Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa
File:                     76c44b00-989e-36fc-900c-bd70d2bf1e52.roa (raw, json)
Hash identifier:          1a5qz5M56eW+ZA4BcGGCHiYnhxCQoe87TjgO0z9vlWw=
Subject key identifier:   B1:4B:20:E8:D2:FB:7D:FB:52:26:78:A5:13:7E:CF:04:01:FD:B3:7D
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F43285847AE36B26A1F4A70507E1655E0
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     33442
IP address blocks:        149.23.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:b2:6a:1f:4a:70:50:7e:16:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=3ecc07a8-4ad7-43bf-bf32-3fcf3647b75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:2e:b9:84:20:a7:e7:67:d6:95:51:a3:25:
                    bb:e4:5b:29:4c:fd:5b:b9:78:55:3e:4f:2b:e2:70:
                    2b:09:d6:63:3c:2a:86:32:82:35:f5:ef:2e:32:44:
                    12:67:da:45:79:cc:7e:25:ef:7b:09:68:e8:62:2c:
                    f5:af:5d:f3:d3:de:44:75:af:83:94:dd:3d:02:cb:
                    94:fa:63:9f:d0:80:1f:71:3b:34:a1:ac:20:65:1a:
                    1f:6f:3c:67:79:0f:cc:e3:63:32:23:8b:7d:e3:15:
                    9c:59:a8:ad:62:d3:b4:df:60:a5:91:6e:30:60:70:
                    6b:59:5c:ad:75:88:23:dc:5c:f0:87:e0:49:c1:3f:
                    3c:57:0b:d9:ef:d5:51:42:26:4e:18:86:5c:da:57:
                    64:67:e9:41:c9:86:40:04:8f:6d:76:fa:0e:dd:43:
                    f8:7e:a9:83:eb:7e:3e:e2:70:77:fd:cf:2e:06:2b:
                    d9:93:ad:07:43:28:55:59:aa:f3:78:4e:1f:d1:b4:
                    27:0e:f7:16:6e:24:e5:40:85:31:41:21:22:11:ef:
                    be:d3:50:41:43:22:dd:1d:9a:ef:d9:8f:ff:75:5f:
                    59:c6:81:70:3f:90:c9:75:f7:26:af:db:4d:b5:9b:
                    7b:27:55:8f:9c:05:d7:ad:d1:e5:bc:7d:e9:2d:8f:
                    d4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4B:20:E8:D2:FB:7D:FB:52:26:78:A5:13:7E:CF:04:01:FD:B3:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.23.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:36:df:6c:02:96:50:bd:a7:b0:04:a1:bf:3d:1c:91:e3:6a:
         1b:02:28:cf:5c:41:7a:86:c1:00:f5:ae:a2:f1:42:59:49:e2:
         b0:30:3b:00:f8:d4:a8:10:21:06:41:72:3f:26:db:a1:3b:5b:
         25:83:75:b9:c8:e9:d4:ce:27:f9:fd:dd:5b:4f:6a:6d:0b:d6:
         75:4c:54:72:3d:0e:c6:86:9f:dc:c9:01:1c:4b:5b:ad:f8:44:
         25:5f:b5:57:68:f0:08:84:1e:48:42:6a:42:e7:0b:64:1f:22:
         ee:ab:bc:7f:04:cd:eb:ad:2b:2b:f4:cc:e3:b5:d6:b1:5f:e8:
         4a:ab:09:c4:6d:0a:fd:6d:5b:74:29:58:84:e4:a8:0c:bf:33:
         92:2b:02:43:b7:5b:55:ce:76:c6:5d:43:44:6d:20:94:b0:5a:
         f3:29:1f:23:88:0f:7b:0a:a2:d7:fb:a8:6d:9b:84:ac:4b:fc:
         f6:9f:93:14:63:75:9d:7a:20:f0:99:8d:9d:a3:a5:5c:fb:12:
         49:7c:31:69:eb:54:ae:8b:ae:3d:35:5e:15:80:21:2e:28:43:
         ed:5e:1e:33:29:eb:fe:64:3f:45:12:6c:ba:0e:15:90:9b:95:
         7c:ca:d0:4f:35:c2:d6:00:1a:f9:e5:06:72:98:28:29:84:3f:
         bf:dd:2d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:21 2024 by rpki-client on console-ams.rpki-client.org