Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa
File:                     d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa (raw, json)
Hash identifier:          Q/Dt1HXNLcb7XIdA3mGcwvtYsHYnoYT9WqyfwNZOZnA=
Subject key identifier:   78:4F:10:C5:08:41:9C:41:A3:A9:06:96:B0:E0:8D:BF:3C:E9:1C:6A
Certificate issuer:       /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d
Certificate serial:       010D0C9F4328584613D40C1B819E61B18C036A28
Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa
Signing time:             Sun 02 Jun 2024 13:00:36 +0000
ROA not before:           Sun 02 Jun 2024 13:00:36 +0000
ROA not after:            Sat 31 Aug 2024 13:00:36 +0000
asID:                     209242
IP address blocks:        23.170.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:13:d4:0c:1b:81:9e:61:b1:8c:03:6a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d
        Validity
            Not Before: Jun  2 13:00:36 2024 GMT
            Not After : Aug 31 13:00:36 2024 GMT
        Subject: CN=9179fabb-5c94-4749-ba52-d5d6818385be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ad:5e:a6:7e:5b:78:50:e2:b2:1e:18:09:11:
                    d2:8b:f4:31:9f:96:12:47:ae:bb:1e:73:04:7f:29:
                    22:1a:2c:7d:00:87:e0:9d:17:77:77:2a:c3:d2:78:
                    ee:95:c8:05:02:74:29:16:54:32:88:79:f8:51:ee:
                    8c:ed:b7:bc:96:b3:25:7b:8a:e6:b7:69:4f:fb:a2:
                    bb:9b:6c:51:e4:96:e2:e4:e9:d9:2f:fb:70:b3:96:
                    18:4e:b4:ec:e5:d2:9b:0b:6b:73:ae:63:44:21:f3:
                    70:9d:8c:bf:0b:bd:ee:97:2b:f6:53:d0:5a:0d:9d:
                    7e:79:07:00:9a:d2:d5:56:a1:4d:58:c8:ac:ba:89:
                    50:05:4d:39:55:34:e8:a0:3d:bb:0f:2f:40:de:8f:
                    b8:af:74:71:6c:4e:38:cc:37:50:41:9c:89:cf:a2:
                    01:ee:4c:11:e6:37:c8:0a:43:3b:66:19:cf:8b:ae:
                    4b:1c:cb:27:d6:74:b7:db:b7:b8:27:ac:e2:04:f4:
                    63:6a:bc:00:51:e2:c6:bd:89:f8:d4:99:67:b9:ce:
                    6f:b7:f7:77:6b:96:4b:19:6b:e1:2a:7a:7c:de:01:
                    2c:da:91:be:c0:3b:94:3d:ef:d7:8f:f0:6c:9c:62:
                    45:fe:09:f7:62:14:9e:a0:56:ad:41:c8:4b:46:ba:
                    b9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4F:10:C5:08:41:9C:41:A3:A9:06:96:B0:E0:8D:BF:3C:E9:1C:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl

            X509v3 Authority Key Identifier:
                keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:b6:59:f4:c5:fd:01:a2:a2:d9:5f:88:a2:1f:7e:16:fb:35:
         58:ef:67:69:4c:1e:63:97:03:55:b1:bc:5b:9f:c4:94:2e:f1:
         ff:93:51:9c:8b:ab:56:16:c0:af:61:b9:78:71:bb:4f:08:49:
         c8:24:2c:99:ae:c9:b6:72:ee:f9:c4:78:2c:e8:28:c3:42:b8:
         b4:62:52:50:85:1e:94:ce:0c:b4:26:5b:bb:bc:c6:20:c6:8a:
         27:c5:0d:85:ef:87:bd:39:93:4a:b4:37:09:47:86:6d:f0:c8:
         b2:8c:c4:50:92:5a:65:83:bd:57:3d:e1:b2:b7:3b:08:6e:12:
         9b:87:4a:0f:de:6d:d9:35:de:48:78:ff:65:9f:69:35:7e:86:
         34:16:83:29:10:c4:19:c8:44:85:67:33:e4:13:57:8c:b2:38:
         3e:09:da:a0:0e:7b:4f:ac:24:d1:97:31:66:a1:62:7a:bd:ac:
         67:6c:a0:90:cc:b2:b1:26:66:10:c8:9e:79:30:2f:b8:0f:88:
         e4:18:6e:5f:d9:da:8f:c9:44:91:a3:ad:ff:40:9f:85:d1:73:
         77:7b:c0:90:6d:95:3f:64:24:93:cb:fa:1c:b9:cb:92:ee:78:
         3e:f2:dc:e5:27:68:23:99:77:3d:de:b6:1a:db:68:7a:b6:59:
         05:2f:b4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:02:09 2024 by rpki-client on console-fra.rpki-client.org