Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa
File:                     097c095d-ece4-3ab9-b654-21a67c8b50d9.roa (raw, json)
Hash identifier:          g7hlJIbd0eGP7g06ZUNSVaGVzU9TFE/4JFTKrNosT7Y=
Subject key identifier:   4C:E5:F5:43:21:7C:62:E6:EB:AA:2C:AF:90:F8:34:6D:93:51:86:70
Certificate issuer:       /CN=35a72605-99bc-4c4b-995e-c01a3684dcbf
Certificate serial:       010D0C9F43285845CE08F40FE57F346DD87181B8
Authority key identifier: 9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     965
IP address blocks:        23.129.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f4:0f:e5:7f:34:6d:d8:71:81:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35a72605-99bc-4c4b-995e-c01a3684dcbf
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=707d888f-fab0-4047-9172-cc9ce58802e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:68:01:32:e7:88:c9:81:65:3b:ef:bb:2e:e5:
                    88:76:b1:81:55:0a:5e:e2:fa:cf:ef:e5:13:9e:ff:
                    51:05:d5:4d:02:c1:59:df:7d:a0:53:0a:f1:7a:4e:
                    bd:05:c1:d0:27:b7:18:24:28:62:14:b4:69:61:3c:
                    79:cf:ee:01:a7:aa:35:31:1a:48:ac:a2:f7:99:97:
                    17:4f:fb:7b:ca:27:db:00:25:26:7d:78:0f:36:55:
                    09:b9:05:b4:2a:8c:12:34:f3:29:a9:38:75:65:ab:
                    76:82:69:54:5b:5d:c7:a9:4c:5c:2a:ce:6a:23:53:
                    4a:c1:a8:11:17:4b:0e:1d:24:23:d3:90:0f:b4:f8:
                    d6:d5:c5:70:74:6b:7d:5b:81:37:f7:4c:41:99:ed:
                    a0:52:80:0c:90:30:7a:c1:49:57:c4:9b:4e:a7:fd:
                    6f:4a:a8:14:80:68:b6:bf:c2:d9:16:ed:42:fd:e2:
                    4b:a1:f1:5a:82:93:f4:65:47:9c:b5:ea:f8:ce:a4:
                    0d:04:60:a2:e5:92:f9:2d:a8:36:17:e2:e9:3e:79:
                    e2:37:db:fd:c7:43:0a:12:bb:26:8f:5d:b0:0a:90:
                    e5:9a:4d:b3:4f:87:17:8e:18:ba:3b:bf:cc:aa:26:
                    63:91:7c:54:22:0c:96:72:ed:aa:93:ec:78:f4:19:
                    ba:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E5:F5:43:21:7C:62:E6:EB:AA:2C:AF:90:F8:34:6D:93:51:86:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl

            X509v3 Authority Key Identifier:
                keyid:9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0d:93:46:44:38:4b:a4:02:ed:c4:07:27:dc:a2:02:ad:e8:
         f2:c7:6f:d3:1a:7b:58:11:d4:cb:57:24:04:95:33:41:e7:17:
         1c:07:76:ca:c1:78:5e:a8:f2:2c:85:44:2e:49:27:bb:2f:99:
         eb:40:f3:d9:4b:92:bd:04:39:c6:32:c2:78:42:39:9d:50:75:
         91:81:f4:81:36:4a:e9:06:17:ed:b2:fd:39:a7:95:a3:6c:b6:
         52:ce:36:88:cc:df:4c:95:0f:e5:a0:62:d1:7d:5b:70:66:73:
         f4:dc:50:c5:f8:07:de:bf:cf:92:b7:d4:d7:d7:a3:01:75:08:
         5e:15:f3:19:73:58:70:a3:e2:25:3a:cf:c8:a9:d0:91:cd:82:
         7c:20:60:86:c7:80:7d:4b:a0:48:85:4e:10:6e:84:dd:79:4d:
         07:6c:29:50:31:68:55:a0:08:80:80:e1:ad:c2:b3:90:78:68:
         40:32:6d:23:d0:62:cc:42:5c:69:d0:c6:2a:33:1a:74:2f:19:
         80:27:d9:08:80:fd:3d:43:f4:b1:18:75:20:b4:56:fe:36:35:
         9d:bf:9c:43:0a:c5:04:7a:8b:9a:a8:3e:16:8c:1b:a6:8b:5a:
         c3:07:a4:37:92:f4:56:2c:5f:23:39:7a:2d:02:c2:90:ce:e7:
         3f:2f:55:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:25:13 2024 by rpki-client on console-ams.rpki-client.org