Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bc7ab7a-5213-3652-bc4a-ce70f6d6b07e.roa
File:                     0bc7ab7a-5213-3652-bc4a-ce70f6d6b07e.roa (raw, json)
Hash identifier:          jMAa1wDw0v/WE4QA//4AxlGx4vfcnX3x3wTtOUitmMU=
Subject key identifier:   EC:EB:E3:08:8F:7F:20:39:AB:FC:E5:5A:24:4D:4D:74:24:7B:F9:12
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845D0CAB034E6C79202B4916A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bc7ab7a-5213-3652-bc4a-ce70f6d6b07e.roa
Signing time:             Thu 09 May 2024 12:42:36 +0000
ROA not before:           Thu 09 May 2024 12:42:36 +0000
ROA not after:            Wed 07 Aug 2024 12:42:36 +0000
asID:                     20940
IP address blocks:        23.35.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d0:ca:b0:34:e6:c7:92:02:b4:91:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  9 12:42:36 2024 GMT
            Not After : Aug  7 12:42:36 2024 GMT
        Subject: CN=2898c440-fb04-4573-986d-4f656e9c07db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:30:65:43:cf:3f:0c:d7:01:9e:84:0b:7c:c8:
                    19:06:ee:f0:5b:ce:32:ca:ca:1e:8c:f8:7f:92:79:
                    92:b7:1d:61:57:b8:09:83:ef:03:e9:f2:ad:3f:bb:
                    6d:54:82:9f:67:86:db:35:50:47:73:be:f2:98:2b:
                    99:8b:40:2e:9c:ec:66:be:c5:ff:5d:2e:44:1a:0b:
                    d7:8e:5d:f1:ce:e1:69:27:45:69:50:77:2b:2f:13:
                    8b:99:c7:e8:bf:87:28:31:41:97:28:7b:4c:a7:74:
                    b3:c4:b7:87:c0:bc:f9:43:cb:5b:ac:04:03:f9:b9:
                    76:78:1f:c7:21:29:9c:b3:17:1d:fe:cd:c4:52:ad:
                    d6:59:4b:2b:06:f2:38:43:83:7a:6b:ad:99:3c:72:
                    2a:7c:54:65:8a:db:35:3c:1e:58:ba:47:ed:fa:79:
                    68:e2:37:a3:b7:de:9d:6f:51:f6:6d:4a:1f:44:78:
                    4c:01:43:b3:ab:b7:e0:9a:12:01:e7:b0:fe:4f:f2:
                    20:39:80:dc:fa:9d:1d:c8:d7:40:bb:b4:4a:b2:01:
                    34:9c:af:54:cb:e5:4f:a0:45:4e:68:f1:48:d9:fd:
                    31:d8:d3:c5:b0:ab:06:32:9e:87:18:da:05:93:d2:
                    9d:cd:ad:c5:25:5f:22:00:14:e6:64:6b:be:f5:c3:
                    60:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EB:E3:08:8F:7F:20:39:AB:FC:E5:5A:24:4D:4D:74:24:7B:F9:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bc7ab7a-5213-3652-bc4a-ce70f6d6b07e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.35.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:68:fa:2e:13:b3:44:27:80:cb:a0:d6:97:46:cb:b5:df:b4:
         a5:18:76:28:5b:f1:4c:21:d9:69:b0:1f:2b:1c:d8:39:95:09:
         18:19:05:28:d7:ab:12:9a:a9:d5:91:71:3e:cc:47:9f:95:b4:
         b0:1e:4c:87:99:18:16:12:f2:a8:e2:49:81:d8:d7:93:b4:e0:
         2c:f4:d1:eb:46:7d:ff:08:62:49:77:ef:bf:d2:9b:4d:b8:c6:
         35:99:25:96:07:6a:99:38:54:9c:80:3e:d2:dc:38:32:a4:a7:
         19:c9:8f:dd:08:06:ff:4e:d4:f3:8a:4f:54:8b:2d:db:3a:7c:
         01:3e:16:56:d2:9a:cd:72:2b:04:95:c7:d3:7a:f5:14:29:b7:
         2c:3c:0f:85:ab:6e:dc:f1:f1:c0:58:a1:be:45:34:5f:07:35:
         51:63:a4:70:41:69:5a:04:e4:fa:d2:50:33:45:cd:3f:d0:76:
         df:dd:1b:75:f8:5a:62:76:9d:b1:e2:e3:2c:5f:9e:35:54:f6:
         d0:0e:44:04:35:f4:27:67:9c:25:9c:cc:92:eb:5e:67:b1:c0:
         18:3e:71:a5:98:05:18:3a:94:be:58:92:d3:45:88:fd:19:16:
         66:ab:77:cc:2d:19:af:98:aa:83:e2:fb:1e:98:74:87:09:2a:
         5c:4d:8a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:12:44 2024 by rpki-client on console-ams.rpki-client.org