Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa
File:                     57901a8d-3025-36c9-bed1-42964cd3980b.roa (raw, json)
Hash identifier:          YR0r7TzxfHsQ+G6s7Y/TTSXGzUqGywY9HLXplv2codw=
Subject key identifier:   CE:EB:01:16:2C:E3:47:32:7C:90:92:1F:F4:94:F7:8D:06:17:FC:A6
Certificate issuer:       /CN=ab557b41-b8ff-4aa9-b9ed-6defa9a6b572
Certificate serial:       010D0C9F4328584546A2AD63D4EF197C419EEB80
Authority key identifier: 0E:B8:EA:77:8E:D2:C1:CA:DF:DD:32:63:8F:C4:2F:80:AA:91:56:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa
Signing time:             Thu 21 Mar 2024 01:00:25 +0000
ROA not before:           Thu 21 Mar 2024 01:00:25 +0000
ROA not after:            Wed 19 Jun 2024 01:00:25 +0000
asID:                     54785
IP address blocks:        23.160.104.0/24 maxlen: 24
                          2602:fa57::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:a2:ad:63:d4:ef:19:7c:41:9e:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab557b41-b8ff-4aa9-b9ed-6defa9a6b572
        Validity
            Not Before: Mar 21 01:00:25 2024 GMT
            Not After : Jun 19 01:00:25 2024 GMT
        Subject: CN=349ecc03-bc6f-4779-8952-1958762ead2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:13:e7:d7:3b:72:9f:94:3c:7f:1f:09:bc:b3:
                    be:1e:60:b3:f9:bc:7c:61:55:09:0c:78:2a:65:d9:
                    15:83:ec:c2:62:4e:b5:11:8f:44:37:16:c9:c3:24:
                    f8:0b:72:05:b3:d7:4e:a0:28:a1:8b:ca:61:d0:36:
                    85:c6:40:57:34:9f:48:fa:0e:04:19:0e:d6:a7:d6:
                    20:f3:15:0e:5d:02:f1:b1:c0:cf:53:be:14:ef:0f:
                    7c:4e:c4:01:b8:a8:b8:7d:7f:e8:26:09:68:41:d3:
                    ca:6f:0c:b4:06:7a:62:c5:d1:9e:a8:5b:c3:47:49:
                    13:10:97:bc:8f:10:15:65:10:65:e4:95:1e:25:10:
                    8a:e4:b0:fb:59:96:60:87:0e:59:f0:0a:f7:68:d7:
                    dd:b9:c9:33:bf:c9:ec:db:43:4e:f9:46:52:c7:96:
                    2b:89:4d:ca:4b:d0:32:79:90:73:4a:d9:9c:a8:04:
                    de:f5:56:02:3d:d6:7f:f4:20:15:25:97:06:25:70:
                    0e:bb:83:96:01:19:d7:ac:b4:59:a7:72:58:86:a3:
                    6f:2d:38:f0:3f:fb:aa:34:5f:4f:2b:46:ff:f4:df:
                    d1:f4:25:42:57:c9:18:52:58:ed:30:25:ff:82:9e:
                    c9:73:6f:2f:bd:4a:ae:0c:33:8d:b9:f2:26:c0:9a:
                    43:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EB:01:16:2C:E3:47:32:7C:90:92:1F:F4:94:F7:8D:06:17:FC:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.crl

            X509v3 Authority Key Identifier:
                keyid:0E:B8:EA:77:8E:D2:C1:CA:DF:DD:32:63:8F:C4:2F:80:AA:91:56:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.104.0/24
                IPv6:
                  2602:fa57::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:cf:82:a9:0e:10:a2:0a:7a:e8:10:4f:85:67:a2:c8:6a:98:
         f3:b3:ac:8d:51:06:6a:b8:0b:16:94:72:c2:cf:a0:48:5b:f8:
         74:6d:43:d1:c1:19:71:5f:35:69:8d:4c:34:fb:29:bc:97:80:
         41:8e:84:60:60:ba:a2:7f:b2:b3:f1:03:1f:04:3f:4f:a8:a1:
         b1:44:3c:86:03:7d:f7:17:4b:58:73:94:3e:b9:95:a7:16:ea:
         2c:9e:3b:42:c6:52:1a:de:8e:d7:57:62:e1:28:ae:41:3d:93:
         ac:b2:9b:6e:12:b3:8b:65:a3:7a:c2:c7:a7:be:7c:5e:3c:63:
         75:9d:a1:09:3f:b5:e1:c3:a9:00:ff:06:3a:69:74:b6:f2:ec:
         70:7e:e5:82:f9:fe:b8:37:9a:eb:0d:58:a2:75:42:d5:eb:8c:
         20:71:69:43:ff:84:0e:b8:be:8f:2f:6d:09:82:1b:f3:c8:ef:
         57:14:63:77:3d:63:19:52:0c:98:cc:c0:a2:24:bb:0a:6c:11:
         a7:7c:d9:40:bf:e7:1b:ce:bd:cf:e8:41:60:37:a0:3f:ea:0f:
         8c:7f:21:0c:dc:a9:ae:86:89:bf:c9:05:d8:ac:20:6e:67:79:
         2c:80:a6:45:40:3c:81:10:0a:a3:8b:ed:f3:be:44:e5:9c:82:
         1a:83:53:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 21:14:59 2024 by rpki-client on console-ams.rpki-client.org