Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/96785cf8-7262-32e6-b7e6-3db134e27f1c.roa
File:                     96785cf8-7262-32e6-b7e6-3db134e27f1c.roa (raw, json)
Hash identifier:          eikOT/hmujmDxnMQTO/ImJYI2LqrrsjOPzCharL1D0g=
Subject key identifier:   C5:C7:E5:BD:BF:2F:9C:85:1C:B7:F3:46:0B:75:D3:F1:C0:FA:71:1E
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F432858454F02B9D8134B6FE2528C4400
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/96785cf8-7262-32e6-b7e6-3db134e27f1c.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     7862
IP address blocks:        146.23.38.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:b9:d8:13:4b:6f:e2:52:8c:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=693ac661-05c5-4710-8aed-8c331d5d8b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:94:94:cb:b0:8c:c5:3d:4b:56:53:a4:ca:d0:
                    01:9b:13:08:70:ce:a2:45:ac:1c:c2:d3:3b:1d:a2:
                    3b:59:0c:b6:b0:04:35:d8:eb:a7:14:f9:01:b6:2d:
                    ba:14:32:17:c6:75:a3:8e:c2:c5:6d:b2:57:9f:8f:
                    ec:8d:a3:7c:38:99:05:d6:d7:66:c3:31:dd:d6:b6:
                    51:23:49:a3:1a:09:ae:44:a1:28:26:59:0f:69:59:
                    fa:11:af:96:7d:9a:ae:0e:c7:8d:7a:39:a7:4e:fe:
                    35:59:85:31:93:9a:e6:25:2d:0d:a3:00:ab:c3:18:
                    6f:86:df:e6:47:50:b8:cd:80:c7:98:21:e6:0d:ee:
                    2f:28:55:1b:cf:ba:0b:ee:20:cb:b2:1a:17:26:e2:
                    6f:cb:2d:0c:dc:28:8e:f0:e9:19:57:45:7e:6f:69:
                    8b:6a:8f:e2:ad:d5:cc:0a:0b:cd:bf:66:ea:2b:1e:
                    cd:98:a6:fa:24:ff:5d:5a:93:b7:9d:33:11:d3:4f:
                    0a:4e:1a:9a:48:14:5c:5c:fd:57:c0:c6:28:47:cf:
                    c6:e3:c3:98:6a:59:48:75:9f:8d:75:47:71:5b:ad:
                    44:6a:84:03:f0:ae:db:f2:5f:25:21:17:a0:e2:7a:
                    3f:a0:9f:fd:49:b0:fa:61:7b:f1:fb:88:5e:d6:9d:
                    29:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C7:E5:BD:BF:2F:9C:85:1C:B7:F3:46:0B:75:D3:F1:C0:FA:71:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/96785cf8-7262-32e6-b7e6-3db134e27f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:f2:8f:22:c5:c7:ab:7b:0a:5e:2e:fd:bd:27:4a:43:14:a4:
         22:b4:b0:58:45:46:21:7a:dd:78:0f:be:a9:a0:93:f3:20:16:
         83:f6:b8:86:be:1e:97:e5:24:24:ef:aa:af:f6:c8:09:42:45:
         59:9f:f1:a8:e4:8b:c2:90:92:a5:27:6f:15:35:93:d0:f3:b9:
         58:cb:54:f4:fe:7b:ac:0c:ab:f0:f7:d7:8a:88:5d:29:11:9a:
         45:4a:fe:50:46:b7:51:8a:dc:fe:1c:c6:dc:ea:e3:28:3b:76:
         b3:cb:c0:e9:a3:2d:ef:5b:2f:48:89:f2:ae:c9:25:f4:b9:54:
         f1:f3:95:96:1a:f7:e7:9b:e2:88:e0:ae:6b:69:42:b8:db:7a:
         22:b1:49:4d:be:9e:7e:ce:aa:63:1b:85:f6:89:ed:1d:d5:2e:
         35:0b:0a:0a:17:5a:85:60:d8:4a:ce:e9:8f:d4:56:30:02:96:
         bf:ac:8c:5b:c5:a7:cd:66:08:67:57:82:63:2a:90:a1:ed:1d:
         d4:5e:89:76:ec:24:04:30:85:20:77:c8:6b:c5:18:74:93:c0:
         72:ff:66:9d:18:13:9a:04:45:1f:04:b1:35:70:71:48:be:39:
         7f:ae:7f:1a:3e:49:c6:5c:c1:ce:be:aa:30:65:7a:8f:93:48:
         31:4a:03:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 07:20:12 2024 by rpki-client on console-fra.rpki-client.org