Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/baa70988-7b5c-349e-b1ee-23e34d4c9e08.roa
File:                     baa70988-7b5c-349e-b1ee-23e34d4c9e08.roa (raw, json)
Hash identifier:          BLizuURd8Rrz0SeEbi2j9NsT5d3dUutyzUsq2zUGzLE=
Subject key identifier:   63:D3:33:90:05:86:7B:B8:98:FC:3B:C2:C7:7C:69:50:A8:0A:56:25
Certificate issuer:       /CN=2db54220-b640-4de5-bf21-207b4ffc20dd
Certificate serial:       010D0C9F43285845CF6E3EC81445772B05517B00
Authority key identifier: E4:E3:84:C6:FA:C4:11:1E:37:2F:F3:AD:8F:FB:C6:BB:97:62:03:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/baa70988-7b5c-349e-b1ee-23e34d4c9e08.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     198487
IP address blocks:        23.155.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/2db54220-b640-4de5-bf21-207b4ffc20dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/2db54220-b640-4de5-bf21-207b4ffc20dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:3e:c8:14:45:77:2b:05:51:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2db54220-b640-4de5-bf21-207b4ffc20dd
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=ae1e550f-7862-46d3-a9bd-234892ea2147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:76:25:b9:6b:a0:24:ba:52:20:4b:46:4b:57:
                    df:93:76:99:30:10:4f:56:1b:7b:64:8a:58:52:cc:
                    38:5d:a6:67:fb:59:c2:b5:e5:79:a5:54:9e:2f:8b:
                    dc:d8:dc:ff:16:a0:6f:8d:9f:fa:f6:5e:fa:5f:7a:
                    97:84:f5:48:c7:b0:c2:56:c6:53:4a:1e:da:48:33:
                    31:ce:86:68:4e:76:05:27:71:95:35:fb:fd:7a:d3:
                    97:e0:75:b4:85:0e:ef:d9:ba:35:e0:42:28:92:41:
                    37:f9:6a:cd:c3:68:6c:5b:7e:93:aa:0a:a6:88:2f:
                    18:6f:eb:fc:ee:65:6c:b5:68:c8:52:38:da:61:f6:
                    d7:df:a3:37:31:a3:e6:49:12:56:49:ab:6c:00:ab:
                    ec:40:c4:c8:b8:a6:ef:d7:7f:5f:ee:49:f9:b3:72:
                    72:c8:44:ee:16:8d:e1:3b:cc:27:92:53:12:eb:b5:
                    18:a7:94:f2:7d:93:ff:87:d7:1e:18:14:48:65:11:
                    41:47:8d:a9:10:f4:95:4e:7a:4f:ec:14:cd:1d:47:
                    c0:f7:d7:70:76:5d:e6:2b:16:7e:b0:68:0b:5c:5f:
                    04:fa:15:0b:d2:21:5d:c8:b3:70:c1:85:42:14:8a:
                    18:2b:a8:00:9b:04:87:dd:c7:9d:36:b0:93:78:57:
                    fc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D3:33:90:05:86:7B:B8:98:FC:3B:C2:C7:7C:69:50:A8:0A:56:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/baa70988-7b5c-349e-b1ee-23e34d4c9e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/2db54220-b640-4de5-bf21-207b4ffc20dd.crl

            X509v3 Authority Key Identifier:
                keyid:E4:E3:84:C6:FA:C4:11:1E:37:2F:F3:AD:8F:FB:C6:BB:97:62:03:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:90:f4:7c:c2:f5:a4:a0:9a:6a:9d:a9:16:11:06:03:b9:f6:
         fd:7d:58:c4:9b:40:03:4d:71:f0:43:8f:2c:f0:90:bb:69:e2:
         65:79:12:10:74:3f:55:a0:ca:a4:bc:5d:0f:2a:33:04:64:28:
         fe:35:6f:10:04:c0:98:7b:a6:d3:c4:b2:a1:6c:83:83:44:d1:
         a0:fa:26:45:42:b1:f5:a4:e0:2a:c7:12:e6:2f:66:19:9f:51:
         1a:e0:f0:34:3d:17:87:4c:c2:6c:73:f6:c5:6b:23:0c:31:df:
         0f:3a:a1:bd:5e:1d:90:c0:94:bd:0c:3d:09:70:16:4a:80:50:
         a7:39:c1:1e:70:0f:a5:8d:f7:52:3e:fb:05:e0:36:77:38:84:
         ef:21:56:58:35:39:c1:f0:51:67:cd:6e:db:aa:b0:30:cd:ff:
         7f:52:d3:e9:c1:01:59:05:16:03:45:03:c4:bb:43:e6:94:b6:
         4f:35:1e:68:5d:f3:e3:69:e9:92:3a:b6:83:6b:97:b1:ef:f6:
         c0:da:eb:d2:ec:74:c1:04:32:4d:eb:0d:e5:d9:39:f6:ca:07:
         5d:35:ee:aa:78:63:81:1e:4b:1b:7a:d5:98:e3:a7:68:d1:db:
         83:81:ec:7d:8b:8e:f3:60:e0:71:f0:cc:bd:8b:92:96:2c:34:
         80:3a:19:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:55:33 2024 by rpki-client on console-ams.rpki-client.org