Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/96baeb99-e1f6-3e81-af42-2424f9495239.roa
File:                     96baeb99-e1f6-3e81-af42-2424f9495239.roa (raw, json)
Hash identifier:          dzy0mjPa1R7HRr1u/si68KByxhPeO5gq8gvPNWMe018=
Subject key identifier:   6B:EE:D7:69:57:79:2C:16:26:0E:0E:7C:00:D8:21:9B:49:88:CB:D3
Certificate issuer:       /CN=ab48051f-b089-4872-acc6-a73a442e9736
Certificate serial:       010D0C9F43285846864A2655A6CEACF7F31CE040
Authority key identifier: 2B:54:20:F2:AF:8F:AF:36:32:D0:F6:01:84:AB:37:C8:43:29:28:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/96baeb99-e1f6-3e81-af42-2424f9495239.roa
Signing time:             Sat 13 Jul 2024 13:00:33 +0000
ROA not before:           Sat 13 Jul 2024 13:00:33 +0000
ROA not after:            Fri 11 Oct 2024 13:00:33 +0000
asID:                     401008
IP address blocks:        23.176.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:86:4a:26:55:a6:ce:ac:f7:f3:1c:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab48051f-b089-4872-acc6-a73a442e9736
        Validity
            Not Before: Jul 13 13:00:33 2024 GMT
            Not After : Oct 11 13:00:33 2024 GMT
        Subject: CN=e09d2dc1-0c2d-478e-a319-40ba4626da1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:34:cf:fc:5b:4b:ae:3b:4a:55:0d:ec:d8:a0:
                    c9:d0:ed:1c:2a:1f:72:ec:ab:d6:c4:76:4b:ff:7d:
                    41:3e:bc:3a:b5:68:d6:e0:18:02:5a:b7:6c:ce:fb:
                    bb:30:ea:01:1e:e4:60:51:1a:db:79:b9:6c:bf:9f:
                    6d:ba:61:29:16:04:5d:6d:e7:23:4d:57:c9:e7:ff:
                    10:f0:2d:af:9a:9c:99:6d:c3:41:15:66:51:c5:bf:
                    23:29:82:03:0c:d1:30:b4:2d:e2:60:ef:94:9e:27:
                    bc:80:b5:26:3a:97:1c:6b:d5:da:03:7d:84:74:fa:
                    b9:6c:d2:5c:37:83:c7:ca:72:8a:82:0a:51:f0:58:
                    c6:d8:25:f2:35:63:9e:c2:0d:fe:f2:21:18:bc:fe:
                    18:7b:5c:dc:49:7f:a7:08:f5:ab:23:38:fd:35:6a:
                    3d:d9:4f:00:1f:86:4d:e6:fd:be:82:18:f0:3f:0c:
                    fa:ae:7c:25:5e:51:97:66:1e:fa:6d:44:c8:51:96:
                    28:13:ef:aa:22:27:51:8e:6e:fa:7d:5a:b3:5f:d6:
                    c7:98:b5:ac:29:05:ab:11:12:56:3b:ae:c6:f4:76:
                    4e:3c:4d:81:68:a1:18:7a:36:1e:dc:54:1f:e8:ab:
                    e5:6d:8a:d7:3f:12:12:d6:a6:ec:57:a5:c8:ab:18:
                    ab:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EE:D7:69:57:79:2C:16:26:0E:0E:7C:00:D8:21:9B:49:88:CB:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/96baeb99-e1f6-3e81-af42-2424f9495239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.crl

            X509v3 Authority Key Identifier:
                keyid:2B:54:20:F2:AF:8F:AF:36:32:D0:F6:01:84:AB:37:C8:43:29:28:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:06:03:00:0a:84:f6:df:f3:d6:da:fb:dc:27:e2:b5:1e:5d:
         ff:f9:32:a5:ab:9b:6a:7f:8f:13:be:c6:f4:88:69:57:a3:85:
         89:09:84:1c:63:d5:2c:1c:1e:0a:b5:44:4f:21:e5:fa:d0:be:
         47:00:f2:5b:ab:1d:30:21:6a:6e:49:9c:50:e3:60:50:50:d9:
         a5:1c:2c:5b:c6:0b:68:b0:2e:4a:fe:89:3d:b1:ef:bf:88:e0:
         39:d1:21:2e:6b:07:4b:cb:73:08:69:6a:84:93:fd:85:a4:a1:
         bf:08:b7:62:9e:ee:ee:5e:1c:da:a6:4b:2d:5b:c9:1f:1c:cb:
         33:99:b9:a8:06:b6:48:e9:d8:60:44:29:04:55:45:e0:f0:54:
         dd:9a:02:3d:9b:90:a1:05:f7:aa:fc:2b:6a:13:92:8b:8e:4a:
         24:9a:d4:b4:b7:ed:c7:20:25:c2:ab:ea:81:38:ae:e6:92:b9:
         d7:84:fc:61:a2:44:80:e5:09:e0:70:59:b3:e4:03:1d:c3:21:
         84:17:b2:16:1b:70:76:5f:fa:2f:56:a1:d5:c5:2c:6f:c8:90:
         04:1f:8d:c9:59:14:40:c1:fd:e8:2c:82:a4:6e:d9:10:8b:d2:
         5e:57:74:05:ad:cb:71:5e:51:46:65:d7:89:68:06:6d:d8:02:
         71:a4:0e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:18:25 2024 by rpki-client on console-ams.rpki-client.org