Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/24ba4a3b-6997-383d-8894-c07b096200c9.roa
File:                     24ba4a3b-6997-383d-8894-c07b096200c9.roa (raw, json)
Hash identifier:          e+dyiJBkrwjVAaU2nUpYkK4VvaEQp688mGh9T5Q5Ruo=
Subject key identifier:   5C:DF:5A:1C:97:CA:B5:34:11:C8:B7:67:39:4A:7A:A7:5B:BB:9F:10
Certificate issuer:       /CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d
Certificate serial:       010D0C9F432858476B363A4817614F10555D00C0
Authority key identifier: CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/24ba4a3b-6997-383d-8894-c07b096200c9.roa
Signing time:             Thu 03 Oct 2024 13:00:41 +0000
ROA not before:           Thu 03 Oct 2024 13:00:41 +0000
ROA not after:            Wed 01 Jan 2025 14:00:41 +0000
asID:                     400932
IP address blocks:        23.171.184.0/24 maxlen: 24
                          2602:f97b::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:36:3a:48:17:61:4f:10:55:5d:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d
        Validity
            Not Before: Oct  3 13:00:41 2024 GMT
            Not After : Jan  1 14:00:41 2025 GMT
        Subject: CN=f86c54f9-1565-45cd-9df6-e5e8a67425b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c7:15:43:6a:94:96:3d:2a:0f:df:d6:1c:9e:
                    63:28:1b:cd:2c:08:3f:4d:a9:6d:47:b2:f7:75:55:
                    06:71:a7:e3:df:66:23:3b:72:0d:2b:b8:52:33:46:
                    8e:e4:04:11:6c:62:2a:75:13:a6:53:ee:01:17:bf:
                    1b:43:5e:ab:44:bf:e4:31:14:bc:ad:64:60:76:d2:
                    d0:31:1e:c9:56:ba:04:39:92:56:1f:07:2b:9c:df:
                    b4:28:0f:f3:6f:67:26:6b:1e:d8:2b:a5:be:a3:a1:
                    ba:88:53:54:6e:a2:6f:dd:51:16:d7:eb:40:89:c2:
                    96:2d:03:a9:6e:3b:26:58:9c:00:ed:d2:93:82:90:
                    46:ac:c3:75:7b:5f:aa:75:74:95:17:1f:de:c1:97:
                    7a:e4:19:3d:72:51:29:0c:c3:a4:c2:62:74:69:86:
                    18:e2:6f:d4:75:15:74:c1:fa:f1:f7:30:18:74:f4:
                    cd:bd:27:2d:99:d8:5e:05:80:1e:a6:a6:62:85:41:
                    b9:c3:9b:70:c9:a2:ee:2a:09:7e:97:43:df:47:b5:
                    67:78:c3:69:6e:a0:13:ab:36:e3:84:40:31:2d:22:
                    3a:b4:f2:8c:e5:91:ae:16:aa:1b:eb:bb:5e:e8:28:
                    ee:53:30:ce:f7:c6:66:48:b5:fc:88:f1:aa:0a:f8:
                    0b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DF:5A:1C:97:CA:B5:34:11:C8:B7:67:39:4A:7A:A7:5B:BB:9F:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/24ba4a3b-6997-383d-8894-c07b096200c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.crl

            X509v3 Authority Key Identifier:
                keyid:CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.184.0/24
                IPv6:
                  2602:f97b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:18:f3:23:34:96:fb:55:dd:50:38:8b:40:85:ab:f0:5f:31:
         69:b7:43:c3:0c:97:ab:56:f2:c7:a6:44:a9:5d:d1:a1:10:82:
         80:ac:04:d7:bc:9a:2e:e4:5a:e8:41:68:64:6d:7f:c6:d2:4d:
         58:d4:81:3b:2b:8b:06:4f:ac:4a:f3:df:6d:9d:2a:68:83:40:
         b6:61:f9:42:5e:ff:94:9d:03:8d:38:24:67:8f:d6:23:5b:7f:
         91:d2:56:75:0a:b6:71:36:f0:f5:8d:15:49:c7:0e:88:d0:02:
         75:98:75:b6:23:3a:76:1a:ea:d3:8e:8b:b1:49:a7:35:46:63:
         78:50:74:ad:ac:87:17:5d:9c:b4:d6:c5:f7:88:59:1f:d3:2d:
         b9:73:8a:ab:83:86:ab:19:2c:27:bb:97:74:45:4f:b9:e3:18:
         1e:03:29:a6:bf:7d:f9:76:5f:75:2e:a2:18:da:fb:6d:9e:c5:
         16:c6:d8:96:19:e3:da:bb:fb:c3:7f:2b:85:28:05:aa:e2:f1:
         e1:55:31:df:67:9e:e6:c8:bf:cc:04:38:5f:a6:b5:91:a0:ec:
         77:aa:53:07:94:a9:92:6c:4e:1c:1e:fa:a5:6e:97:32:e1:03:
         5b:3c:a4:58:39:e6:44:d3:8a:f5:ce:0a:c9:75:3e:e4:8f:4c:
         6f:fd:ce:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:46 2024 by rpki-client on console-ams.rpki-client.org