Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a04d8a83-93e5-3aec-805e-bfecb3fc50a6.roa
File:                     a04d8a83-93e5-3aec-805e-bfecb3fc50a6.roa (raw, json)
Hash identifier:          ZmDmiZHoiQTctQ52SPsA8rPJ9tRzXYlERJ1M5OSMr7g=
Subject key identifier:   43:DE:73:F9:09:23:E7:F1:D7:CD:FA:6A:E5:F8:87:00:E0:0E:B0:38
Certificate issuer:       /CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624
Certificate serial:       010D0C9F43285845174AE1F7504B17748CE18500
Authority key identifier: 03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a04d8a83-93e5-3aec-805e-bfecb3fc50a6.roa
Signing time:             Mon 04 Mar 2024 02:00:26 +0000
ROA not before:           Mon 04 Mar 2024 02:00:26 +0000
ROA not after:            Sun 02 Jun 2024 01:00:26 +0000
asID:                     6145
IP address blocks:        23.157.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:17:4a:e1:f7:50:4b:17:74:8c:e1:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624
        Validity
            Not Before: Mar  4 02:00:26 2024 GMT
            Not After : Jun  2 01:00:26 2024 GMT
        Subject: CN=bff29643-a05b-4120-ae76-0853942a6b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:43:1e:29:36:0b:db:a9:06:2f:44:28:86:75:
                    1e:3f:c0:ea:2e:01:46:40:1e:f6:f9:3f:c5:5c:31:
                    bd:c7:e4:11:f3:8f:12:b5:58:eb:97:c2:52:46:ee:
                    86:74:fd:6b:ba:c4:f0:c9:2b:04:de:e1:60:f9:7c:
                    76:c3:fa:01:f9:d6:36:be:aa:3a:b0:1f:cd:b6:4e:
                    d9:f0:61:39:e7:9d:90:ce:52:0e:25:1b:68:ad:86:
                    04:df:41:28:79:44:12:c8:b8:a6:49:3c:89:85:1c:
                    d8:11:18:83:6e:03:b0:7e:75:22:a3:47:d3:db:af:
                    0f:e9:b0:42:fc:9e:15:2e:cc:ed:05:19:af:11:27:
                    02:bc:5a:91:f4:90:c3:0f:d2:d4:52:71:3e:7e:0d:
                    d9:55:5e:24:f3:e4:97:3f:ed:6f:af:72:23:a6:1c:
                    6e:cb:10:b3:96:fc:9a:f6:dc:23:5f:0e:30:4a:8f:
                    d9:b3:42:97:1b:19:b5:c5:2d:1f:df:5d:dc:4d:da:
                    7c:9a:8b:31:a7:ba:4f:26:8e:c3:ed:57:78:dc:98:
                    17:45:6c:ab:80:19:91:c5:8e:73:9f:ab:c5:69:2b:
                    81:14:66:d3:80:3c:ed:28:b0:4b:3d:bb:b7:6e:cd:
                    70:dc:23:65:17:13:47:c6:7a:c3:86:80:66:0c:b3:
                    77:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DE:73:F9:09:23:E7:F1:D7:CD:FA:6A:E5:F8:87:00:E0:0E:B0:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a04d8a83-93e5-3aec-805e-bfecb3fc50a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:4c:09:92:a1:65:b1:93:5b:99:9c:9a:49:78:03:2f:d0:0f:
         fb:25:bc:55:33:b7:df:91:9b:97:aa:1e:68:e0:13:01:5b:a0:
         a5:bf:9b:42:c3:bd:32:ba:5f:8d:b2:99:ec:07:42:9f:e7:1b:
         b5:a6:60:b0:c5:20:3b:26:5e:86:91:0e:0e:5c:9b:f1:42:a0:
         c6:73:5a:83:90:97:c9:0e:6d:e3:3e:e9:fb:5f:b5:dd:06:4b:
         51:a6:1e:98:3e:fc:00:c3:3c:57:9e:43:27:8c:c5:69:d4:27:
         a1:13:3b:b4:b0:28:16:c6:43:69:c2:54:45:1a:b3:3b:46:bf:
         24:17:98:60:be:46:c8:8e:cf:4b:f8:ac:11:90:63:4f:c4:5c:
         95:8a:0b:aa:ad:66:28:35:5d:7a:8c:62:5c:14:1d:d7:2e:c2:
         8a:e9:f7:77:b8:1c:0a:8e:13:e6:2d:36:86:f7:b5:d0:1b:45:
         e6:b4:0d:84:d8:ee:7b:8f:ec:20:33:3c:49:19:fb:bb:19:76:
         cd:1f:b6:7a:97:d2:f0:29:9c:17:48:30:3f:dd:9f:07:53:19:
         30:5b:be:72:83:67:ab:82:47:1b:fc:ab:6d:7b:e5:fd:83:14:
         56:c3:77:56:a9:af:f1:09:00:9f:21:8a:9c:26:56:03:f2:d5:
         5e:61:8a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:47 2024 by rpki-client on console-fra.rpki-client.org