Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/741bcfb0-5098-342a-aae8-dd39212d8e28.roa
File:                     741bcfb0-5098-342a-aae8-dd39212d8e28.roa (raw, json)
Hash identifier:          jYl+TKRSLLPfLOussKN7KTVo6c1g98GBN6R/czUdNn4=
Subject key identifier:   66:65:C2:43:CC:C9:6B:D9:04:E5:D8:A1:D6:BC:22:06:94:E6:E4:EE
Certificate issuer:       /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial:       010D0C9F43285847872123A2BA15D5D1373B1300
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/741bcfb0-5098-342a-aae8-dd39212d8e28.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     23154
IP address blocks:        143.116.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:23:a2:ba:15:d5:d1:37:3b:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=626f0ea0-d702-4423-9c9c-107c3a4bbaa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:31:89:63:4c:22:57:c0:2d:53:23:40:48:08:
                    3e:77:f0:87:c9:33:c2:cd:a4:ae:20:ea:ce:5a:62:
                    0f:a2:a0:17:e6:9d:33:fa:f6:7a:3e:2d:aa:0f:a6:
                    41:1a:4b:a7:79:63:a9:dc:f2:64:23:7e:7b:4d:18:
                    2b:35:cb:ec:73:99:d0:1b:85:92:08:7d:90:f6:50:
                    e8:e1:33:c5:d6:4b:63:d0:ac:b5:20:05:9c:30:bc:
                    f6:94:52:a1:2c:52:31:17:1c:22:62:6d:22:b3:aa:
                    7e:1b:e1:d3:5c:14:f4:49:10:97:28:8a:c5:39:de:
                    2a:3a:3d:90:35:22:23:73:0e:08:4f:3d:65:68:a1:
                    c0:33:16:1b:ce:58:71:85:65:a4:b4:af:14:a4:63:
                    47:8c:73:03:13:c0:74:78:9c:3e:08:d1:23:06:61:
                    52:24:01:55:8c:77:b9:5a:62:ba:a7:ff:4e:e4:4f:
                    74:ae:e3:e4:97:ed:5d:fb:87:e2:6f:78:42:9a:94:
                    b2:0c:67:78:13:53:cc:af:bc:61:74:84:43:5b:b3:
                    eb:93:2c:12:dc:74:9f:48:06:a1:e7:6d:13:7d:9b:
                    3e:a2:17:d1:19:2a:09:28:c2:65:a8:20:bb:14:e5:
                    b3:8c:c9:0c:aa:b2:f1:bc:b7:e8:fe:d7:71:20:a3:
                    95:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:65:C2:43:CC:C9:6B:D9:04:E5:D8:A1:D6:BC:22:06:94:E6:E4:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/741bcfb0-5098-342a-aae8-dd39212d8e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl

            X509v3 Authority Key Identifier:
                keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.116.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:cd:3c:ee:56:58:c3:03:a6:4a:18:79:04:8e:96:56:be:da:
         53:fe:5a:60:a9:4f:91:23:e6:7d:d1:3b:2c:74:9b:d3:de:f0:
         66:74:06:42:35:3b:9e:ad:1e:27:22:1f:19:d9:8e:4c:7a:6f:
         78:e6:c0:da:44:4a:8d:a8:9e:ed:f4:90:54:6f:a2:e2:56:07:
         26:6b:91:22:9f:f9:af:a9:65:ff:ed:f7:8c:d9:97:a2:75:6c:
         74:8d:85:87:5e:a0:48:10:cd:cf:37:a9:22:ad:9d:39:89:7b:
         75:ef:11:71:55:47:af:93:79:93:34:12:0a:e4:60:51:0d:22:
         6c:99:ea:89:df:be:1b:f8:17:d2:32:3a:4b:26:e7:c8:55:68:
         8e:fe:0f:05:dd:29:d7:43:87:b8:39:18:6e:07:4a:40:21:98:
         d1:50:b9:b8:d1:24:60:97:0d:6b:1b:5f:3c:d2:b3:c4:e1:3e:
         6c:35:a1:3c:d9:90:83:f9:4d:47:d8:60:05:17:c7:8f:5b:46:
         fb:65:07:6c:fd:05:1c:d5:4c:4c:c0:bc:66:6b:3c:3a:12:e3:
         5a:fa:3b:ad:04:ad:15:85:93:47:c0:9c:28:59:dc:75:59:87:
         e2:16:d1:29:db:92:7a:c4:64:72:c0:8a:8d:95:ab:39:49:09:
         8b:bd:f5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:14 2024 by rpki-client on console-ams.rpki-client.org