Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/374aa05f-7f19-3b4c-979b-c30575d07d45.roa
File:                     374aa05f-7f19-3b4c-979b-c30575d07d45.roa (raw, json)
Hash identifier:          nlg557+ax1iRMwNKn28RzZ1nJHwF55sv9q7OsJOzxFc=
Subject key identifier:   2D:43:03:3D:31:88:9D:AB:A9:4F:48:0E:12:BE:26:2B:E9:B0:71:93
Certificate issuer:       /CN=0113f3a9-36b0-4afd-81ec-5d581325b016
Certificate serial:       010D0C9F43285846EC3005D23AE42767D8EB3480
Authority key identifier: 26:F2:8C:9D:C1:B0:BE:69:2B:6C:B0:EE:7E:F5:4E:0D:57:9A:5D:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/374aa05f-7f19-3b4c-979b-c30575d07d45.roa
Signing time:             Mon 19 Aug 2024 01:00:31 +0000
ROA not before:           Mon 19 Aug 2024 01:00:31 +0000
ROA not after:            Sun 17 Nov 2024 02:00:31 +0000
asID:                     394496
IP address blocks:        23.169.232.0/24 maxlen: 24
                          2620:c3:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/0113f3a9-36b0-4afd-81ec-5d581325b016.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/0113f3a9-36b0-4afd-81ec-5d581325b016.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ec:30:05:d2:3a:e4:27:67:d8:eb:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0113f3a9-36b0-4afd-81ec-5d581325b016
        Validity
            Not Before: Aug 19 01:00:31 2024 GMT
            Not After : Nov 17 02:00:31 2024 GMT
        Subject: CN=5abed103-a4d8-4e9a-b513-87b442bb8957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7e:e2:dd:42:4e:dd:57:f0:8e:bf:a1:20:8e:
                    2b:d6:50:40:3b:cf:87:e5:8a:2c:b8:16:79:49:77:
                    d5:f7:ae:70:2e:3b:fa:4b:2e:cc:aa:5c:ac:c9:06:
                    da:32:d7:29:df:3f:11:45:28:26:5d:b2:aa:c2:a0:
                    74:f3:72:f0:b7:b3:99:91:fd:61:78:7f:83:d4:68:
                    be:e7:e3:c6:89:e3:52:09:6c:7d:ab:03:c2:6a:27:
                    d3:cd:19:24:a9:55:57:35:3a:55:1f:b3:43:71:d2:
                    6e:81:10:a7:bd:ef:ec:6d:b3:e7:6e:b9:50:86:d6:
                    86:da:bc:24:e9:7f:ee:54:64:f7:2b:8f:25:53:5a:
                    e2:72:ec:f5:00:85:0b:58:50:ef:47:9f:d2:7b:a1:
                    ca:74:2e:af:a1:bf:f3:80:81:4e:6a:58:10:89:80:
                    a3:9f:7c:9f:29:f3:8a:63:3e:e7:23:3d:99:38:4d:
                    34:9c:be:5e:31:9a:c7:69:f7:63:1a:80:e7:14:94:
                    a9:44:e3:0a:59:0c:4c:a2:e0:54:e5:86:cf:b4:26:
                    d3:ef:89:c3:09:77:c2:1b:a6:b6:6d:b4:bc:d1:1c:
                    68:e7:6f:da:65:c6:55:dd:02:e7:43:a6:3b:f6:06:
                    b5:72:f1:f1:a5:17:3b:3e:e2:df:bb:aa:df:2b:48:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:43:03:3D:31:88:9D:AB:A9:4F:48:0E:12:BE:26:2B:E9:B0:71:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/374aa05f-7f19-3b4c-979b-c30575d07d45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/0113f3a9-36b0-4afd-81ec-5d581325b016.crl

            X509v3 Authority Key Identifier:
                keyid:26:F2:8C:9D:C1:B0:BE:69:2B:6C:B0:EE:7E:F5:4E:0D:57:9A:5D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.232.0/24
                IPv6:
                  2620:c3:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:bc:4c:49:30:d1:f9:2e:28:f0:12:31:c1:97:86:f5:7c:07:
         b4:3d:0e:28:37:73:57:93:f8:14:86:a4:79:0e:7e:93:de:a5:
         1f:e5:cf:fa:00:e7:05:d9:6d:2e:56:a5:ce:04:dd:4b:11:d9:
         1e:48:8f:e7:7a:3d:d0:bf:96:1a:d5:29:1d:01:c1:77:29:a7:
         08:ee:eb:26:44:27:3e:ce:5f:e4:8b:ac:30:1d:18:5c:aa:bb:
         61:ef:a5:74:cc:f9:27:f9:ee:4a:da:1f:22:2f:90:69:c0:9f:
         48:3d:b0:95:45:f6:21:aa:e5:a6:3a:10:6a:6e:25:3a:4d:9a:
         fb:95:0b:b4:44:19:34:6d:b3:2f:eb:01:86:41:da:8d:ab:0b:
         3d:0e:89:ec:39:d4:4e:ec:14:30:76:a0:07:4a:16:f2:46:6c:
         34:24:c4:de:35:42:3f:2d:37:7f:a5:ed:2e:07:30:6b:c3:c3:
         ab:1e:5f:48:f1:1e:42:19:06:b4:b5:20:20:a5:d6:eb:4a:54:
         9e:ca:a1:06:a3:c7:f8:4f:a5:21:72:6d:b9:90:18:29:96:e4:
         3d:d2:ce:be:ea:e6:70:75:3d:fe:de:ed:2f:96:30:ce:29:0a:
         b6:58:d3:49:de:5a:a5:8a:ad:6d:57:7b:86:aa:ae:08:76:41:
         7d:8f:c8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 20:52:28 2024 by rpki-client on console-fra.rpki-client.org