Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa
File:                     7eab64af-78b7-3d87-9f08-54d27ec7277e.roa (raw, json)
Hash identifier:          3eQYBt4yjFi7bbMPzE0WnhKwbFtq1h03uvd1dAG35qU=
Subject key identifier:   34:87:CE:E9:83:BF:F6:8B:B3:0C:B2:E9:31:D7:24:1C:F8:E7:41:AB
Certificate issuer:       /CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
Certificate serial:       010D0C9F43285846513F129EF6670E195F86C400
Authority key identifier: 67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa
Signing time:             Mon 24 Jun 2024 13:00:34 +0000
ROA not before:           Mon 24 Jun 2024 13:00:34 +0000
ROA not after:            Sun 22 Sep 2024 13:00:34 +0000
asID:                     7034
IP address blocks:        23.152.160.0/24 maxlen: 24
                          2620:13b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:51:3f:12:9e:f6:67:0e:19:5f:86:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
        Validity
            Not Before: Jun 24 13:00:34 2024 GMT
            Not After : Sep 22 13:00:34 2024 GMT
        Subject: CN=cbcecc9e-cb4d-4f45-b0c8-9d601bd9c871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:06:0c:10:46:05:c2:8d:bf:ab:e1:1d:3f:46:
                    81:b9:74:76:48:0e:aa:fb:1f:b6:ff:a4:5e:74:ef:
                    61:b1:93:9b:67:82:92:01:fe:dd:66:92:6c:e9:be:
                    a2:11:44:67:82:4a:fd:51:5b:20:df:6c:d0:74:2a:
                    59:fa:c7:92:ea:a8:17:55:41:50:f7:b7:f5:c9:c8:
                    cf:54:cb:ce:3e:ed:0c:7e:8f:12:0d:29:62:92:ff:
                    ed:f9:bb:4e:bd:78:10:56:c2:93:13:38:f7:a5:6e:
                    04:df:f0:bf:f1:1b:1d:66:76:9d:1b:4e:cb:45:33:
                    23:40:4c:c0:d9:6b:7d:67:3d:25:41:b9:63:97:ad:
                    6c:01:6c:2a:cf:f9:26:98:57:b7:2c:fa:a4:57:2c:
                    94:0b:5c:c3:21:33:f5:d9:c1:7b:ae:65:4c:4f:d4:
                    1d:58:36:5c:d5:09:21:98:32:36:f1:1d:17:f7:53:
                    3f:31:5b:e9:cc:8a:9f:f9:10:5a:09:b6:f3:09:cb:
                    23:a5:a8:db:8d:54:d7:3f:1a:73:d6:d6:c6:f2:7c:
                    d5:6c:85:8e:0d:33:68:cc:86:49:2d:12:83:54:a5:
                    8d:dd:15:66:72:0e:95:d3:a5:2e:02:c1:26:f8:49:
                    a1:08:c0:97:df:20:e7:e0:8d:16:08:3f:d8:29:35:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:87:CE:E9:83:BF:F6:8B:B3:0C:B2:E9:31:D7:24:1C:F8:E7:41:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl

            X509v3 Authority Key Identifier:
                keyid:67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.160.0/24
                IPv6:
                  2620:13b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:cf:50:80:1f:c4:9e:27:0b:3a:eb:b8:ec:97:56:08:ad:36:
         6d:2b:90:a8:9a:6a:9d:65:df:c8:f8:60:18:f2:cc:5c:4d:38:
         4e:44:fe:ea:c2:fc:f7:2a:8d:46:d1:6b:51:6e:c6:fa:54:f3:
         29:4f:36:bb:6b:30:58:c7:37:6a:bc:97:5c:55:75:64:9a:1c:
         d5:2c:2e:06:96:52:3d:6c:da:88:81:7b:ab:d0:32:91:38:f0:
         26:b4:63:83:e0:83:c9:a8:a7:31:b0:15:ca:1d:e2:8e:54:ac:
         5e:d3:05:88:1c:9c:77:1f:d8:2c:56:6d:69:54:7d:a2:9e:85:
         81:e5:0c:7c:7e:4e:b2:b6:74:3c:75:f8:65:5e:56:e2:bf:df:
         da:64:7a:9d:b7:1b:28:9a:2d:43:5d:b1:15:63:f3:5e:f9:2a:
         1f:81:0f:a5:60:13:1a:55:28:11:22:29:d0:ae:75:b7:61:ab:
         ec:72:55:1d:bf:d1:82:25:4d:9d:40:c5:b6:3c:bc:e1:a7:29:
         28:25:19:a0:c1:29:ab:8d:cb:55:f1:14:3e:19:69:3a:79:ac:
         7f:0d:38:60:f4:ee:99:9e:92:dc:a1:96:95:ab:02:8a:ca:fd:
         51:92:74:f4:8a:d0:d2:10:f7:c6:5f:04:a1:2f:fc:c6:54:72:
         67:ba:00:c9
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEZRPxKe9mcOGV+GxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzBkNGE1MTAtMTQ2OC00NmU4LWJlYWYtZTY2ODFhMTE5
MGM1MB4XDTI0MDYyNDEzMDAzNFoXDTI0MDkyMjEzMDAzNFowLzEtMCsGA1UEAxMk
Y2JjZWNjOWUtY2I0ZC00ZjQ1LWIwYzgtOWQ2MDFiZDljODcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAYMEEYFwo2/q+EdP0aBuXR2SA6q+x+2/6Re
dO9hsZObZ4KSAf7dZpJs6b6iEURngkr9UVsg32zQdCpZ+seS6qgXVUFQ97f1ycjP
VMvOPu0Mfo8SDSlikv/t+btOvXgQVsKTEzj3pW4E3/C/8RsdZnadG07LRTMjQEzA
2Wt9Zz0lQbljl61sAWwqz/kmmFe3LPqkVyyUC1zDITP12cF7rmVMT9QdWDZc1Qkh
mDI28R0X91M/MVvpzIqf+RBaCbbzCcsjpajbjVTXPxpz1tbG8nzVbIWODTNozIZJ
LRKDVKWN3RVmcg6V06UuAsEm+EmhCMCX3yDn4I0WCD/YKTUplwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFDSHzumDv/aLswyy6THXJBz450GrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMGQ0
YTUxMC0xNDY4LTQ2ZTgtYmVhZi1lNjY4MWExMTkwYzUvN2VhYjY0YWYtNzhiNy0z
ZDg3LTlmMDgtNTRkMjdlYzcyNzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzBkNGE1MTAtMTQ2OC00NmU4LWJl
YWYtZTY2ODFhMTE5MGM1L2MwZDRhNTEwLTE0NjgtNDZlOC1iZWFmLWU2NjgxYTEx
OTBjNS5jcmwwHwYDVR0jBBgwFoAUZ9+WYAuMnyKzgx5Kvt/kHjFCrqowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jMGQ0YTUxMC0xNDY4LTQ2ZTgtYmVhZi1lNjY4
MWExMTkwYzUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF5igMA8E
AgACMAkDBwAmIAE7AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATM9QgB/EnicLOuu47JdWCK02bSuQqJpq
nWXfyPhgGPLMXE04TkT+6sL89yqNRtFrUW7G+lTzKU82u2swWMc3aryXXFV1ZJoc
1SwuBpZSPWzaiIF7q9AykTjwJrRjg+CDyainMbAVyh3ijlSsXtMFiBycdx/YLFZt
aVR9op6FgeUMfH5OsrZ0PHX4ZV5W4r/f2mR6nbcbKJotQ12xFWPzXvkqH4EPpWAT
GlUoESIp0K51t2Gr7HJVHb/RgiVNnUDFtjy84acpKCUZoMEpq43LVfEUPhlpOnms
fw04YPTumZ6S3KGWlasCisr9UZJ09IrQ0hD3xl8EoS/8xlRyZ7oAyQ==
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:40:14 2024 by rpki-client on console-ams.rpki-client.org