Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/035f13a3-6363-30e8-b8f0-29075f337c20.roa
File:                     035f13a3-6363-30e8-b8f0-29075f337c20.roa (raw, json)
Hash identifier:          QITZHBEu0IH7jgnk2kZlP8qIgKpWcZYyS+mUsCcV/YE=
Subject key identifier:   CB:A9:02:4C:EC:C3:40:D3:DF:1A:88:50:3A:08:AF:BC:A3:C5:CC:25
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F432858452DD007F3870981ED9AED7380
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/035f13a3-6363-30e8-b8f0-29075f337c20.roa
Signing time:             Tue 12 Mar 2024 03:36:36 +0000
ROA not before:           Tue 12 Mar 2024 03:36:36 +0000
ROA not after:            Mon 10 Jun 2024 03:36:36 +0000
asID:                     396955
IP address blocks:        163.253.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:d0:07:f3:87:09:81:ed:9a:ed:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Mar 12 03:36:36 2024 GMT
            Not After : Jun 10 03:36:36 2024 GMT
        Subject: CN=2d25122f-c4e5-44c8-b9c1-523e92a31860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f4:b5:79:29:9e:ff:73:73:6f:7b:46:f1:af:
                    59:c4:cc:94:52:82:8e:d2:05:68:d1:e5:17:e0:f8:
                    3d:c5:82:e3:f1:33:63:59:bd:04:c8:c9:07:00:37:
                    49:3c:76:cb:92:e3:cc:a9:c5:71:2e:ee:02:ee:ce:
                    35:95:81:ec:8f:c0:09:3e:48:38:23:fd:34:04:52:
                    80:c4:d4:d3:7b:2c:b5:e8:26:ee:ba:80:d1:fd:54:
                    10:16:3f:67:62:82:e0:81:cb:f2:82:05:05:8d:0a:
                    6c:d7:6d:a6:92:8e:57:a8:80:b2:20:63:8f:80:60:
                    84:0e:07:25:38:57:c2:b2:0a:0e:f4:72:ae:63:cd:
                    8a:0e:0e:bb:78:27:aa:3e:fd:f6:ba:83:3a:c6:71:
                    11:dd:6b:eb:ea:9a:1c:f6:f8:60:70:22:ab:d5:92:
                    ab:84:41:ce:48:89:5e:b2:ae:1f:ff:94:e6:39:c1:
                    6d:da:14:f2:79:8d:f0:08:7a:e6:01:76:b5:81:94:
                    e7:64:e4:9e:d0:b4:97:61:e7:24:37:9e:70:d8:91:
                    04:2a:ed:91:d1:dc:3e:e7:6b:c9:60:48:a1:96:89:
                    ec:02:3a:b9:2b:25:9f:18:8e:25:a3:e8:8b:e4:82:
                    62:3a:bf:55:69:d7:40:28:9e:73:07:5b:71:41:c1:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A9:02:4C:EC:C3:40:D3:DF:1A:88:50:3A:08:AF:BC:A3:C5:CC:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/035f13a3-6363-30e8-b8f0-29075f337c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:0c:de:ff:ea:2d:79:aa:d7:ad:b9:09:db:d2:4d:37:76:06:
         3f:6b:59:e3:ad:0b:03:12:36:a3:48:e8:8a:59:d3:26:8c:11:
         75:a3:28:b5:51:84:08:85:37:e3:aa:20:c7:21:05:cf:a3:f5:
         4d:18:8d:1c:c6:dc:b0:f3:4d:0a:9d:40:c3:c3:3e:70:ae:40:
         ba:30:79:9f:3d:e3:da:7a:30:30:98:8f:9b:60:e9:09:09:24:
         7e:7a:58:94:43:1d:6f:2c:02:d7:53:9a:2e:53:38:31:a2:bb:
         7f:2f:4c:bd:80:d5:fe:4f:0d:0d:5b:75:67:97:6c:b1:30:94:
         a8:4f:6e:82:51:19:bc:a1:2d:3d:a5:00:8c:25:ef:86:1d:98:
         f9:4b:41:2a:db:77:8d:28:e1:a6:43:2e:c3:80:1a:4f:1a:67:
         7a:5e:b2:a8:56:4b:88:bd:7b:da:9b:bb:a1:e1:5c:be:37:4c:
         23:d6:35:d7:73:94:9a:74:2f:08:d3:8d:90:69:be:39:8c:64:
         b2:fb:af:e6:7e:ef:72:03:d7:d8:f4:70:2d:db:53:55:a1:ea:
         b9:a5:fc:40:aa:9e:f0:40:10:8e:c6:6f:56:e3:21:3f:ec:a1:
         bf:f5:44:93:fa:17:33:f8:bb:74:66:71:ae:9f:ff:ed:bf:a9:
         4e:d4:d9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:33:02 2024 by rpki-client on console-ams.rpki-client.org