Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/1591f74c-28e6-3beb-a060-29508edef5ad.roa
File:                     1591f74c-28e6-3beb-a060-29508edef5ad.roa (raw, json)
Hash identifier:          lPr3qhkM0IVi+90GXYdEpCsHXh7aIu5YPc9ii7Sz3LM=
Subject key identifier:   7A:A8:91:98:5D:EB:5C:C7:AC:82:AE:3E:52:6A:67:C6:E1:A1:43:CF
Certificate issuer:       /CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
Certificate serial:       010D0C9F43285847D29F5B0792867D5A5B299100
Authority key identifier: 6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/1591f74c-28e6-3beb-a060-29508edef5ad.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     397423
IP address blocks:        23.173.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:5b:07:92:86:7d:5a:5b:29:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=154aa340-b965-4466-bf26-bd70f9dd02a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:77:3e:8f:a5:9a:de:8f:56:be:f3:66:1e:ba:
                    c7:af:39:14:86:08:ed:26:60:86:5f:d7:17:79:36:
                    86:61:a4:04:73:64:c7:8d:6e:56:fc:0a:8d:ca:1f:
                    6e:60:78:98:18:7d:80:dc:9f:e9:8a:c8:40:e1:e0:
                    fd:c0:2f:b5:f7:c6:dc:66:a2:83:86:c6:11:e2:a6:
                    86:4c:88:7b:93:59:1c:54:6e:06:72:87:95:92:4a:
                    cf:fb:b6:3b:cd:86:c2:d7:d8:16:f4:46:6c:51:7c:
                    e1:8a:bc:d5:ab:cf:d2:ab:1a:0b:c1:a4:3d:7f:7e:
                    01:c8:19:3c:27:b0:b8:75:dc:18:2e:c6:d2:07:c7:
                    45:49:4c:9a:d7:ab:1c:52:46:87:04:4b:2c:c2:08:
                    d9:7f:cb:8c:f9:13:4b:6b:11:5c:1a:4c:1e:79:c1:
                    ad:c5:8f:35:e6:01:13:c8:74:31:03:a9:4d:72:f0:
                    0e:f4:f2:6f:8e:88:30:f8:1a:e5:7e:16:78:43:e4:
                    25:ef:0c:25:1e:74:6c:ee:f0:04:a0:38:c9:92:f6:
                    a5:d3:02:17:55:38:3a:c0:86:82:d0:cf:2c:1d:42:
                    39:de:cb:7f:ff:aa:8c:7c:77:b5:0e:cf:c5:3f:3f:
                    20:24:f8:22:82:14:50:23:aa:22:76:54:c5:5a:c9:
                    3e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A8:91:98:5D:EB:5C:C7:AC:82:AE:3E:52:6A:67:C6:E1:A1:43:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/1591f74c-28e6-3beb-a060-29508edef5ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl

            X509v3 Authority Key Identifier:
                keyid:6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:cc:f2:3a:79:41:c4:3e:57:2e:39:bb:d2:67:56:9c:9d:03:
         0f:9d:54:4c:a1:11:26:a8:7e:2f:9f:f7:8b:ac:8a:80:e6:3d:
         50:40:fc:ce:4b:6e:60:64:73:f0:52:6e:ca:c0:2b:68:71:5f:
         fa:f0:7d:cf:c6:b3:e1:85:87:67:db:d7:b6:38:21:8b:03:e8:
         5a:6e:b9:8f:ee:06:c5:25:9a:99:a7:51:2d:30:3c:9f:58:ef:
         8c:67:9a:76:14:de:9c:1f:79:b2:bb:2e:b8:a3:c4:33:bc:bf:
         ad:34:75:66:21:c4:de:98:16:99:f3:4d:52:c7:ba:10:29:62:
         7e:aa:ad:ac:77:f0:75:48:9f:c4:d7:cf:2d:b2:ed:10:30:99:
         eb:05:df:42:e7:bd:47:e5:f4:19:58:18:5e:99:d3:40:cc:53:
         73:74:e6:e0:a0:13:0a:39:84:62:f2:1f:fa:a7:14:2d:8a:36:
         c9:ae:9c:57:b1:a5:c3:b4:5e:88:91:f8:1b:d2:5a:50:f6:5d:
         8a:a6:4d:2e:78:6c:23:2f:df:df:3a:73:42:af:17:d5:ce:f9:
         5b:da:fd:00:43:31:c5:f6:64:20:21:58:10:fd:f8:85:f3:61:
         6b:30:ab:40:86:20:2c:9d:eb:72:87:e3:8e:10:c1:00:95:ee:
         29:70:18:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:28 2024 by rpki-client on console-ams.rpki-client.org