Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa
File:                     0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa (raw, json)
Hash identifier:          xNpVBYxNkmCmORcgIJeQ8FwE3Vb3wUIg8scuqaYtss8=
Subject key identifier:   CE:33:BB:6D:0D:E0:A9:03:D9:C8:CC:A0:4A:98:65:2F:10:CC:B8:8B
Certificate issuer:       /CN=7905c321-789d-4866-a23f-9f01c7b24cf4
Certificate serial:       010D0C9F432858458B088EEAE2BF720B1EE2E0E0
Authority key identifier: 95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     395886
IP address blocks:        104.167.247.0/24 maxlen: 24
                          23.170.48.0/24 maxlen: 24
                          23.170.49.0/24 maxlen: 24
                          64.112.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:8e:ea:e2:bf:72:0b:1e:e2:e0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7905c321-789d-4866-a23f-9f01c7b24cf4
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=34da8543-9525-469d-a557-8ca435878d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e6:ac:8c:c8:2a:5d:5b:6c:d3:76:4a:4a:fd:
                    bb:7d:51:de:b8:b2:75:14:4f:19:45:31:16:bb:75:
                    b3:a3:6b:85:f9:5c:10:4f:72:b8:fe:1a:0e:28:6c:
                    34:fc:f6:38:cf:76:84:15:77:07:04:15:7a:40:f7:
                    ec:da:07:e3:f2:93:43:1a:43:73:f1:60:14:fc:71:
                    74:aa:fd:a8:8d:5b:b3:6b:7b:ad:a8:eb:3b:0f:df:
                    90:01:0c:a8:0f:fa:99:fa:a6:fa:db:53:35:80:b1:
                    85:b8:9e:d0:58:98:d7:60:9d:c6:cb:42:7a:a1:fe:
                    3c:c1:3c:e0:8c:32:1d:b5:cd:22:88:10:4b:1f:77:
                    9e:0e:05:2d:8d:4e:32:fc:e5:ca:3a:cc:99:04:26:
                    ff:76:0e:3a:cd:d1:61:f9:25:bd:fa:32:d7:5e:9b:
                    5a:08:bc:39:45:72:c8:94:7c:db:31:b5:c0:7b:96:
                    8d:17:d7:f3:62:a6:d1:93:97:49:30:fc:f9:fd:47:
                    b8:99:cd:7a:40:a0:de:2d:f6:64:69:8a:56:f7:0d:
                    de:a1:e0:9d:11:29:73:2d:98:52:d4:d1:5e:ac:9c:
                    c6:c1:40:e8:4f:30:b6:63:3b:f0:b4:11:d9:13:46:
                    af:91:57:d4:c0:1c:6a:c6:f5:ac:2c:ac:ee:8d:bb:
                    74:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:33:BB:6D:0D:E0:A9:03:D9:C8:CC:A0:4A:98:65:2F:10:CC:B8:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.48.0/23
                  64.112.28.0/24
                  104.167.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:cf:d3:43:82:6b:65:18:22:3a:32:33:35:e7:35:7d:c8:0f:
         27:a1:23:4e:d6:79:bf:c8:98:bf:da:21:4a:d8:1a:3f:fd:2f:
         b3:30:5a:c4:85:39:78:9c:26:29:b3:78:aa:41:ac:57:27:f7:
         4e:a8:99:50:00:ba:ed:3c:fa:38:1d:86:c6:92:f6:12:cf:9e:
         c3:a2:f5:e1:83:ec:1f:6d:2c:40:1d:43:2e:85:97:37:2a:82:
         ac:07:74:49:2a:57:6b:b4:61:90:c3:65:21:d5:2d:c9:16:20:
         8a:42:df:ce:2c:78:74:f0:d1:ab:e2:1f:c0:ae:c1:55:33:85:
         74:7a:7e:9e:79:3e:f5:eb:23:ce:ce:d4:94:a4:5b:46:6f:79:
         54:19:63:32:0f:5e:ed:0f:95:81:cf:57:f7:ac:8d:df:61:a6:
         0c:7d:a4:3f:d0:d1:2b:9b:e1:46:9d:7d:2b:4c:2e:b3:f5:fa:
         60:e0:8d:05:a2:5a:85:8d:29:d7:6e:09:10:06:21:e1:29:e6:
         30:83:b1:4f:a3:d2:0b:63:d3:50:5c:90:dd:16:7a:cf:1b:7c:
         fe:86:af:ef:b8:d5:cc:1a:7c:19:76:f9:87:ff:3b:25:22:8c:
         9a:cc:29:07:a7:4f:38:80:5f:08:d7:24:87:79:3b:6a:bb:40:
         83:11:0d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 13:45:49 2024 by rpki-client on console-ams.rpki-client.org