Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02fbf5ed-6402-334a-8df5-10f9b82c3787.roa
File:                     02fbf5ed-6402-334a-8df5-10f9b82c3787.roa (raw, json)
Hash identifier:          /l38/cQ6byxFqv2s5vnriPZYeavHiCkOIRjik10RERA=
Subject key identifier:   F4:05:1D:CF:40:DD:3B:6B:B0:28:BD:75:A2:E9:D2:86:9F:42:0B:11
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A10EE6437281A97DC6BE3900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02fbf5ed-6402-334a-8df5-10f9b82c3787.roa
Signing time:             Mon 22 Apr 2024 10:21:14 +0000
ROA not before:           Mon 22 Apr 2024 10:21:14 +0000
ROA not after:            Sun 21 Jul 2024 10:21:14 +0000
asID:                     20940
IP address blocks:        23.73.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:0e:e6:43:72:81:a9:7d:c6:be:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 22 10:21:14 2024 GMT
            Not After : Jul 21 10:21:14 2024 GMT
        Subject: CN=29753cff-f613-487b-8e7b-d0344c865488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:20:ec:e3:c8:c5:55:3c:a4:d7:06:e7:4b:
                    fc:2a:cf:84:ff:fb:8a:21:a2:9b:ea:2a:8a:e3:30:
                    f4:55:0c:14:51:60:c1:dc:8f:95:ed:da:01:90:f8:
                    ca:00:66:c3:8d:ac:69:c8:5f:fc:5c:e7:4f:8d:15:
                    1a:df:a9:2a:4b:a1:1b:33:86:10:9d:82:45:5d:d1:
                    92:d9:39:2a:66:3c:b3:3e:21:07:3b:58:c0:d4:71:
                    84:02:f2:af:75:ea:64:1e:45:6d:73:52:0c:55:5f:
                    4d:aa:4b:a5:e2:75:2f:56:6c:c7:5e:56:5b:df:fe:
                    21:fe:05:73:9d:c6:f6:49:c8:81:3d:63:87:e4:5d:
                    96:ef:dd:a4:2f:72:f2:46:ec:87:2f:32:7d:54:78:
                    0b:1c:2b:29:d3:17:df:6d:af:9f:c2:2d:51:3c:38:
                    25:28:7a:3a:f7:99:66:44:5b:64:d4:c4:f1:f0:55:
                    31:85:8e:0b:f3:46:43:0c:0a:07:de:d5:51:7c:e4:
                    49:e9:20:80:6d:60:ab:99:37:56:1b:3c:55:81:27:
                    61:15:1e:8e:98:a5:05:5a:33:c8:19:a0:b8:d9:70:
                    25:bf:39:35:a8:55:66:36:83:f1:82:2c:35:a0:7a:
                    85:ba:90:94:e2:51:59:cf:5d:e4:8a:d1:aa:3f:dd:
                    66:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:05:1D:CF:40:DD:3B:6B:B0:28:BD:75:A2:E9:D2:86:9F:42:0B:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02fbf5ed-6402-334a-8df5-10f9b82c3787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.73.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:79:43:e4:ad:b2:0b:48:70:ec:f9:bd:28:90:00:5a:cf:9f:
         27:cc:d3:e6:73:01:28:80:a0:f8:ee:d1:62:dc:ba:6e:55:6c:
         f6:9e:19:8d:ec:cb:e2:4e:94:d0:8d:b5:fc:a9:6d:9f:37:b8:
         47:70:6d:1b:dc:eb:fb:eb:bd:ee:88:40:86:52:42:73:da:20:
         ed:b9:ef:e3:0e:bc:5b:4a:fd:43:36:2d:57:ae:4f:3a:92:ee:
         00:d4:98:f7:97:bb:75:b7:d6:de:59:9a:b1:20:b2:81:17:b7:
         55:b6:4d:11:4b:51:5e:0f:b0:8f:e3:d8:25:de:8b:94:76:bd:
         e4:1d:33:1d:0a:5e:68:35:80:cd:df:46:41:64:bd:ea:a5:08:
         69:25:3e:e6:20:0a:7c:5a:72:73:fd:da:1d:ed:1b:ea:1e:6c:
         b1:44:23:49:73:93:a3:91:3d:50:62:c0:44:5b:8f:ae:b7:ba:
         22:df:37:5e:a6:1d:90:8d:ae:e6:ad:19:78:35:79:e6:5c:5f:
         2a:bd:d4:02:02:80:2b:99:08:92:9a:95:70:8d:d7:53:7c:57:
         8b:35:1c:37:c5:8d:40:fb:b8:d7:b9:0c:3c:f5:72:31:84:7d:
         37:3f:88:f6:db:d4:cd:06:5e:b5:02:7e:7f:2d:00:0b:dd:90:
         71:0d:7c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:45 2024 by rpki-client on console-fra.rpki-client.org