Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/7aa24150-2c39-3866-b24c-0bda23609ae1.roa
File:                     7aa24150-2c39-3866-b24c-0bda23609ae1.roa (raw, json)
Hash identifier:          ycKDzLxttvcjAXGWmITFPd1QFNvFe4UB60PXf8jD2b4=
Subject key identifier:   CB:4B:F9:94:8C:95:6D:42:D8:81:D4:2C:57:19:5A:23:42:A1:B2:6D
Certificate issuer:       /CN=92790d80-09a9-411b-b7e0-abbcd294be57
Certificate serial:       010D0C9F4328584546A2AFDFB12EBCBDABCEA700
Authority key identifier: 3F:34:1F:D0:4A:7A:FA:61:22:16:C0:10:48:83:DA:14:6C:57:FA:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/7aa24150-2c39-3866-b24c-0bda23609ae1.roa
Signing time:             Thu 21 Mar 2024 01:00:25 +0000
ROA not before:           Thu 21 Mar 2024 01:00:25 +0000
ROA not after:            Wed 19 Jun 2024 01:00:25 +0000
asID:                     32127
IP address blocks:        45.11.140.0/22 maxlen: 32
                          23.173.208.0/22 maxlen: 32
                          23.173.212.0/24 maxlen: 32
                          2602:fcce::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/92790d80-09a9-411b-b7e0-abbcd294be57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/92790d80-09a9-411b-b7e0-abbcd294be57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:a2:af:df:b1:2e:bc:bd:ab:ce:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92790d80-09a9-411b-b7e0-abbcd294be57
        Validity
            Not Before: Mar 21 01:00:25 2024 GMT
            Not After : Jun 19 01:00:25 2024 GMT
        Subject: CN=1567af98-8682-4589-86f6-2b0a2ffc5f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:da:b9:5c:14:13:3e:31:4c:85:c3:70:2d:e3:
                    6f:8c:60:e8:d2:4a:3b:a8:f5:d5:db:b8:77:4e:b4:
                    e8:dc:83:e7:d4:cf:b3:09:bc:77:13:fa:83:1f:ec:
                    e3:3f:99:39:22:ab:65:00:c7:6f:91:fa:6c:f4:95:
                    5d:9e:30:8d:5a:64:09:d5:3c:4f:5f:44:c1:4c:19:
                    36:59:27:f4:62:bb:2f:a7:a2:ff:02:eb:d4:06:16:
                    05:11:51:ec:4d:20:e5:ed:33:28:5d:8c:41:2c:a0:
                    80:70:6f:ab:14:63:d1:ae:99:1c:b3:b3:ce:a2:fa:
                    83:60:e1:9f:20:81:ba:3b:65:65:ee:e0:22:b8:13:
                    bf:86:82:14:be:bb:ad:ac:0a:27:8a:f2:fd:6d:54:
                    d7:4b:59:46:c3:c3:8f:0a:af:09:f2:c1:c0:c5:c3:
                    56:09:4c:6c:0c:84:73:72:a1:46:df:d0:3b:42:62:
                    13:a6:2f:a6:0f:43:47:1f:bf:ca:31:0d:73:0b:85:
                    40:6b:3f:07:70:9d:90:98:f9:8a:6a:8b:a6:2c:33:
                    3a:bc:f2:03:6b:28:d2:39:12:f7:66:08:bb:f5:a9:
                    2a:c6:89:83:34:18:c7:45:b5:b0:32:f1:54:7b:de:
                    d5:d6:ce:f4:32:2e:26:ea:79:fe:26:aa:66:16:20:
                    c0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4B:F9:94:8C:95:6D:42:D8:81:D4:2C:57:19:5A:23:42:A1:B2:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/7aa24150-2c39-3866-b24c-0bda23609ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/92790d80-09a9-411b-b7e0-abbcd294be57.crl

            X509v3 Authority Key Identifier:
                keyid:3F:34:1F:D0:4A:7A:FA:61:22:16:C0:10:48:83:DA:14:6C:57:FA:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.208.0-23.173.212.255
                  45.11.140.0/22
                IPv6:
                  2602:fcce::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:95:0e:16:f2:7f:76:3c:af:c0:3d:27:17:6e:f1:56:cd:05:
         eb:c7:9b:b8:86:3a:95:59:92:bf:d7:ef:db:f8:90:e8:55:7c:
         b3:2e:fb:b8:75:85:dd:05:14:85:c8:11:52:43:fa:97:18:ec:
         2d:81:08:65:b8:80:c3:f5:eb:4e:31:2b:5d:d8:b1:52:c3:c7:
         28:19:fa:39:8c:79:d3:a9:ca:ad:6e:5d:c4:f1:c2:8e:36:e5:
         b7:7a:85:04:a5:a6:87:42:73:e2:0e:33:ef:84:41:22:20:9a:
         7e:03:63:9f:48:38:d2:fd:f3:e4:8d:68:94:0c:db:08:dc:84:
         a1:2e:16:ee:70:1c:fc:76:2f:04:94:e6:0e:57:0b:cc:19:86:
         15:b2:bd:c6:31:45:2f:8b:ff:ac:9e:0f:e7:b9:f6:52:2a:a8:
         a3:21:db:cd:f4:bf:73:42:b6:6c:43:46:29:f8:40:17:f0:be:
         44:fa:3a:9d:01:34:b5:6b:8b:97:2b:c7:da:52:9b:b8:9b:f9:
         eb:5e:c8:43:1d:e3:41:18:1f:f0:01:86:ef:f5:53:6d:7a:fd:
         00:81:b0:a3:11:6b:66:6a:09:19:36:2a:92:a2:d1:df:ae:5e:
         71:74:74:54:4b:da:9f:6b:4b:75:eb:b7:ae:ba:70:2d:03:9e:
         2a:af:13:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 12:32:28 2024 by rpki-client on console-ams.rpki-client.org