Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa
File:                     97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa (raw, json)
Hash identifier:          W4PjYQU3S7bNpuYqi84mLu8kACQkuUJFKBVYX/24l3I=
Subject key identifier:   74:99:B4:66:50:FE:E8:8D:05:51:52:26:6E:09:FE:7B:55:04:F2:F8
Certificate issuer:       /CN=452d8948-a48b-4a64-bb88-5c289408944c
Certificate serial:       010D0C9F4328584598FE0931CCF6E2CB52E51080
Authority key identifier: 2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     33201
IP address blocks:        23.142.112.0/24 maxlen: 24
                          2602:800:e000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:09:31:cc:f6:e2:cb:52:e5:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452d8948-a48b-4a64-bb88-5c289408944c
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=66b711ec-6be4-4cab-b94d-d894f1246950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:bc:ad:1d:ee:a3:9c:53:d0:4a:3d:3d:b9:
                    9f:c0:d6:2e:af:a6:e3:e6:3e:e8:64:63:49:7b:e0:
                    b6:c9:32:63:e0:4d:e6:9a:ed:d5:ff:30:ec:4d:7c:
                    5c:16:01:86:5f:cc:60:24:55:47:ff:e4:9c:36:66:
                    f9:e5:1e:fb:bc:10:4e:19:e5:2a:2a:cf:85:3b:b0:
                    8f:7a:97:e0:6f:84:2a:a1:3c:2c:96:b1:3c:86:aa:
                    31:c4:68:3e:89:3f:73:75:82:fd:1d:5f:c9:d4:50:
                    99:8d:27:ef:52:1c:6c:eb:cd:5c:98:61:25:12:c6:
                    c0:e2:81:35:03:c9:6e:bd:fd:99:25:8c:18:c2:96:
                    d5:ad:6d:fc:7d:88:f3:e7:ec:58:7a:07:be:4e:56:
                    96:38:e8:08:f8:f4:2a:10:d4:72:fa:1d:00:06:b6:
                    eb:8f:6d:da:9c:57:30:d3:67:4c:72:c8:7e:e7:72:
                    1c:b6:88:50:f6:4a:0c:2c:bb:c8:64:3c:3e:6e:90:
                    46:7e:52:dc:e6:2d:3f:d8:47:c0:5a:9a:0f:53:48:
                    b6:08:1d:39:b8:f0:5e:62:76:b4:9d:6d:2a:12:36:
                    89:d8:f3:a2:70:4d:61:38:c2:b1:7d:be:b7:a5:28:
                    ee:ca:52:c9:8a:db:56:7d:4f:b7:b2:43:e6:e5:89:
                    73:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:99:B4:66:50:FE:E8:8D:05:51:52:26:6E:09:FE:7B:55:04:F2:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.112.0/24
                IPv6:
                  2602:800:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b4:94:c9:3e:8f:17:1a:85:7a:fa:1e:a3:0f:26:84:53:2c:
         4d:af:f3:d8:6f:ee:a0:12:74:8a:3c:47:a5:63:07:37:c9:29:
         b9:2a:f4:ae:0f:b6:5f:11:66:09:ff:50:01:58:62:c9:9f:ed:
         9a:7b:91:ea:7e:64:e1:c7:3a:60:a3:74:79:47:c4:6f:a4:2b:
         c8:0c:1a:7b:37:d5:1c:e9:60:3a:30:4b:52:c8:99:5a:db:5c:
         81:d3:06:ff:97:0d:03:c3:3c:bc:d1:8b:0e:25:02:26:ce:cc:
         a8:9a:f9:7d:26:01:c8:f3:43:75:a2:c1:a5:e4:53:35:b4:99:
         af:77:1f:e7:0f:88:62:59:cc:e1:ed:66:52:18:8f:1b:2d:80:
         06:9d:97:6b:f4:20:9a:8f:86:06:3f:75:f9:64:12:cb:80:8d:
         8b:b6:ae:90:8b:85:1a:b6:fe:47:d0:50:2a:df:2e:8f:e9:5f:
         6d:59:68:44:e6:44:6b:b2:49:7a:26:ed:0f:e4:d6:03:39:8e:
         3f:07:4b:f6:16:2c:ad:49:f5:d8:7d:36:1c:b1:68:b7:16:51:
         ca:2c:e2:fa:52:fe:5f:bb:b2:4d:9c:77:cc:d0:2e:a4:6a:5d:
         2c:79:88:9a:e3:79:7f:26:ed:4a:cc:68:d7:13:dd:67:0c:7d:
         e5:10:0b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:36:29 2024 by rpki-client on console-fra.rpki-client.org