Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee/afbee109-a41e-388b-aa64-c1397e1da515.roa
File:                     afbee109-a41e-388b-aa64-c1397e1da515.roa (raw, json)
Hash identifier:          Geuw32OMaBZlsSPBKrbAMcSrCHUobT96ZZLysyOdgyA=
Subject key identifier:   0B:74:97:83:1E:75:BA:31:DE:3A:D0:67:0C:93:AB:1E:C7:95:41:29
Certificate issuer:       /CN=6905fb8c-d913-4c31-b30b-835c96c3b5ee
Certificate serial:       010D0C9F432858455A2D850601D7C6D9F3BFBB00
Authority key identifier: 94:86:D1:3F:BA:C7:62:91:3C:1A:3B:C4:C3:58:7B:2B:8A:13:69:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee/afbee109-a41e-388b-aa64-c1397e1da515.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     204535
IP address blocks:        23.158.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee/6905fb8c-d913-4c31-b30b-835c96c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee/6905fb8c-d913-4c31-b30b-835c96c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:85:06:01:d7:c6:d9:f3:bf:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6905fb8c-d913-4c31-b30b-835c96c3b5ee
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=95fe274f-6e42-447a-869d-b16b945068d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4c:25:21:1b:ba:25:7a:d9:aa:36:92:38:c9:
                    65:ee:fc:b6:cc:1d:48:b0:5b:8f:7a:88:77:a0:78:
                    b0:6e:ef:44:5e:af:d1:ba:8b:d9:76:18:c2:6b:ab:
                    b5:2d:55:f7:c3:67:29:33:cd:59:a9:7d:21:58:a0:
                    58:d8:45:d2:69:da:4d:d6:12:6e:28:56:dd:04:d4:
                    ae:26:1f:80:c0:37:21:6a:61:6d:3d:7f:c3:fb:72:
                    87:19:02:87:94:cc:35:0d:85:20:ae:2c:71:e7:b0:
                    84:10:fd:95:f2:24:b6:46:68:2c:b8:d1:a4:b7:80:
                    ab:ea:b1:0d:99:de:a5:bb:df:ac:a9:b0:5e:f7:e6:
                    2e:fe:0e:cc:60:35:c4:2e:f2:62:c8:01:ea:f5:4f:
                    bc:c6:80:e0:ab:8a:1f:9b:28:54:d9:c0:a3:8d:03:
                    27:ee:76:fd:af:be:f9:22:7e:f7:80:64:98:57:0c:
                    06:0c:4b:73:0b:80:c8:04:d1:44:52:f1:62:27:cc:
                    5e:60:ff:10:b8:1a:ae:5d:a9:cd:60:4f:b7:cb:5b:
                    db:04:01:6d:1b:60:b0:e6:5f:12:12:dc:c4:c5:06:
                    d9:2d:d8:ee:6c:a5:d9:83:57:a1:d1:70:47:68:32:
                    76:f7:66:b3:b6:db:0b:69:9c:7e:95:0a:03:f8:3e:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:74:97:83:1E:75:BA:31:DE:3A:D0:67:0C:93:AB:1E:C7:95:41:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee/afbee109-a41e-388b-aa64-c1397e1da515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee/6905fb8c-d913-4c31-b30b-835c96c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:94:86:D1:3F:BA:C7:62:91:3C:1A:3B:C4:C3:58:7B:2B:8A:13:69:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:22:95:db:cc:b6:d3:1e:b9:65:bd:9a:bb:65:78:65:d1:9c:
         12:66:60:8d:16:74:53:8f:fa:fe:75:fe:5f:6f:13:a3:f4:8a:
         9a:c3:99:40:62:82:15:a4:3e:ec:3c:3f:93:84:8e:43:fa:ef:
         1e:76:b0:fe:6d:34:96:cd:d9:4c:68:3e:b6:88:8c:6a:30:97:
         f9:ef:2b:a0:f2:43:d3:29:5b:66:88:fc:f0:2d:a1:25:4b:38:
         06:91:fe:0a:85:7a:e5:d3:be:2c:cd:60:5c:7e:42:3d:8a:a9:
         08:89:85:01:be:8e:7d:d3:e3:ae:95:a7:bb:16:35:6a:fa:8b:
         44:28:50:5f:be:2e:f6:29:5d:5b:2c:d0:ec:f6:f9:48:14:86:
         5d:51:71:b4:eb:6b:c4:dd:32:15:bf:35:e1:a4:01:ba:76:bf:
         f1:31:cc:85:7b:f7:8b:e5:56:75:2c:6c:3b:14:03:23:1a:b7:
         e6:85:2d:b8:c9:62:2f:04:0a:2f:a9:1a:b4:e9:82:f7:0c:48:
         41:eb:a4:73:2c:54:fa:9d:34:77:e3:d6:b9:85:55:d2:45:b0:
         dc:00:02:39:c5:52:b3:86:b0:34:bc:d3:26:95:b4:66:c3:c9:
         1f:35:24:09:04:8a:a2:e5:b9:e4:bd:b7:39:a4:25:c5:37:ac:
         01:01:72:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:10:38 2024 by rpki-client on console-fra.rpki-client.org