:93:1c:23:17:8b:72:d8:52:7b:7d:08:68:87:a7:
                    67:3a:23:1f:33:58:45:30:36:59:f7:dd:bd:6f:74:
                    c7:14:fa:1f:07:16:71:92:56:b1:5e:ed:93:d2:71:
                    71:29:22:74:f2:31:22:51:5b:e2:1a:2e:9b:ca:22:
                    88:a2:69:31:09:7d:72:e7:ce:f0:af:0e:0d:0b:25:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CD:7B:46:F3:51:E9:82:1C:E6:07:82:79:25:EA:54:34:89:22:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/96ff1ca6-293a-3f0c-aa9f-36fea8938052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.crl

            X509v3 Authority Key Identifier:
                keyid:F2:BC:3F:60:15:23:0D:8B:6B:7C:E6:52:59:78:6E:78:AB:21:17:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:28:5b:42:f2:bb:3e:51:3f:a6:cb:b6:47:07:c0:1b:97:59:
         dc:b6:cb:98:80:10:ba:cf:e8:a2:76:f4:ee:27:84:79:05:70:
         a5:b2:dd:ad:03:f7:be:1e:d3:7b:a2:09:92:f9:47:fc:37:c7:
         97:10:7a:10:a6:16:61:a2:50:04:09:41:69:9c:5e:53:eb:bf:
         83:84:98:88:ec:d7:6e:fa:25:52:2f:ef:cf:61:5d:66:fa:95:
         b4:d9:79:fd:1d:10:fe:3b:1a:0e:60:71:22:3b:d6:f1:be:6d:
         72:9e:05:54:64:3f:52:1f:c7:3c:da:5d:d2:93:60:76:3d:2f:
         73:d5:1e:81:40:2b:a9:75:da:ed:e7:b3:2b:89:e1:99:71:57:
         9e:3e:44:c1:0c:34:02:3e:3d:a5:46:83:a0:3d:f4:0e:13:72:
         45:da:54:a5:61:8a:91:a9:36:ea:6c:c3:d2:d4:29:a0:91:0d:
         d3:b8:84:1b:c8:27:7f:7e:0c:58:e4:38:bc:d4:fe:00:96:f1:
         97:7a:bc:a1:aa:bc:f9:6e:6f:5c:92:6b:fa:0e:6b:5c:c4:7c:
         7d:55:ff:de:6b:80:62:af:af:1e:5b:47:80:36:54:f0:ff:1e:
         f9:24:d6:0a:ad:3c:06:60:b7:92:b9:cf:79:b6:e3:91:89:b0:
         59:93:61:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:35:09 2024 by rpki-client on console-fra.rpki-client.org