Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f/5dfa5b86-96c3-3602-adff-1fcef7e1809c.roa
File:                     5dfa5b86-96c3-3602-adff-1fcef7e1809c.roa (raw, json)
Hash identifier:          NFLEQ1c8ednUY1g5YHuyMcZEfzY23Im0xnnP8O7OxdQ=
Subject key identifier:   31:2A:24:8E:93:92:D3:72:70:AF:C0:48:D7:0E:33:DE:45:75:DE:56
Certificate issuer:       /CN=c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f
Certificate serial:       010D0C9F432858460E7BC7B52FFA891E48ECF000
Authority key identifier: 59:98:4A:15:E7:0D:23:4A:53:F0:D1:F1:A2:CE:0A:08:58:A5:2B:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f/5dfa5b86-96c3-3602-adff-1fcef7e1809c.roa
Signing time:             Fri 31 May 2024 15:03:44 +0000
ROA not before:           Fri 31 May 2024 15:03:44 +0000
ROA not after:            Thu 29 Aug 2024 15:03:44 +0000
asID:                     395417
IP address blocks:        23.179.40.0/24 maxlen: 24
                          2607:b5c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0e:7b:c7:b5:2f:fa:89:1e:48:ec:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f
        Validity
            Not Before: May 31 15:03:44 2024 GMT
            Not After : Aug 29 15:03:44 2024 GMT
        Subject: CN=458195d8-401e-4c2e-9122-46499c580f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0b:d5:48:49:ce:1b:3f:79:c7:7f:18:92:77:
                    dd:d5:d6:c3:5d:53:bf:e9:8c:97:bd:51:7b:1b:d2:
                    80:18:85:b5:cf:75:83:1c:34:89:e5:c1:a5:7f:5b:
                    e8:6c:5a:c2:8f:64:2f:23:65:98:2e:fb:35:b7:33:
                    30:63:f2:19:a9:f7:30:9d:72:02:e4:48:50:24:eb:
                    e8:97:af:a7:7a:b0:17:d4:23:d9:bd:27:15:12:08:
                    80:36:a2:e6:b3:79:cd:e2:61:f3:04:40:0a:24:6c:
                    d1:ec:c4:e8:7c:70:5f:c5:44:58:aa:1c:e3:c8:ae:
                    27:64:e9:8b:4d:7e:f1:78:57:31:9a:94:0a:d6:50:
                    7e:f8:fc:41:83:bb:41:13:0e:bd:e6:75:11:21:d5:
                    5a:95:bd:c9:81:af:7b:69:d6:0a:86:59:6e:b7:60:
                    90:99:f7:3e:0a:0e:7a:38:e6:4d:ac:8a:21:85:ea:
                    28:fc:9e:52:9b:86:16:c6:ff:38:dc:21:9c:c0:9b:
                    8b:e0:0b:b8:bd:f1:4b:90:ae:6b:27:90:60:2b:67:
                    fc:ba:af:7b:46:cc:b2:b7:d1:51:88:91:84:63:da:
                    2e:f9:64:cb:d4:fd:a8:71:f7:3b:a2:75:14:f7:5e:
                    98:76:5e:3c:83:9a:32:09:3d:2b:96:f7:29:c3:16:
                    7b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2A:24:8E:93:92:D3:72:70:AF:C0:48:D7:0E:33:DE:45:75:DE:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f/5dfa5b86-96c3-3602-adff-1fcef7e1809c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f.crl

            X509v3 Authority Key Identifier:
                keyid:59:98:4A:15:E7:0D:23:4A:53:F0:D1:F1:A2:CE:0A:08:58:A5:2B:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c49ac802-ca1e-4ae4-ae9a-c4631a3f0a5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.40.0/24
                IPv6:
                  2607:b5c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:7a:58:58:9b:07:1d:ef:a2:77:8c:6e:63:17:41:74:89:0b:
         ae:7f:d3:3d:60:59:87:70:3f:14:50:1f:bd:2f:78:8f:b6:42:
         46:9b:a3:0a:62:4a:59:b7:48:79:46:d0:02:17:a2:38:a9:90:
         03:b9:b6:8d:ec:c3:04:05:1c:91:aa:2e:af:82:ee:42:53:57:
         b3:64:86:97:a2:17:ef:ad:04:b9:66:5c:e2:8e:53:f4:3f:27:
         8e:9a:f1:3d:a9:1f:af:37:7b:4f:a2:8a:56:68:37:0d:7d:13:
         a8:90:fc:26:f9:79:5e:ca:d1:82:b2:e2:40:cd:9d:4b:23:e0:
         24:42:c8:59:e1:a9:27:25:f5:bd:72:9c:28:bc:3c:c2:e5:05:
         24:88:55:3e:0e:1f:2a:94:f7:4b:18:47:d1:0d:42:a0:66:d9:
         31:1e:80:51:54:68:67:2c:f1:a3:01:02:18:6a:b2:0e:3a:7e:
         a0:b3:04:1a:17:e1:2c:8a:73:7b:a9:aa:6b:4c:23:04:0a:e7:
         76:e9:4e:b0:33:1a:ed:2e:88:18:6c:af:57:a9:bc:83:73:f9:
         bc:b9:a1:4a:91:82:40:e4:be:28:b5:57:8a:de:c2:5c:41:c7:
         ee:6e:85:65:9e:fc:7b:b2:b2:48:2e:6b:07:10:52:44:a3:9c:
         5e:08:c9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:44 2024 by rpki-client on console-ams.rpki-client.org