Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/a9422bc5-e3dc-3d3d-af95-2c46e7106556.roa
File:                     a9422bc5-e3dc-3d3d-af95-2c46e7106556.roa (raw, json)
Hash identifier:          dcAStvoETh5+Yz33bO9ZVXd03QbctI8LF5xsNH2Rnx4=
Subject key identifier:   38:7B:88:38:C8:03:91:84:B8:C4:35:C1:B7:37:9B:BA:60:9C:50:AF
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858483B5013C90A2C2C052E911000
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/a9422bc5-e3dc-3d3d-af95-2c46e7106556.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     62563
IP address blocks:        23.174.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:13:c9:0a:2c:2c:05:2e:91:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=40218f2a-995a-4f7f-a245-d7abf41f34a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:18:61:55:08:28:9d:86:a0:99:25:52:e6:14:
                    0d:d0:d8:07:e5:bc:b6:ce:22:23:19:3d:70:11:b1:
                    5f:88:ff:f5:8c:43:82:49:ff:18:09:66:ce:cd:5f:
                    a2:dd:9d:59:10:42:9f:c7:f5:aa:c2:65:d1:d7:51:
                    a6:ce:dd:d8:e6:39:8d:9d:15:44:47:9a:e7:25:42:
                    0f:cc:cb:07:59:7d:87:bc:71:69:eb:3a:e9:d2:71:
                    32:f8:55:c4:b3:9b:0c:0a:12:4a:50:65:39:64:11:
                    16:93:53:af:3f:83:58:f9:80:c7:43:1f:88:bb:82:
                    49:da:7a:f2:36:c0:a8:16:14:ca:c6:21:4a:d8:8b:
                    4e:36:78:1c:b7:ef:24:07:77:6d:cc:10:74:9e:d9:
                    47:4c:ef:b2:d7:7e:2c:8c:9c:3f:00:9e:1a:01:5a:
                    d9:e4:63:75:5e:00:78:05:66:f7:69:9f:9c:2d:75:
                    28:b1:29:c6:7c:a2:d1:6c:1f:c4:c1:bc:96:35:e6:
                    b8:4c:8e:f8:92:a7:f2:9f:68:93:1f:5e:f7:5e:ef:
                    66:ba:39:08:c0:f9:9d:13:41:ee:eb:5e:6f:5e:a0:
                    c4:d6:0e:e5:ab:65:10:44:34:17:85:8f:f4:5f:4a:
                    a4:54:44:fd:72:8d:7d:cf:79:90:1b:84:56:2a:19:
                    eb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7B:88:38:C8:03:91:84:B8:C4:35:C1:B7:37:9B:BA:60:9C:50:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/a9422bc5-e3dc-3d3d-af95-2c46e7106556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:2b:32:80:26:9c:61:23:ca:07:dc:4c:e2:f8:bb:32:85:17:
         27:d6:6f:b1:8b:c7:4d:9f:a4:7b:17:19:2a:e4:02:58:e7:87:
         ec:fe:59:19:ca:35:c0:5c:57:bd:71:e0:12:de:10:21:c8:d0:
         96:7e:93:94:ac:c9:8a:52:b9:08:7f:df:aa:3b:ab:1c:e5:ec:
         e8:68:f5:6c:5c:0a:c5:93:1f:5d:f9:e7:2c:55:ea:b4:1b:fe:
         51:39:54:57:65:42:64:f9:3b:a4:f8:7c:aa:57:17:c8:52:16:
         92:b0:5c:b9:06:ae:06:b9:56:5a:8a:e9:ad:3c:b5:32:be:ea:
         e3:a0:d2:de:26:05:87:b5:87:8c:7a:38:9b:44:c7:1a:21:1d:
         fb:86:8b:de:de:ab:fb:7d:e3:0b:1a:ed:07:f9:eb:3c:a9:a8:
         b8:49:4b:76:ed:2c:cd:d3:70:46:4f:90:97:b6:51:3b:da:37:
         6d:2b:70:2b:d1:ab:28:9f:1c:2c:c5:f7:6c:33:d5:07:9d:a9:
         ef:8e:58:38:36:20:c3:19:24:9c:49:6b:ae:b4:37:5c:4f:78:
         df:2b:83:ed:72:e7:13:0d:96:e0:bb:9a:1a:b6:ad:a5:a1:ba:
         38:8a:d5:2f:6f:0b:e2:01:d5:54:c9:ba:97:52:a9:64:bc:48:
         c1:b7:f5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 9 15:26:37 2025 by rpki-client