Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0d1088c-9943-3223-b7bf-6ed8f4aa930e.roa
File:                     c0d1088c-9943-3223-b7bf-6ed8f4aa930e.roa (raw, json)
Hash identifier:          YDUoYigNCVK52eWdymzMjdXJlMX68D10CKX9XbQkyq8=
Subject key identifier:   98:73:7B:B0:1B:11:24:4D:48:45:8B:15:1A:10:BD:AF:FC:A1:19:98
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAD50914655E30BC9557148
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0d1088c-9943-3223-b7bf-6ed8f4aa930e.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33666
IP address blocks:        23.30.192.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ad:50:91:46:55:e3:0b:c9:55:71:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=cf361b88-30fa-4087-a58e-5d818969a80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:28:ff:f3:e9:4d:24:4a:4c:d3:be:33:72:7f:
                    d8:ca:75:cd:4b:fc:2a:fe:f5:6d:1f:c5:64:65:97:
                    7a:96:a0:d2:0f:61:2f:07:4f:7e:11:a9:c3:59:d7:
                    a2:a3:13:dc:b0:d9:a8:73:e7:fe:bb:14:74:29:2d:
                    fe:42:3c:30:2d:c5:7c:c2:cd:a7:d8:87:29:b8:d1:
                    ee:73:80:7d:18:23:62:0c:ef:06:31:89:4e:00:06:
                    1d:f7:4d:9c:94:07:48:d2:d3:c7:21:e7:49:0a:1c:
                    cb:fd:ec:3c:df:d6:b2:e0:a5:a6:1c:3e:59:70:c8:
                    24:2b:9c:96:d4:f3:d4:ed:05:b8:5a:4a:56:e4:b9:
                    ef:a2:bd:20:0b:40:0a:ab:6e:2b:b4:68:09:27:33:
                    66:02:5e:1d:77:d8:29:52:fc:08:2c:df:1f:3d:a1:
                    74:ae:2e:99:6e:91:98:e9:18:96:8a:24:2a:cb:c7:
                    29:58:69:3e:c5:30:7e:59:4a:81:7d:55:d8:33:cb:
                    1a:25:06:6c:7b:d6:5b:6d:e8:02:e6:ec:b6:00:a3:
                    63:3a:40:29:36:76:46:c8:30:c7:0b:0f:77:d1:68:
                    67:ac:23:3e:d1:8e:88:1a:94:95:52:51:eb:de:d0:
                    40:29:98:5e:50:c6:3c:e6:46:54:56:9e:c1:f5:2e:
                    96:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:73:7B:B0:1B:11:24:4D:48:45:8B:15:1A:10:BD:AF:FC:A1:19:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0d1088c-9943-3223-b7bf-6ed8f4aa930e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.30.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:d9:00:37:7a:42:c5:c8:5f:03:79:83:90:99:5f:44:7f:55:
         58:b6:e5:5d:b3:96:71:4a:75:e4:de:3c:b0:53:16:d3:09:c3:
         83:ec:a4:ea:06:00:c8:00:08:88:3b:84:88:57:60:3d:27:6d:
         1c:72:62:b6:ec:2a:95:ab:a5:80:8f:1a:bf:71:f9:5c:e9:c2:
         9f:f6:6f:4d:1e:5e:0a:ad:f1:b2:4d:9b:69:f5:fe:38:3d:79:
         67:ce:a7:83:3b:6e:e4:e3:15:df:f1:4a:4a:ba:b1:c2:38:d0:
         da:8b:f1:98:49:42:72:89:32:d5:c9:f5:17:bf:57:95:96:14:
         22:23:71:99:64:ea:1c:ae:95:7a:b7:e1:6d:10:7f:e7:6d:ac:
         a9:e7:f6:2f:37:c2:55:27:99:42:e5:a7:76:37:90:c4:d4:66:
         a7:7f:35:79:4f:f4:2e:82:38:3e:c0:23:ca:15:71:c0:32:06:
         15:7b:aa:c7:7f:63:a0:a9:2d:02:9b:0f:01:ea:0c:ad:0c:94:
         c3:d1:1b:d7:01:18:67:13:fc:0f:09:02:3b:b7:39:4e:73:39:
         e2:3f:c7:05:27:bd:20:a1:68:b4:d2:05:e7:84:6c:98:b5:98:
         76:6c:31:53:71:10:75:02:cf:e2:1d:8b:d2:90:aa:4c:5c:e2:
         69:fa:fd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:21:41 2024 by rpki-client on console-ams.rpki-client.org