Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5bd0a20e-8523-347f-8349-8a9a8ff17125.roa
File:                     5bd0a20e-8523-347f-8349-8a9a8ff17125.roa (raw, json)
Hash identifier:          Mo+PmnxtPu894C8+qIpOfCODy8q3myCI9t8tUa86MuM=
Subject key identifier:   4A:D5:D2:CB:05:DC:2B:2A:CB:83:B9:63:0D:31:ED:69:6C:9C:89:16
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584586D92E7CD492BFF68AF7FF00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5bd0a20e-8523-347f-8349-8a9a8ff17125.roa
Signing time:             Sat 13 Apr 2024 01:01:59 +0000
ROA not before:           Sat 13 Apr 2024 01:01:59 +0000
ROA not after:            Fri 12 Jul 2024 01:01:59 +0000
asID:                     18779
IP address blocks:        23.230.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d9:2e:7c:d4:92:bf:f6:8a:f7:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 13 01:01:59 2024 GMT
            Not After : Jul 12 01:01:59 2024 GMT
        Subject: CN=98296366-bdce-44bd-9b5b-2684ee5750eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c3:46:5b:38:1f:29:c1:d1:e1:2d:9e:24:32:
                    8a:c4:1e:88:a1:a7:73:b5:ea:74:cb:4e:ef:40:a5:
                    3a:65:45:60:71:7a:8b:1d:f7:58:e2:74:7a:29:52:
                    3f:40:43:c3:d0:2b:0f:97:8a:88:ba:1e:b4:b2:cb:
                    66:62:64:77:fc:e2:c5:26:d1:db:39:cc:ca:c5:b3:
                    ec:78:38:b5:30:ac:20:87:83:6c:0e:9a:18:8e:92:
                    64:b1:60:45:d7:7a:f2:27:99:7a:2a:8e:c6:81:2d:
                    39:e7:1e:c4:36:66:ba:cc:5f:7d:2b:0c:57:6f:d1:
                    27:44:9c:bf:c2:cf:65:16:bf:be:8e:21:6c:78:cf:
                    6f:1f:90:de:f3:db:65:78:d5:c3:19:32:25:b6:1c:
                    39:79:c2:03:73:f9:da:91:49:ed:e7:de:93:37:71:
                    21:ff:a1:26:e9:e4:88:58:bc:b1:c5:3e:a6:72:27:
                    e4:90:26:1a:ba:7f:ae:89:34:5e:5d:02:69:09:f8:
                    90:5e:b1:9e:33:ff:ba:ef:58:e8:b0:71:34:87:8d:
                    aa:6d:82:84:b1:fc:f6:fd:05:93:d0:a5:ca:e1:83:
                    6e:9f:25:25:4f:65:dc:05:72:69:87:ed:82:d2:11:
                    bf:c1:f2:2f:32:e6:3e:79:8e:a0:cd:f1:72:4c:cc:
                    f7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D5:D2:CB:05:DC:2B:2A:CB:83:B9:63:0D:31:ED:69:6C:9C:89:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5bd0a20e-8523-347f-8349-8a9a8ff17125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:27:c8:77:e6:38:a9:5e:65:10:e3:f4:35:74:4e:39:90:dd:
         c7:84:fd:3e:e6:58:ed:5b:f6:d6:e2:d8:c9:1b:a3:40:a3:53:
         f9:9c:a3:5e:3b:9a:db:86:be:71:e9:72:0b:57:e8:6d:34:33:
         5f:e0:fa:33:82:04:bd:f7:d7:39:2a:dc:3f:2e:a8:7d:ba:21:
         c0:2d:96:e7:c6:44:e7:ae:74:d8:59:ba:5e:0d:24:96:9c:4f:
         a7:c6:46:4d:5a:7b:21:e9:1d:bc:da:bb:f9:e3:b2:82:53:48:
         c3:1d:a3:df:2c:7a:e0:a1:d1:ec:34:f8:53:5a:23:82:7d:10:
         b5:50:6c:43:05:97:c2:87:ce:f2:da:67:ad:da:dc:f9:d8:90:
         92:c3:8b:1a:fb:4a:5a:c6:08:dd:70:75:0b:0c:86:d7:ad:3b:
         de:70:f2:17:f1:0f:90:69:41:71:a4:0b:43:c2:de:fe:a9:7d:
         37:96:13:c3:4f:41:5d:64:c5:61:8c:a2:57:b8:43:66:94:22:
         df:13:29:ff:0c:a2:58:19:cc:8f:a4:13:3d:8c:73:bd:fc:82:
         e9:5a:84:cc:d8:1a:03:96:db:ec:4b:c1:f4:0b:7d:a5:19:3f:
         bb:66:ff:b8:f5:8e:d8:ba:fa:75:1e:dd:f1:4c:86:f1:a8:84:
         2c:5d:13:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:03:20 2024 by rpki-client on console-ams.rpki-client.org