Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa
File:                     d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa (raw, json)
Hash identifier:          NFwIGr37kYiQ4ieN+lTB4fxZ2TSbtFYj7ARH70SnfOQ=
Subject key identifier:   91:EC:8E:2B:80:4B:3D:A3:19:26:9D:5E:A6:04:26:BE:07:C0:D7:68
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858459368BC89015F402F214E2680
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     19437
IP address blocks:        23.235.252.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:bc:89:01:5f:40:2f:21:4e:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=45f2742b-9849-457b-9961-aabbf9131e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:96:0e:8f:d6:1c:c2:b5:38:b5:7b:05:65:75:
                    6c:c9:4f:6b:c2:4c:4f:24:e4:fb:b0:d6:db:71:f2:
                    19:3a:46:ba:6a:e1:b3:ff:2a:b9:29:cf:2b:b8:ff:
                    70:8c:68:50:f7:48:03:f1:3b:d6:20:67:e2:16:8e:
                    2a:77:06:e9:e2:8f:a8:73:67:0e:27:0a:91:82:4b:
                    59:fc:c1:ef:ff:1c:ea:72:32:cd:9c:d7:0b:ad:85:
                    e3:1a:b9:18:45:99:cb:bf:05:13:63:b3:41:50:13:
                    15:88:d6:7c:5a:44:f7:e2:91:be:b7:5f:09:d2:d9:
                    d3:7b:d4:29:cd:65:62:39:1e:c8:51:9c:f8:ad:c7:
                    ce:a3:cf:4d:f6:07:14:d2:74:eb:07:a3:ee:bd:61:
                    f0:53:b0:b1:70:87:b7:1e:2b:f4:81:8d:84:19:8f:
                    67:ac:58:e9:ea:0b:3b:85:8f:88:f6:e7:15:6d:b3:
                    ef:95:90:60:35:a7:57:4a:05:03:d3:5e:ad:96:18:
                    65:2b:f1:57:07:3d:d3:0e:7d:aa:d5:6a:72:e3:db:
                    08:2f:20:5b:f0:53:11:64:38:ff:13:10:7f:9a:04:
                    38:a2:05:e9:91:14:5d:dc:99:8a:93:6b:7e:55:67:
                    a1:97:e9:ee:73:90:46:ca:aa:51:d1:63:43:be:ac:
                    a8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EC:8E:2B:80:4B:3D:A3:19:26:9D:5E:A6:04:26:BE:07:C0:D7:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:97:85:a3:2f:2e:49:04:44:b7:9b:51:88:4f:a6:83:f1:08:
         bb:6c:e2:06:6e:ad:69:c5:d2:62:d9:60:c2:d2:db:54:9c:b7:
         63:51:00:97:68:ef:6c:ea:49:fe:80:ee:83:66:39:9b:ee:60:
         ec:e1:45:e2:d5:43:3b:25:6e:3d:9b:fb:d0:4f:0c:2e:b6:ba:
         87:ca:4b:b1:56:bc:8d:4f:0b:e6:70:4e:92:fc:93:33:d7:18:
         1b:05:9f:09:e5:06:3d:50:41:0a:19:1a:c5:1f:d4:46:7e:c8:
         a4:ee:15:c4:d0:22:39:09:fa:4d:ec:38:e1:c0:95:3b:06:43:
         6e:81:8d:31:13:2a:07:0e:5a:28:fd:e3:3f:f1:78:75:bf:7a:
         c2:f9:be:35:1b:5b:7c:20:f6:91:02:c0:cc:67:54:68:f5:f7:
         9b:0a:1a:ca:d9:56:66:00:4c:88:e5:ec:d9:7d:c2:2d:c1:d0:
         78:b5:33:8d:54:f4:ce:82:17:59:c0:40:f3:c4:48:24:e4:3e:
         7e:b4:24:28:0d:dc:df:13:bf:c2:f7:ad:01:5f:bc:18:fd:37:
         fb:1d:5b:fa:2d:81:2f:a1:b7:cb:99:3d:84:d1:b2:85:53:5a:
         c9:94:a9:62:0a:dc:9b:1b:fc:45:f4:68:7b:38:a7:6d:1d:06:
         1c:2f:60:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:33 2024 by rpki-client on console-ams.rpki-client.org