Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/87eb7ad8-367d-3484-866c-a694fd0c58a3.roa
File:                     87eb7ad8-367d-3484-866c-a694fd0c58a3.roa (raw, json)
Hash identifier:          lBnYFDTaB/KTyWDheaVvXrWxXDJl2E3djo+WHOmhhdg=
Subject key identifier:   19:69:F8:D6:04:FA:61:98:4B:C0:3B:69:8B:BD:D2:35:05:49:F8:AF
Certificate issuer:       /CN=99b49bb6-2782-4a82-829c-d4b94eb646f1
Certificate serial:       010D0C9F43285845CF6E3EB03C6E37A9A45AE100
Authority key identifier: D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/87eb7ad8-367d-3484-866c-a694fd0c58a3.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     212524
IP address blocks:        23.154.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:3e:b0:3c:6e:37:a9:a4:5a:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99b49bb6-2782-4a82-829c-d4b94eb646f1
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=433f138f-2b9e-4bf9-ae07-bf6dbc1d0125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ef:a3:c7:a1:16:78:55:b4:d4:aa:30:63:31:
                    a5:f1:75:70:e5:a4:a4:a1:1c:f9:fb:c4:e5:17:2a:
                    ad:6b:9a:35:19:f4:93:d0:67:a1:1d:ca:0f:44:2a:
                    22:f7:91:72:56:13:66:3b:6f:90:a5:de:b9:74:11:
                    99:a6:63:53:ad:8c:b7:83:34:ad:98:0a:e6:5e:75:
                    13:f9:c8:01:29:f3:78:02:f8:53:1a:a6:32:b5:96:
                    a6:79:57:0a:fe:54:e6:6d:21:63:df:df:ea:1e:c8:
                    14:70:e3:dd:9f:71:1b:8b:4f:9f:df:5c:e6:a3:6c:
                    16:ac:35:6e:f2:4b:6e:fc:b9:33:98:9f:a3:62:07:
                    de:83:d9:c6:83:86:09:65:89:e7:63:57:69:b8:1a:
                    83:38:27:b6:fb:12:32:16:fe:52:ee:49:1f:01:3f:
                    8d:e5:c5:4e:e1:ce:92:d6:23:b3:5a:51:ae:38:70:
                    7b:c4:be:63:cd:af:a3:56:d8:f7:58:59:f3:1a:0c:
                    73:f4:ac:3c:34:2d:90:cb:83:4f:e9:7b:9c:75:cf:
                    1a:26:3c:31:34:51:36:a8:5c:df:32:d9:35:3a:11:
                    48:ab:fe:e3:d0:7d:b2:61:13:84:66:6b:b3:fa:d9:
                    a9:c6:68:44:ca:93:0a:c9:37:e3:e3:1b:84:29:99:
                    a6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:69:F8:D6:04:FA:61:98:4B:C0:3B:69:8B:BD:D2:35:05:49:F8:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/87eb7ad8-367d-3484-866c-a694fd0c58a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.crl

            X509v3 Authority Key Identifier:
                keyid:D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f1:74:07:66:36:c8:b7:b1:91:e2:7a:05:e4:be:34:30:b6:
         5f:fb:09:8c:ca:85:49:40:fd:98:21:1a:f5:1c:94:7d:e4:b6:
         9b:e0:60:04:f0:e7:9c:60:78:c3:c0:7b:4c:25:40:18:f9:81:
         ea:8d:a0:07:8b:55:34:b8:ff:c0:10:de:c4:2a:e6:3c:04:f5:
         af:30:8a:02:1d:92:f5:8d:44:0d:e8:1c:cb:d7:a5:c3:a4:c3:
         ee:44:72:65:64:7e:a0:bb:45:07:ad:9b:1d:02:ba:03:07:6c:
         34:d6:67:97:39:10:4c:8d:4e:70:83:02:74:2a:72:1a:92:d9:
         1e:af:30:ca:28:2c:85:52:10:03:a9:78:ac:ca:a8:ca:82:fe:
         04:37:b8:bb:5a:42:1c:7e:d4:12:98:12:90:bf:c8:bf:fa:2c:
         66:5d:6f:f9:16:f9:75:8f:ae:ec:65:7a:e5:c7:f0:b5:8b:4a:
         2f:de:ae:1e:7b:a6:07:04:71:aa:2d:63:70:83:14:b0:69:d9:
         8e:da:5d:00:f3:95:8c:ca:80:29:99:16:44:20:68:18:df:2f:
         74:d8:83:d8:4f:17:77:a7:97:2a:30:69:63:9c:08:26:cd:2f:
         39:1c:d9:d5:ff:af:68:b0:7e:48:ca:b5:7f:9d:d1:1f:71:c2:
         85:16:7f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:35:53 2024 by rpki-client on console-ams.rpki-client.org