Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee307720-f319-44f7-8bf4-191077612c1c/0a7f71d3-de57-31fe-8021-fe0abb648c16.roa
File:                     0a7f71d3-de57-31fe-8021-fe0abb648c16.roa (raw, json)
Hash identifier:          sM37+To2iLS7bQRptbplRzZfh7oJCjNyPS6Hl0kzl2Y=
Subject key identifier:   96:27:BA:1D:31:C2:A1:25:4D:4C:D8:6A:93:FB:C4:FB:DF:32:DF:DC
Certificate issuer:       /CN=ee307720-f319-44f7-8bf4-191077612c1c
Certificate serial:       010D0C9F4328584571E863F3385E35B8CAB71780
Authority key identifier: 06:82:76:63:DC:FE:73:6A:57:DE:84:8A:C5:77:EE:29:72:45:D4:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee307720-f319-44f7-8bf4-191077612c1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee307720-f319-44f7-8bf4-191077612c1c/0a7f71d3-de57-31fe-8021-fe0abb648c16.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     26073
IP address blocks:        23.139.160.0/24 maxlen: 24
                          23.165.226.0/24 maxlen: 24
                          23.165.224.0/24 maxlen: 24
                          23.165.225.0/24 maxlen: 24
                          23.165.227.0/24 maxlen: 24
                          158.51.16.0/22 maxlen: 24
                          2602:fe19::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee307720-f319-44f7-8bf4-191077612c1c/ee307720-f319-44f7-8bf4-191077612c1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee307720-f319-44f7-8bf4-191077612c1c/ee307720-f319-44f7-8bf4-191077612c1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee307720-f319-44f7-8bf4-191077612c1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:63:f3:38:5e:35:b8:ca:b7:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee307720-f319-44f7-8bf4-191077612c1c
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=5b568452-ea78-4e5f-af3b-ac5fc3414f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:5b:31:8f:a2:3f:e6:5a:e0:21:5c:33:48:
                    c6:ed:40:cb:47:c6:d7:08:31:0d:f4:e0:a9:39:33:
                    35:46:02:8c:0c:f2:ea:d5:98:63:c2:97:c9:e9:b5:
                    27:ed:06:3d:55:f4:55:f2:85:80:b9:07:48:46:99:
                    51:f9:45:d7:0d:46:d7:81:9c:d2:c6:1b:19:3e:eb:
                    35:b4:33:6f:8d:e5:16:45:0b:0b:24:e7:c2:e4:3a:
                    32:5d:37:e1:cc:5f:d2:94:5c:28:d1:40:3b:b9:04:
                    b8:3e:a6:76:79:74:d1:69:c3:54:77:43:ee:e6:32:
                    88:7d:60:8d:e0:ca:1b:db:2c:33:ef:a6:79:b0:73:
                    24:4d:95:39:5f:0c:9b:7b:02:6d:6b:a5:2a:80:7a:
                    e0:1b:58:c8:a4:89:a7:ff:ca:08:45:9c:71:da:de:
                    9d:2e:76:d7:e3:06:66:48:d8:ca:4d:b0:e4:a6:9c:
                    81:12:94:d1:9d:dd:a8:41:20:89:5b:a4:4e:26:69:
                    a0:e0:0f:1c:ef:f8:39:45:74:7c:55:67:6e:7d:a4:
                    44:dd:9f:8e:77:c2:a0:2c:e4:f9:a3:b7:e9:e6:8b:
                    78:2e:ae:a3:52:2b:da:8f:98:63:de:06:43:94:0c:
                    7e:79:6c:22:d0:2c:db:c6:8d:5e:83:13:48:d2:00:
                    5e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:27:BA:1D:31:C2:A1:25:4D:4C:D8:6A:93:FB:C4:FB:DF:32:DF:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee307720-f319-44f7-8bf4-191077612c1c/0a7f71d3-de57-31fe-8021-fe0abb648c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee307720-f319-44f7-8bf4-191077612c1c/ee307720-f319-44f7-8bf4-191077612c1c.crl

            X509v3 Authority Key Identifier:
                keyid:06:82:76:63:DC:FE:73:6A:57:DE:84:8A:C5:77:EE:29:72:45:D4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee307720-f319-44f7-8bf4-191077612c1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.160.0/24
                  23.165.224.0/22
                  158.51.16.0/22
                IPv6:
                  2602:fe19::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:52:6c:83:d1:a0:13:12:da:d6:4f:18:b5:f5:b9:86:e1:93:
         70:bd:78:08:ef:9a:fd:50:58:32:00:1c:3b:73:93:b1:53:df:
         85:3a:d3:c8:4c:35:f2:f5:d8:77:76:95:9b:09:85:70:35:69:
         dd:65:6f:7a:3b:97:be:c0:fe:07:84:2f:75:02:a5:1d:ec:07:
         ab:84:6b:b5:31:3c:1d:2b:79:47:93:79:e6:c2:28:e7:44:15:
         ba:5d:bc:0f:5b:c3:03:62:2d:71:d7:32:7a:88:cc:dc:37:4a:
         90:56:1b:93:c5:24:7a:7b:fe:4a:79:d2:7d:c1:24:c8:d0:78:
         86:90:25:8b:2d:8b:87:5f:ae:76:9f:9e:1b:e0:31:cf:7b:48:
         a2:1f:42:df:80:e5:e1:bd:85:0d:06:be:33:e1:cc:1f:a0:cf:
         99:44:a2:38:af:2b:9c:ce:6c:a9:7a:a4:f8:d1:82:0d:a4:fd:
         94:7a:b6:0f:36:17:73:f7:6d:b4:12:c9:49:3b:22:f3:f4:40:
         dd:6d:eb:1a:9a:ad:2d:ba:d7:fc:27:57:f2:c1:26:1b:73:3a:
         08:c5:88:b2:a8:6c:a3:a7:10:f0:4e:ef:4d:e5:29:5a:e6:6f:
         eb:04:23:42:79:92:15:a7:01:fb:10:cb:4d:fe:90:0f:c4:5f:
         60:92:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:14:20 2024 by rpki-client on console-ams.rpki-client.org