Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/81a94ea6-5eae-391c-9882-34c1ae45eb2c.roa
File:                     81a94ea6-5eae-391c-9882-34c1ae45eb2c.roa (raw, json)
Hash identifier:          NKxdz+duOhLLFrlvlWw5+Q6zjpBglBW1nXmA52YepJQ=
Subject key identifier:   6E:01:6E:08:3A:FB:A3:82:0D:1A:76:67:55:0B:77:B4:A4:25:D2:A3
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285845A6F359C1DB19361F5EC3C080
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/81a94ea6-5eae-391c-9882-34c1ae45eb2c.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        23.239.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:59:c1:db:19:36:1f:5e:c3:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=af35f45e-4b1a-40c2-8fe7-69b7dbfe0b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:97:07:8a:0d:9c:94:c8:ae:db:f4:cf:a8:1e:
                    3d:c8:64:44:4d:5e:86:c5:04:92:56:25:fb:b1:fa:
                    36:c8:5b:dc:58:1b:33:80:53:34:20:59:2e:7c:7b:
                    2a:65:94:39:e9:b3:c7:e1:bc:a2:63:01:c7:44:07:
                    06:a3:f9:27:90:c6:ad:84:7e:16:ab:4f:67:66:5a:
                    2d:71:19:d3:88:04:23:0a:e0:13:19:cd:bf:7f:62:
                    b9:4a:2f:c3:1f:af:09:17:9c:6b:bd:f4:13:16:be:
                    ad:2b:27:3c:92:59:ab:45:2e:47:26:9b:3e:1f:dc:
                    e5:be:41:83:54:bf:cc:68:74:e3:aa:07:d5:f8:0c:
                    09:4e:69:6a:97:d6:57:40:f3:90:6b:96:60:9f:b3:
                    83:fa:1f:f7:2a:e9:b1:21:0a:d8:6f:ea:0b:c5:b9:
                    47:ff:25:f0:e8:08:a8:cb:d3:18:39:6c:62:fc:52:
                    d0:e8:47:39:db:5f:85:c8:82:81:46:9d:30:b3:26:
                    53:d7:8d:5d:ed:de:0a:a6:16:05:cd:23:2a:b8:64:
                    97:04:54:35:23:41:39:07:c9:23:30:f2:dc:78:24:
                    8d:b5:16:69:14:d1:9e:07:e1:15:d3:c4:a9:ab:0f:
                    07:ab:9c:02:5b:7d:67:ce:bc:cb:05:3f:82:3e:f2:
                    b3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:01:6E:08:3A:FB:A3:82:0D:1A:76:67:55:0B:77:B4:A4:25:D2:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/81a94ea6-5eae-391c-9882-34c1ae45eb2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:0a:d3:ac:1f:0a:22:3d:1a:df:73:2c:cd:01:85:09:cb:7d:
         c7:ea:b7:67:83:ce:e1:0f:92:7d:ce:51:5e:f6:29:1b:68:9b:
         96:a2:ae:18:71:0f:60:66:79:0b:3a:b0:2f:2b:07:52:91:b6:
         27:66:85:72:02:4f:44:0a:09:c4:8a:09:a6:20:fd:b9:95:e3:
         fc:31:56:6e:6f:3c:be:36:e7:29:20:f0:72:e9:82:f1:9a:f3:
         b6:ec:ab:b1:20:55:85:60:ef:6e:91:5b:36:7d:ca:e6:a3:8b:
         d6:91:b3:65:a2:54:11:ba:e0:f2:1d:0d:a5:7a:1f:20:a8:ac:
         7b:30:32:ed:9c:6d:e5:6b:25:26:15:f7:65:41:e5:e1:e1:99:
         d6:b8:fa:50:21:c8:7f:46:04:af:36:65:f3:92:42:68:de:de:
         83:e6:56:da:6c:58:f6:53:db:48:b6:e2:83:08:b9:f5:0a:b7:
         97:73:fa:ce:17:02:20:cf:3b:06:9b:d0:90:9e:ff:7b:7f:06:
         a5:4f:16:c1:73:07:47:6d:1a:0c:56:50:28:13:80:97:a9:83:
         13:6d:68:bf:3a:f5:0f:d6:73:69:2e:65:28:30:aa:15:cb:86:
         9f:84:3a:93:d0:36:88:fb:ca:3f:2b:01:c0:82:43:a3:7c:a3:
         47:80:b4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:30:03 2024 by rpki-client on console-ams.rpki-client.org