Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/ccc222e8-ac06-3572-b1dc-370206cdb032.roa
File:                     ccc222e8-ac06-3572-b1dc-370206cdb032.roa (raw, json)
Hash identifier:          ubUUlntr3h3qX/n4MSbSnSWPsax9d6zAS7f7rf4lLlU=
Subject key identifier:   CC:21:55:34:BB:EF:38:F9:80:78:51:0A:65:CC:48:EC:7D:FE:D4:8F
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F4328584679BA0FC67317E8BE1884A480
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/ccc222e8-ac06-3572-b1dc-370206cdb032.roa
Signing time:             Tue 09 Jul 2024 01:00:25 +0000
ROA not before:           Tue 09 Jul 2024 01:00:25 +0000
ROA not after:            Mon 07 Oct 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        23.174.40.0/24 maxlen: 24
                          2607:9f40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:79:ba:0f:c6:73:17:e8:be:18:84:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: Jul  9 01:00:25 2024 GMT
            Not After : Oct  7 01:00:25 2024 GMT
        Subject: CN=1a091c81-2230-4bee-bc84-a7f23bab657a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8e:aa:8b:b4:f6:05:7b:3e:5a:29:60:40:12:
                    75:bc:3e:61:d5:4c:11:e2:2d:a2:2f:e6:b0:21:a9:
                    a8:84:01:f1:e4:4d:5d:e5:36:66:2f:b7:80:92:3d:
                    5d:fd:66:f1:02:e8:3e:06:6c:72:98:5e:c3:34:c0:
                    4e:91:9a:1d:35:d9:85:9d:d2:87:99:04:e4:fc:d7:
                    f7:48:ac:cc:2c:d5:80:13:5c:b6:96:c0:dd:34:8e:
                    07:b0:c1:94:02:5e:d1:f4:01:ef:1f:6b:67:36:7b:
                    1d:bb:ec:c1:b5:69:a2:9c:ad:0e:04:95:f2:35:51:
                    49:14:e2:97:9d:d4:7d:04:51:6c:76:b3:5a:6c:e0:
                    e3:5e:38:8d:c9:b3:41:a1:92:dd:9e:90:c9:9b:11:
                    db:73:3c:b8:c5:73:3d:49:db:93:f5:ef:65:cc:ac:
                    10:49:5e:52:6f:9e:ac:b8:ed:96:a6:b1:cf:ab:f7:
                    ef:81:bf:d4:0d:f1:19:73:3a:fa:7e:13:17:46:1b:
                    d2:f9:2c:0a:d6:db:33:1b:89:9a:75:86:24:0d:be:
                    9a:12:8a:0a:e2:2d:f9:71:e8:3f:e2:c0:fb:bb:2a:
                    18:91:e1:fa:cb:bd:aa:a6:00:27:4e:d7:87:79:a5:
                    d1:3e:c3:74:04:a7:56:ed:14:fe:b7:94:2e:64:d8:
                    96:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:21:55:34:BB:EF:38:F9:80:78:51:0A:65:CC:48:EC:7D:FE:D4:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/ccc222e8-ac06-3572-b1dc-370206cdb032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.40.0/24
                IPv6:
                  2607:9f40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:f8:6a:de:30:87:42:5d:e0:0f:bc:65:87:ff:30:1f:50:f2:
         80:87:17:7b:90:75:04:19:23:0e:48:f6:1a:2b:bb:bc:a8:2a:
         49:e8:97:b6:0c:aa:02:ef:0c:00:f7:48:c5:d8:9e:16:53:dc:
         47:81:93:81:58:8a:c4:40:7b:a1:1f:74:9a:81:ad:0c:f3:98:
         79:a5:80:2a:6b:6d:8b:d2:f0:78:67:cf:a2:5f:0b:8b:02:5b:
         53:67:36:03:63:21:f2:b6:42:f9:b2:92:45:49:a8:b7:18:2f:
         0b:f9:e2:76:44:2b:fb:7a:36:9a:6b:7e:2a:c6:84:3c:31:12:
         a9:91:a2:18:24:ca:9b:20:86:d6:b4:be:79:d1:ff:db:c6:8d:
         30:b7:0e:c2:8f:aa:5c:52:3b:87:bd:a5:3c:d6:26:ca:c1:f6:
         8f:d1:6f:8c:cf:ea:8b:a1:71:91:0b:fc:f0:6c:57:2a:73:b9:
         3f:f3:29:7b:aa:c3:b9:34:5d:49:b9:d1:7f:96:55:54:29:03:
         48:67:3d:30:56:3c:fd:d3:ea:22:45:88:9b:f4:15:0c:f6:c9:
         be:6b:50:a0:7f:a1:be:d7:c9:27:e5:e0:12:2c:89:ff:15:f6:
         e3:5c:38:38:04:99:6e:6a:cc:29:a4:ad:63:97:f1:59:10:1c:
         f3:a4:68:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:44:57 2024 by rpki-client on console-fra.rpki-client.org