Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/d14dd2ba-0c63-3061-aa16-3d71727a9d73.roa
File:                     d14dd2ba-0c63-3061-aa16-3d71727a9d73.roa (raw, json)
Hash identifier:          tRMKINIDvVsqtTdeKnzz/ECEn6T8ISCfvQpsYs+X/rc=
Subject key identifier:   65:22:66:7C:98:1A:C9:D9:67:D8:7C:8A:68:82:D2:47:89:06:FA:11
Certificate issuer:       /CN=994eeb97-12ef-4721-824f-9ba41ba67983
Certificate serial:       010D0C9F4328584553E5AEE9AF9C701A5D5E59F3
Authority key identifier: 1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/d14dd2ba-0c63-3061-aa16-3d71727a9d73.roa
Signing time:             Mon 25 Mar 2024 19:00:57 +0000
ROA not before:           Mon 25 Mar 2024 19:00:57 +0000
ROA not after:            Sun 23 Jun 2024 19:00:57 +0000
asID:                     174
IP address blocks:        23.138.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:e5:ae:e9:af:9c:70:1a:5d:5e:59:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994eeb97-12ef-4721-824f-9ba41ba67983
        Validity
            Not Before: Mar 25 19:00:57 2024 GMT
            Not After : Jun 23 19:00:57 2024 GMT
        Subject: CN=ee926f43-83c1-4cf2-b50a-7b9a2a07ac34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:29:a5:ec:15:0c:a7:69:04:9c:93:94:ff:
                    79:9f:21:c7:73:cc:7a:0e:ce:4a:3f:f2:17:a0:4b:
                    76:2d:2f:be:58:14:83:95:18:f5:e7:5e:42:90:fe:
                    93:9a:6c:87:dc:7b:ce:b0:37:4c:31:61:70:3d:72:
                    42:b9:a5:be:4e:1a:04:35:65:cc:91:f4:ef:19:79:
                    f8:9a:34:c2:c1:8d:e3:77:0d:98:c5:66:69:11:8d:
                    01:dd:20:95:d6:c8:24:5c:8b:14:24:94:04:46:a9:
                    bf:71:27:fd:e2:92:d0:11:b7:f1:33:8b:27:36:b5:
                    90:ac:65:b1:31:c8:4f:26:9d:bb:b7:24:2b:e7:b1:
                    45:03:17:c5:7b:3f:cb:79:b1:3a:ab:7f:cf:39:64:
                    3e:25:14:81:7d:2f:e9:21:2e:6f:fb:b6:f7:96:b8:
                    08:fc:67:11:87:14:6d:68:d7:18:d1:76:72:ef:b4:
                    5c:b9:48:d4:d5:7e:43:fa:72:9a:e1:5c:54:cd:7e:
                    d1:5b:14:5f:5e:0f:01:40:76:48:55:16:2b:12:9f:
                    ee:1b:bc:51:e3:6b:ee:69:bf:4a:72:a8:35:d7:70:
                    b6:d3:2d:89:03:59:8c:3e:d9:68:ae:81:8b:a8:a6:
                    b4:0a:29:fd:30:dd:e9:ad:55:c5:ac:d1:52:74:a3:
                    01:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:22:66:7C:98:1A:C9:D9:67:D8:7C:8A:68:82:D2:47:89:06:FA:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/d14dd2ba-0c63-3061-aa16-3d71727a9d73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl

            X509v3 Authority Key Identifier:
                keyid:1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f4:88:1d:16:9d:2e:44:ad:8c:11:36:9b:1b:22:6d:9c:53:
         2a:cf:d7:a7:6f:34:48:63:ad:03:80:c4:fb:36:06:db:06:83:
         81:ef:71:37:23:ea:c3:a3:af:62:3d:db:25:86:12:79:b3:1c:
         84:14:0b:31:cf:c1:45:15:f3:05:10:24:64:29:aa:03:1d:b2:
         6a:c6:7f:f1:08:7f:00:9c:d0:93:b0:f1:9e:86:e4:75:e8:85:
         94:ec:41:23:97:0b:30:22:4d:2f:73:0b:a6:02:8f:52:0e:69:
         a9:28:ce:7a:46:35:b8:33:80:33:b5:a1:8b:2c:ee:fb:42:01:
         3a:84:c2:69:bf:ae:2b:e0:ef:54:88:24:18:d7:9b:6b:cd:0e:
         5b:0a:c0:4d:2d:4c:70:54:03:6f:3f:d1:cc:3d:1b:62:8b:de:
         a1:e4:83:47:5d:a5:fb:ea:b4:56:6d:4f:03:ff:51:04:2b:d1:
         04:c9:19:56:86:80:a0:16:c8:2a:ee:90:65:32:e5:28:f8:11:
         b4:83:a6:7c:0e:01:dd:a4:d8:bf:a1:b7:e7:8a:bd:31:93:19:
         f6:c2:12:49:7a:c2:b3:2f:28:9f:ed:57:5b:40:2b:62:3d:fa:
         66:92:28:61:af:d9:06:4d:b1:a4:04:fb:36:07:9f:18:e3:62:
         8a:87:81:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:22:54 2024 by rpki-client on console-ams.rpki-client.org