Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/0176ea71-9d27-3cad-afe5-3e790fb9460a.roa
File:                     0176ea71-9d27-3cad-afe5-3e790fb9460a.roa (raw, json)
Hash identifier:          eh2Y+KhcaGnfEttHnhJ1uKPmT29CiG3Ye/Z2LmGDBKE=
Subject key identifier:   35:1A:10:0B:78:6D:56:CF:D0:AA:38:52:C5:5E:8D:9F:46:B4:9F:35
Certificate issuer:       /CN=06ed120e-7778-4219-8811-97d5203ce0c5
Certificate serial:       010D0C9F43285845CE08FAF845DC69060BE64780
Authority key identifier: 63:56:AC:A5:8C:5C:E1:EB:3A:E8:8D:45:9F:84:C8:15:66:15:02:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/0176ea71-9d27-3cad-afe5-3e790fb9460a.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     54043
IP address blocks:        23.166.104.0/24 maxlen: 24
                          2607:7d40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/06ed120e-7778-4219-8811-97d5203ce0c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/06ed120e-7778-4219-8811-97d5203ce0c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:fa:f8:45:dc:69:06:0b:e6:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06ed120e-7778-4219-8811-97d5203ce0c5
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=900a2329-6128-4162-9f46-3f78acbf71ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:9d:18:1d:8a:b8:13:ba:8f:a3:2d:db:68:
                    ef:df:43:b2:e5:00:1d:3d:bb:f5:bf:33:cb:3d:d5:
                    47:7f:28:98:f2:0e:7b:b1:8e:3b:0e:a7:e8:1a:d9:
                    a0:63:7a:9d:a3:0b:b4:1c:6e:22:3c:f1:ba:af:c0:
                    b2:d0:5d:e0:68:55:f4:9c:4a:d8:7c:5e:81:bd:63:
                    58:75:56:a0:0c:8a:05:56:f4:6c:1b:4d:90:56:74:
                    bf:2f:bc:a3:64:20:8c:56:fd:0e:42:b9:9d:0c:b8:
                    37:e4:d7:b1:31:be:96:77:9c:87:fc:c3:b4:b2:9c:
                    f2:1d:b6:f8:b8:22:e4:2f:d2:32:eb:7a:ce:54:c3:
                    0f:d4:8e:5c:df:45:67:a5:b7:c0:2a:f3:1a:da:92:
                    20:3c:a5:d8:a0:a2:64:8d:d6:42:34:d5:72:b8:fd:
                    44:70:e3:c7:c0:55:c0:b3:8a:a4:8c:4f:28:7f:4c:
                    4a:50:a5:be:2b:97:cb:70:b0:79:c5:cc:c8:51:25:
                    01:b4:57:00:dd:a5:f9:cc:ce:86:e9:15:1a:7f:08:
                    e7:63:ed:ce:d4:1b:29:09:01:c7:df:79:4d:79:cd:
                    9c:9e:04:00:da:ce:0f:22:b5:ea:2a:6e:f8:44:93:
                    7d:3a:99:38:f3:49:46:c5:ef:62:8e:1b:aa:5e:9a:
                    4e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1A:10:0B:78:6D:56:CF:D0:AA:38:52:C5:5E:8D:9F:46:B4:9F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/0176ea71-9d27-3cad-afe5-3e790fb9460a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/06ed120e-7778-4219-8811-97d5203ce0c5.crl

            X509v3 Authority Key Identifier:
                keyid:63:56:AC:A5:8C:5C:E1:EB:3A:E8:8D:45:9F:84:C8:15:66:15:02:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.104.0/24
                IPv6:
                  2607:7d40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:3a:ab:7c:b2:1e:1e:6f:76:59:90:0b:33:2a:ca:2c:d8:db:
         52:06:cc:1f:02:7b:b7:62:30:50:c5:d0:61:61:3f:9e:ce:2d:
         4c:9a:4a:8d:65:19:a1:1f:3d:17:de:8d:1c:a0:da:f4:09:23:
         fa:a7:25:c6:c1:f0:9e:10:98:7f:f4:da:26:60:91:8d:a2:a5:
         fa:dc:86:5b:29:ed:66:1a:72:a7:d7:71:09:70:77:4b:36:27:
         dc:75:3a:a9:a0:0b:5e:9d:ff:49:e4:1e:8c:d5:d8:1e:22:51:
         cc:6a:cc:00:82:50:66:ab:b9:d0:91:6a:c4:a8:96:58:ec:54:
         1e:18:cd:18:ac:31:72:74:ce:d3:ab:62:e4:59:3a:e9:08:bf:
         93:cb:9c:90:b3:3f:04:95:da:fd:8e:2c:0b:9f:65:d5:c6:ab:
         0b:7c:ff:b5:e6:06:bb:67:7e:05:63:35:b4:28:c3:e7:a0:a2:
         39:61:8a:ad:4e:b6:d5:28:10:58:5c:ac:5b:2f:92:0e:9f:a6:
         04:ea:56:03:a2:bc:19:e0:f5:dd:bd:4b:1e:38:e6:ae:38:db:
         e0:fd:c3:2e:90:fa:88:dc:fe:bf:42:b0:74:15:14:ea:1d:fa:
         06:f3:b4:d0:19:a8:fc:38:6b:fe:dc:ba:67:68:30:9b:65:91:
         3b:37:a5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:59:51 2024 by rpki-client on console-ams.rpki-client.org