Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ed8ecf53-8084-3ecd-bc44-b934a3c1a3a5.roa
File:                     ed8ecf53-8084-3ecd-bc44-b934a3c1a3a5.roa (raw, json)
Hash identifier:          7keAAxt3DxkYF3fvd7y/Vut2lqka3+de8J/gsPljywc=
Subject key identifier:   EC:A3:F3:58:4A:DD:6D:D4:72:D7:60:96:34:13:21:86:90:E7:04:3C
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F4328584582A89495F042A92E95A8D320
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ed8ecf53-8084-3ecd-bc44-b934a3c1a3a5.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     399532
IP address blocks:        23.154.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:94:95:f0:42:a9:2e:95:a8:d3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=22671a93-700d-4874-b7d3-e1d77da281e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:00:96:2a:91:4a:8c:06:5f:3e:b6:4a:c6:f4:
                    4f:83:6e:96:4f:21:9e:fc:74:da:4d:2b:44:c8:99:
                    53:79:b5:b0:e8:52:fc:44:1c:9c:00:83:b8:54:f1:
                    1e:d6:8f:fe:18:27:ac:a8:c1:b3:5d:ef:ba:f4:63:
                    b2:de:69:a8:40:cc:26:11:4f:71:50:0a:74:14:d6:
                    fa:94:98:39:56:85:ff:8e:a0:21:2a:21:d4:0b:b2:
                    b7:33:3d:b6:70:57:87:81:aa:71:23:f5:b5:7e:25:
                    c9:05:d3:0e:dc:ef:62:5d:1e:ab:d7:99:42:64:a6:
                    ac:f2:1a:20:4c:24:38:21:fd:f9:57:af:b5:2e:68:
                    51:bb:4d:ea:77:ee:74:39:42:7f:aa:e6:9b:9e:2c:
                    77:da:92:ea:60:74:49:0c:0d:0b:cf:ff:20:23:15:
                    f5:7d:c9:e9:e9:52:fb:66:37:28:46:bc:21:74:e6:
                    7b:46:cc:79:6a:da:ef:fc:18:5e:c9:ca:d2:b9:c9:
                    1a:e2:93:6b:b3:e7:44:40:0a:8f:1e:0b:77:b6:3a:
                    3d:fb:ac:c0:16:a4:ef:41:61:ec:fa:e4:f8:fb:c3:
                    71:7c:04:97:3f:58:01:09:1b:7c:72:34:2d:c2:cd:
                    25:4a:7c:db:e1:1c:9b:2b:89:b8:bd:aa:0b:44:3a:
                    76:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A3:F3:58:4A:DD:6D:D4:72:D7:60:96:34:13:21:86:90:E7:04:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ed8ecf53-8084-3ecd-bc44-b934a3c1a3a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:2b:2e:47:a5:69:1c:7e:30:cc:02:3a:10:87:17:4c:21:b8:
         34:92:80:d4:2d:2a:4c:db:05:9d:b0:7e:80:8e:d2:b4:a9:af:
         25:f5:53:0f:22:67:e0:67:6b:52:86:c2:a8:af:82:fa:18:f3:
         14:f3:aa:36:69:df:69:08:69:e7:0c:3b:f2:80:c6:0c:98:4c:
         51:7b:ac:aa:a1:99:37:8f:13:b3:bd:44:e0:63:c7:7a:a4:b6:
         00:47:2d:ff:80:0b:45:cd:f1:a5:b0:1a:6e:67:79:93:17:77:
         75:c0:52:a6:6f:81:7c:73:5f:c6:b9:ee:1b:66:f3:0f:af:9d:
         9e:42:87:75:97:dc:49:ca:87:24:7e:bc:86:fc:6f:17:15:01:
         08:d5:9b:e0:b7:fe:fa:b3:46:5a:9e:2c:fb:7e:09:bb:a0:3f:
         ab:28:b0:ab:16:53:58:a5:1e:fb:61:c4:e6:62:e5:ae:ba:c0:
         20:9e:a8:fd:34:cd:3c:1f:68:53:82:ec:fc:35:55:66:36:b4:
         6c:d4:e0:6f:fb:bc:34:e5:d7:4f:fc:d0:c9:c2:7f:1e:67:9d:
         81:b8:3b:df:cb:79:9e:6a:5f:f3:8d:64:f2:f7:bf:63:3c:0f:
         3f:98:8e:69:bf:60:5f:f3:28:fd:1e:c1:4d:6c:76:c4:49:33:
         82:db:14:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 14:59:34 2024 by rpki-client on console-ams.rpki-client.org