Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/23c73c80-b368-335e-8b8c-0a8d889b6664.roa
File:                     23c73c80-b368-335e-8b8c-0a8d889b6664.roa (raw, json)
Hash identifier:          Zb7dNRXhCLvdddex4n9JboAlr2RfuXDmrDcITYdxkD0=
Subject key identifier:   38:FD:33:6A:C7:F1:7F:9D:6B:81:0E:BF:48:BD:4C:07:88:59:FA:CD
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F432858465B048425C972299F4A69B3C0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/23c73c80-b368-335e-8b8c-0a8d889b6664.roa
Signing time:             Fri 28 Jun 2024 01:00:24 +0000
ROA not before:           Fri 28 Jun 2024 01:00:24 +0000
ROA not after:            Thu 26 Sep 2024 01:00:24 +0000
asID:                     14956
IP address blocks:        144.172.74.0/24 maxlen: 24
                          144.172.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:5b:04:84:25:c9:72:29:9f:4a:69:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jun 28 01:00:24 2024 GMT
            Not After : Sep 26 01:00:24 2024 GMT
        Subject: CN=1631f4ca-a754-47ae-a71c-ed608fc5b87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2f:90:c0:1d:62:3f:2c:f7:4a:77:cb:74:28:
                    90:12:13:3d:50:16:cf:01:aa:2d:3c:06:17:8a:97:
                    a3:6d:e2:83:69:65:b6:f8:37:23:91:c9:a2:19:11:
                    b3:2e:d4:08:ce:7f:08:5e:dc:44:bc:47:13:b5:3c:
                    7d:ec:46:55:21:af:05:71:5d:a3:f7:e8:0c:fd:24:
                    21:aa:97:3c:89:1e:f2:8e:14:5c:a0:68:ee:1e:86:
                    2a:3c:78:20:37:cd:34:b2:06:92:fc:89:54:63:92:
                    28:5a:d7:e6:e0:6c:17:9e:44:9e:71:d5:69:94:b9:
                    75:7e:5c:3a:ad:dc:0d:18:b5:18:22:6f:e7:70:bc:
                    6b:8d:eb:bb:13:50:97:d6:51:02:3c:2e:93:71:8b:
                    c8:a8:22:ea:60:ac:63:a9:80:36:62:a4:38:b3:b3:
                    1a:ff:0e:66:d5:51:86:0f:77:27:54:c5:fa:c9:0e:
                    f5:d5:52:52:33:f5:5c:fb:d7:b5:12:5f:90:0b:f2:
                    28:1f:69:34:f9:63:98:97:45:f1:cf:fd:8f:1d:d4:
                    7d:fc:ba:e8:a6:1f:43:c3:2f:5d:ee:14:7c:1f:58:
                    9b:ef:80:00:90:bd:4c:5c:bf:5c:68:2b:09:26:d0:
                    30:21:e8:ab:c6:c2:cb:0e:46:59:63:29:84:d4:25:
                    09:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FD:33:6A:C7:F1:7F:9D:6B:81:0E:BF:48:BD:4C:07:88:59:FA:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/23c73c80-b368-335e-8b8c-0a8d889b6664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.74.0/24
                  144.172.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:77:4b:3c:54:c3:80:4d:ce:2e:72:72:b3:ef:34:98:4e:b3:
         d9:a6:28:01:83:0e:74:60:46:ae:6e:ac:a2:d4:37:49:8a:f3:
         63:0c:4c:53:b9:85:44:1f:52:b6:41:58:f0:72:6d:65:4b:48:
         c1:19:c7:bd:a2:19:db:8a:28:91:0c:71:c9:07:a1:8c:ca:f0:
         60:5f:af:2e:57:43:f9:b7:04:44:ab:23:9e:6d:ff:f5:76:09:
         fb:c4:57:13:45:73:dc:40:dc:5c:66:f5:cf:ce:f4:2e:a3:42:
         be:d4:87:6a:e4:e8:78:88:ef:d6:ef:da:32:c7:3a:a1:3c:e4:
         a3:57:86:86:05:fb:27:6d:7a:d4:40:c3:42:c8:c7:54:b5:1d:
         12:01:e3:4d:8a:5c:8b:af:4a:70:b8:05:97:5f:04:03:fe:4a:
         b0:df:9d:35:85:ac:ff:52:05:9f:48:6b:f0:0c:57:e7:d0:2e:
         87:8e:e2:9e:ac:8b:2e:7f:81:29:fd:a9:1e:66:d9:87:69:5b:
         bb:d9:54:76:59:67:d8:d3:9b:f7:70:56:cd:bf:7e:fc:56:25:
         c4:29:21:22:d8:58:38:91:ef:c4:d8:34:1d:83:a3:ec:36:b3:
         21:5f:c1:f3:cf:26:68:ac:a8:d5:3f:db:1d:ce:93:45:38:12:
         8e:9d:68:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 23:00:59 2024 by rpki-client on console-fra.rpki-client.org