Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/b8277726-63a8-3672-9533-c44e9d028822.roa
File:                     b8277726-63a8-3672-9533-c44e9d028822.roa (raw, json)
Hash identifier:          8WsVGcCJJrf6FbmAgrDdyV4mit7jH940TPspNlVEXmw=
Subject key identifier:   0B:8E:92:AD:0B:E3:CE:86:D2:79:51:7A:89:AF:52:1D:49:21:60:38
Certificate issuer:       /CN=22d5f618-5b64-4804-88ef-e125dd90d7e2
Certificate serial:       010D0C9F432858478CB688E493CA0B3AD9D82480
Authority key identifier: 51:F3:B4:5D:AB:73:A3:7E:EC:9A:47:7B:05:74:05:B7:39:6D:E9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/b8277726-63a8-3672-9533-c44e9d028822.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     988
IP address blocks:        23.138.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:88:e4:93:ca:0b:3a:d9:d8:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d5f618-5b64-4804-88ef-e125dd90d7e2
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=9e848c40-4596-40f0-bb5e-340fedfdc3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f9:0c:0f:60:cd:91:d6:8d:15:94:a3:05:eb:
                    e6:54:0d:63:a0:7a:6c:05:17:8f:63:f9:ad:46:d1:
                    02:0d:03:41:fb:5e:7f:7a:10:3d:9f:06:9d:63:4c:
                    6f:46:a3:3c:a8:8b:32:86:62:a6:74:66:4a:cf:b4:
                    1f:53:d0:7a:2a:2b:de:d6:c7:e8:cf:6a:d1:60:3a:
                    ca:97:b2:9f:a9:2e:3e:d2:b1:79:17:fd:e7:e2:ee:
                    60:7b:cd:cb:8b:b1:d0:21:2c:31:3f:1d:b1:13:67:
                    de:ea:49:c0:0d:9b:63:15:3a:fd:9e:57:a8:fc:b7:
                    75:9d:c7:70:f8:fd:8d:33:05:a0:78:68:91:96:86:
                    c5:97:9e:ec:b2:18:9e:c1:cf:fb:a6:54:51:4a:3a:
                    58:0b:99:56:10:37:49:df:74:3e:1c:22:12:45:34:
                    f0:c0:2f:36:dc:2e:47:e0:40:f0:c8:cb:2e:79:b1:
                    77:b4:b7:55:00:77:9a:30:0c:7f:9e:87:42:68:e2:
                    30:c6:37:a5:f6:32:bd:72:ba:70:81:87:27:e7:3b:
                    af:e8:1d:ce:77:2d:a2:44:da:71:02:6f:55:6a:40:
                    10:75:f4:a9:d5:e6:84:7c:e4:03:80:be:52:20:07:
                    cc:da:82:57:13:0f:71:95:62:44:7d:ed:6d:9e:a9:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8E:92:AD:0B:E3:CE:86:D2:79:51:7A:89:AF:52:1D:49:21:60:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/b8277726-63a8-3672-9533-c44e9d028822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.crl

            X509v3 Authority Key Identifier:
                keyid:51:F3:B4:5D:AB:73:A3:7E:EC:9A:47:7B:05:74:05:B7:39:6D:E9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:2c:eb:26:67:63:6e:e6:5f:92:38:ed:ef:f5:ae:7e:63:11:
         d7:48:5b:ab:e5:42:5b:70:72:9b:b1:95:89:c9:f0:d2:f8:4a:
         aa:82:04:bb:88:dd:8d:4d:81:44:b4:d1:ae:a9:83:32:bc:ab:
         15:4d:c8:17:00:bb:b4:cf:d9:f1:c3:0e:59:16:78:5d:04:5f:
         8f:23:02:75:17:b6:e4:c5:5c:26:4e:a4:a4:f9:df:02:98:11:
         64:3c:36:25:e1:da:c9:a5:87:6d:a5:52:54:16:26:38:43:67:
         76:55:df:8b:84:14:63:f1:c9:98:87:b6:37:89:bf:42:ca:3d:
         6a:df:27:56:11:35:6d:21:44:5f:d8:9f:a5:ee:19:49:21:77:
         0d:2b:7a:d2:54:5b:b7:bd:fa:44:37:36:75:98:9a:bb:9a:89:
         33:51:b5:46:d8:70:a3:d9:4b:6d:c7:65:49:74:1c:00:6e:14:
         00:d1:66:01:c7:94:65:27:76:d8:11:2d:6d:5a:05:a6:d2:da:
         59:88:1a:e2:c1:39:1f:a8:b4:fd:10:e3:d1:b1:81:e0:5f:2b:
         27:ca:ab:a2:64:a6:bc:e3:6a:9b:79:29:8b:9a:a5:c7:3e:b4:
         96:ad:8d:a0:94:67:87:0b:65:5b:45:47:62:97:ce:2e:bc:24:
         44:b2:6c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:00 2024 by rpki-client on console-fra.rpki-client.org