Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/a7534a47-109b-3063-87ba-3fd7c7d78388.roa
File:                     a7534a47-109b-3063-87ba-3fd7c7d78388.roa (raw, json)
Hash identifier:          Out6b/QCKIhq3dr87cw3fQNaBmoRj2zLBD2ltN1U2Cc=
Subject key identifier:   CC:5F:3D:3D:6B:52:F5:32:B9:C6:FA:6E:8A:0B:C2:1C:23:09:C7:B1
Certificate issuer:       /CN=725a4aca-8e03-4420-8745-329c8962b4d1
Certificate serial:       010D0C9F43285845A18BBD4ECF528B8BE8A4E980
Authority key identifier: 49:6F:54:A1:0B:DB:44:EE:36:B9:B9:6D:A2:13:78:5C:E8:68:4B:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/a7534a47-109b-3063-87ba-3fd7c7d78388.roa
Signing time:             Mon 22 Apr 2024 14:32:47 +0000
ROA not before:           Mon 22 Apr 2024 14:32:47 +0000
ROA not after:            Sun 21 Jul 2024 14:32:47 +0000
asID:                     12129
IP address blocks:        23.175.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/725a4aca-8e03-4420-8745-329c8962b4d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/725a4aca-8e03-4420-8745-329c8962b4d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:8b:bd:4e:cf:52:8b:8b:e8:a4:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725a4aca-8e03-4420-8745-329c8962b4d1
        Validity
            Not Before: Apr 22 14:32:47 2024 GMT
            Not After : Jul 21 14:32:47 2024 GMT
        Subject: CN=cd7a50ea-392e-48e6-ab11-0fc50b7617f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:44:cf:4d:32:cb:49:0d:7d:d2:cd:c8:1d:1c:
                    89:3d:d7:d2:7a:6f:95:00:d1:c6:dc:65:5a:84:75:
                    56:af:8e:fc:da:5a:9b:11:c4:0f:92:c7:25:bd:28:
                    30:5c:72:28:8a:18:9f:91:d5:8c:43:39:b1:74:5d:
                    f7:79:10:75:0c:d3:34:f3:31:0b:23:ea:10:38:90:
                    4c:b1:f8:71:39:78:2b:92:75:e0:c3:e1:5c:a4:6a:
                    e6:79:cc:59:97:7e:24:f4:d0:97:42:4a:a6:dc:be:
                    8b:e4:06:52:11:f2:9c:74:85:93:96:8f:8b:dc:3b:
                    a1:3d:4c:11:df:bf:7d:c9:75:cb:e6:ee:fc:d5:a3:
                    f2:56:8c:db:ac:0b:be:85:50:5e:6e:23:90:45:db:
                    8e:b0:27:16:03:df:71:58:1e:3c:64:48:1e:40:c5:
                    2a:d8:ea:ad:67:e5:70:f5:22:9d:96:52:0d:9f:0d:
                    56:9a:66:00:f8:04:c8:0b:c8:f3:b8:f1:82:7e:a5:
                    b7:e2:8e:1a:0d:09:dc:0a:49:a4:ed:5b:fb:67:d1:
                    f5:11:04:dd:69:c1:42:ce:5c:33:e0:23:ab:e0:93:
                    f0:f7:f0:86:20:ca:7e:d6:51:7a:71:bb:6b:49:cf:
                    c6:1c:6c:44:4c:77:ef:e9:82:6e:1f:c3:a9:e3:d4:
                    e9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5F:3D:3D:6B:52:F5:32:B9:C6:FA:6E:8A:0B:C2:1C:23:09:C7:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/a7534a47-109b-3063-87ba-3fd7c7d78388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/725a4aca-8e03-4420-8745-329c8962b4d1.crl

            X509v3 Authority Key Identifier:
                keyid:49:6F:54:A1:0B:DB:44:EE:36:B9:B9:6D:A2:13:78:5C:E8:68:4B:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:7b:38:7b:d0:e5:0b:36:f5:a0:51:47:9d:e8:b8:fc:62:53:
         15:cb:39:22:a7:4b:a8:22:c7:f3:b6:5c:5a:91:b6:c5:40:34:
         10:bc:9b:d8:55:20:96:43:6e:b3:dc:9e:bb:af:65:db:59:5f:
         24:ec:40:a0:b7:29:04:0c:83:a2:79:1c:ba:9b:e9:b8:27:19:
         d9:54:a0:3f:4a:9d:58:3b:40:89:29:a4:34:c2:53:22:31:13:
         d3:a4:49:90:b3:92:cf:a6:35:9f:47:e6:10:17:2a:14:b3:df:
         2c:88:5b:f6:54:e7:25:29:2b:89:da:c8:13:35:17:6b:db:4e:
         5b:4c:20:c7:b1:9c:c8:ce:a2:fc:44:f6:43:f7:58:1f:a7:fb:
         1d:c8:9c:1d:15:19:38:ad:04:db:79:54:bb:f1:ec:39:9d:4e:
         79:46:41:cb:92:55:e1:75:03:e1:c5:61:6d:7c:a6:82:f0:20:
         27:28:02:c5:31:71:63:f2:72:6d:f3:e2:65:77:57:85:8e:e2:
         cf:ce:66:6f:10:49:af:12:d6:ff:0e:9e:07:4c:23:e8:8a:22:
         b8:b5:ea:b7:80:12:79:b4:c7:94:99:01:f7:a3:87:9f:9a:be:
         e0:77:94:ed:83:52:e7:9d:98:a6:f7:6e:fa:a1:28:8f:64:01:
         a0:b9:08:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:57:10 2024 by rpki-client on console-ams.rpki-client.org