Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3e143da-c721-3da9-8123-92a7febad310.roa
File:                     d3e143da-c721-3da9-8123-92a7febad310.roa (raw, json)
Hash identifier:          OL0KOxeEDC5+5geGQHOv9ZLA77P0LlZZgNEywO4cges=
Subject key identifier:   37:53:BE:A5:E2:86:8D:03:62:75:03:DA:8C:1B:C4:27:49:72:87:DA
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858459A634EE8F725E35370E34100
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3e143da-c721-3da9-8123-92a7febad310.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     20940
IP address blocks:        165.254.234.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:4e:e8:f7:25:e3:53:70:e3:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=e7e34983-4643-4ba8-b976-2b7d931f93ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:16:fc:ea:bf:75:48:c4:a0:9f:35:12:5a:
                    85:c7:50:c8:39:d1:70:6f:63:a7:b9:8b:0c:bc:c9:
                    2f:b7:18:62:46:48:06:25:09:4f:68:bc:6b:25:df:
                    43:4b:6a:21:d1:70:93:32:44:e2:88:fc:cb:6a:e1:
                    85:02:58:01:2b:52:78:44:60:f9:22:ac:91:ed:5e:
                    2c:bb:ce:e2:5c:30:67:11:90:4c:49:7e:a1:d0:fc:
                    46:e7:70:aa:eb:2a:65:e6:7a:c2:86:58:03:56:b4:
                    48:2b:c1:aa:48:14:00:15:c2:07:6f:2f:8e:dd:23:
                    2f:1c:ba:bf:70:16:c5:3e:22:3c:3c:04:0d:21:54:
                    6a:5e:24:3b:ba:f3:c1:cf:f3:68:d0:da:20:29:a0:
                    61:ce:3c:2e:e9:67:f3:a6:3e:16:46:2b:72:5d:8c:
                    f5:89:10:fd:62:40:4b:d3:09:3c:4c:e5:b1:8a:f9:
                    7a:40:9a:d5:dd:62:8e:bc:b6:75:d4:a1:19:87:17:
                    3e:0f:12:59:3c:3d:87:6d:cf:bf:4e:01:35:4b:86:
                    cc:3b:da:7d:4e:12:3a:be:de:f3:b8:23:f3:06:b3:
                    db:6b:52:e6:1a:fb:66:73:ae:a8:e4:b6:a7:96:42:
                    26:d4:6c:bd:f9:53:a0:33:ad:06:de:32:b9:ef:38:
                    98:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:53:BE:A5:E2:86:8D:03:62:75:03:DA:8C:1B:C4:27:49:72:87:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3e143da-c721-3da9-8123-92a7febad310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:f1:c0:30:bd:66:ca:55:f8:21:98:52:95:12:2d:90:cc:31:
         7e:c7:4b:60:93:61:8c:5a:ae:e1:8c:2b:53:b8:08:44:5d:b1:
         c2:d2:4f:68:dd:ea:ba:52:49:33:ac:25:89:6e:dd:bd:f7:b2:
         c5:bd:e8:18:33:f7:0d:e4:e1:cc:dd:92:b7:ee:09:4c:b1:34:
         56:c7:2c:53:31:78:3c:63:7a:17:eb:e6:c9:6b:b9:a0:1d:25:
         31:14:7b:30:d1:5b:3e:77:b1:0c:61:0f:b1:9b:df:38:93:7d:
         d9:a1:f1:55:3e:a3:52:c8:62:68:8b:1a:f4:ca:6b:fb:83:87:
         95:e9:b5:d7:04:5d:99:e5:61:7a:35:d4:b7:73:52:04:52:f3:
         df:9b:63:43:b4:91:d1:7a:73:ae:6a:7b:44:6b:22:15:0e:a0:
         3a:e5:a5:46:f9:cf:bc:1a:3c:e9:87:37:b9:27:8a:08:e8:c8:
         66:75:7d:c8:bc:73:ff:62:fc:27:01:c4:9b:15:c4:b3:c0:20:
         77:1a:53:94:e8:a8:8f:d6:20:62:7b:2b:72:2e:ff:ee:14:67:
         92:77:96:02:1c:ac:43:53:0d:7a:bd:05:31:c7:d3:6b:53:f1:
         f9:ef:14:48:d3:ae:88:cb:28:72:77:c1:d4:83:ca:6f:35:a3:
         e7:1f:14:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:38:02 2024 by rpki-client on console-fra.rpki-client.org