Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/e0878dc4-e471-38f3-8737-f21b100be089.roa
File:                     e0878dc4-e471-38f3-8737-f21b100be089.roa (raw, json)
Hash identifier:          Mbtedb8ZoHljl7JpOcCh449t1r1ECIRa9y62pkfEkkk=
Subject key identifier:   31:36:93:E2:1F:4B:C4:F8:E1:4C:81:98:FB:53:60:E4:89:93:53:8C
Certificate issuer:       /CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26
Certificate serial:       010D0C9F43285845496D5B25A2C4CA337C2D7C00
Authority key identifier: 9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/e0878dc4-e471-38f3-8737-f21b100be089.roa
Signing time:             Fri 22 Mar 2024 01:00:24 +0000
ROA not before:           Fri 22 Mar 2024 01:00:24 +0000
ROA not after:            Thu 20 Jun 2024 01:00:24 +0000
asID:                     40676
IP address blocks:        23.159.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:6d:5b:25:a2:c4:ca:33:7c:2d:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26
        Validity
            Not Before: Mar 22 01:00:24 2024 GMT
            Not After : Jun 20 01:00:24 2024 GMT
        Subject: CN=9b4b052d-508e-45a6-9cb0-608672c2e6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:80:5a:63:e1:d8:9c:03:8d:5f:eb:9f:ff:70:
                    78:58:1c:c1:73:0c:80:a3:03:a1:37:6f:c7:f9:c3:
                    c8:67:46:7d:6f:71:01:d3:f9:49:5d:82:e0:e7:10:
                    57:53:3a:6b:fc:9e:57:6f:ab:a1:a2:5b:80:7f:82:
                    47:38:be:b5:ab:72:99:46:48:db:5d:29:8c:af:ef:
                    65:d4:9c:25:b2:4c:17:41:69:d8:8e:5a:5e:47:68:
                    c2:7f:12:81:32:d0:52:81:e4:cc:50:0e:e6:63:fd:
                    5a:a4:cb:49:b8:51:d2:59:3f:76:ee:d8:b5:f7:09:
                    f4:db:fa:20:c5:9f:47:28:12:38:27:6e:ae:85:c3:
                    0e:f9:cf:2c:5d:4b:8e:de:79:6f:5c:8c:db:eb:51:
                    15:c0:c3:01:eb:65:e6:ac:da:ae:f1:3b:f5:e3:83:
                    b5:83:aa:9d:d7:a4:f4:bb:39:d5:13:1d:81:50:37:
                    39:63:b8:98:c5:a8:c2:d5:a4:e0:11:74:ac:c5:74:
                    a3:3b:7a:14:05:f3:29:d1:bf:d7:9f:ac:c9:a2:29:
                    8e:7e:66:37:5c:fc:14:69:59:fc:1b:7c:68:f0:37:
                    98:82:20:3a:6b:e3:ca:3c:77:80:5d:b7:4f:66:cf:
                    51:56:e8:5d:01:03:d8:c0:38:93:79:44:56:73:cc:
                    cb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:36:93:E2:1F:4B:C4:F8:E1:4C:81:98:FB:53:60:E4:89:93:53:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/e0878dc4-e471-38f3-8737-f21b100be089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl

            X509v3 Authority Key Identifier:
                keyid:9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:bd:85:43:a6:38:89:d1:33:67:72:b2:0b:12:5e:07:4a:e5:
         20:b1:04:41:da:a3:2b:3c:05:01:91:57:72:09:42:c0:d3:37:
         e6:e4:b1:b3:1c:d0:9b:7d:25:20:74:2b:4e:f5:1a:67:95:3c:
         ac:a4:0f:00:3e:04:4a:06:f5:ca:52:77:63:0e:75:3e:ba:73:
         f5:f6:c1:03:1e:63:d6:d9:07:a6:b0:34:c6:42:ca:14:e9:db:
         db:b9:6f:b7:e1:c9:8f:67:6c:e6:45:ac:63:5f:6c:c9:f0:11:
         3e:12:e4:d2:f9:44:c3:bc:67:42:c7:6e:0d:53:73:09:3b:97:
         b2:a1:a6:40:5b:28:3d:95:29:10:79:32:87:b1:0c:08:1f:41:
         06:5a:4c:14:48:db:63:d7:10:85:9d:dc:70:8f:28:eb:a7:f2:
         d8:42:32:ba:e7:c2:32:7c:17:53:aa:c5:92:fa:0c:26:62:9c:
         8b:32:fe:ea:a4:dd:e5:91:aa:61:aa:f2:6b:be:79:0b:87:2a:
         60:bd:a5:ca:cd:bb:6e:82:1a:e6:bf:f5:cc:de:4a:94:2c:60:
         fc:87:15:32:6f:e5:25:e6:15:82:61:18:4f:12:9f:d2:0a:8b:
         e8:3f:5b:cc:2c:62:80:11:2c:2c:7a:7a:b2:fe:0e:8c:eb:a1:
         12:ae:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:29:46 2024 by rpki-client on console-ams.rpki-client.org