Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/e12d0cdc-7339-36df-a400-7815bc0d9216.roa
File:                     e12d0cdc-7339-36df-a400-7815bc0d9216.roa (raw, json)
Hash identifier:          KaaDOzKi6eUk5WA5Q9/dJIhIzp3/68IioJs6WJqR4XE=
Subject key identifier:   53:26:2D:28:37:1E:6E:D6:24:81:8F:9E:D2:27:28:26:AD:95:67:8A
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F43285848388558A5AD9C27578B83FB80
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/e12d0cdc-7339-36df-a400-7815bc0d9216.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        23.174.40.0/24 maxlen: 24
                          2607:9f40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:58:a5:ad:9c:27:57:8b:83:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=3420dc23-fc75-4772-aebb-5e0c98eb6145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2b:9d:36:89:c6:d3:ed:41:38:44:0f:46:72:
                    96:ad:9b:25:9d:ff:b3:84:c9:57:84:09:c8:cb:5a:
                    95:6e:dd:f5:70:e4:f7:d9:dd:56:b7:11:b2:47:ab:
                    23:b6:3c:b9:9b:b5:8b:67:57:d5:f3:60:b5:52:39:
                    2b:93:be:a0:93:d6:97:9e:24:a6:98:9c:92:c8:cf:
                    6f:bc:75:ef:b5:06:08:a3:be:ff:06:78:d7:0d:6f:
                    d4:af:ba:b7:17:54:c8:f6:55:dc:c9:7c:fa:dd:fa:
                    0b:4a:31:a2:86:6a:be:07:4a:b3:b8:7e:9f:66:5a:
                    0e:b1:5c:35:33:51:9b:0f:7b:59:ce:d6:7e:c9:f2:
                    b7:40:c4:c1:2f:7a:48:37:22:d6:db:03:51:1d:5f:
                    54:46:49:f0:4f:0e:c5:8e:fc:73:7a:62:e1:e6:32:
                    4c:f0:16:7f:b2:26:91:cf:11:57:0d:ea:97:b4:3e:
                    98:96:bb:0b:d7:0d:c7:1f:03:2d:f9:35:34:e5:0d:
                    e6:60:db:cf:6f:dc:0c:05:3e:6f:ba:e0:e4:5f:2c:
                    98:25:58:03:b0:1d:36:f3:fc:4e:da:36:da:3a:9b:
                    f9:e2:55:a6:62:25:ae:72:c4:2a:4c:cd:b0:1c:51:
                    7a:d7:52:c2:46:5e:a6:11:2a:6a:eb:d4:47:ab:8d:
                    76:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:26:2D:28:37:1E:6E:D6:24:81:8F:9E:D2:27:28:26:AD:95:67:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/e12d0cdc-7339-36df-a400-7815bc0d9216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.40.0/24
                IPv6:
                  2607:9f40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:06:bc:fa:52:16:41:56:5f:ba:73:1c:3c:4d:cd:13:4a:3f:
         33:47:40:e4:6b:40:67:61:08:d2:52:df:2b:d7:20:27:3a:84:
         ae:4e:57:25:b7:f1:c9:db:4e:f8:ff:4d:47:58:4b:b6:bc:3c:
         92:19:a3:f3:fc:02:7e:4a:c2:b2:7e:85:49:45:c8:39:cd:23:
         eb:69:e7:8e:29:01:c5:9c:17:21:b4:d7:bf:d3:5a:c2:16:f5:
         a6:9c:ab:72:b0:b3:d9:23:d1:ca:0a:3e:82:df:f5:e4:ac:01:
         c1:3d:c6:d0:0c:6f:fd:2b:00:03:e3:bb:6d:15:f9:f2:87:ee:
         2e:2b:2b:1d:53:3f:98:3d:f1:75:00:41:e1:ed:af:3c:d1:67:
         5a:9a:75:ae:d7:4c:1e:be:7a:dc:a2:74:fb:ff:0e:35:bc:ed:
         7c:ab:3a:80:99:0b:88:b6:e7:f2:28:59:b5:45:5c:8b:27:7d:
         67:0e:2d:ab:9c:06:44:be:3d:4d:c7:29:af:41:bf:94:e8:af:
         ef:6f:f8:d4:cb:90:15:07:07:fc:f0:73:c7:2b:b1:76:f7:d1:
         36:53:05:2e:f7:77:5d:0c:7a:50:ea:73:4e:14:63:17:b7:30:
         bc:08:6e:c1:c1:77:77:90:1a:3b:b2:38:6d:ad:ae:bd:5a:2a:
         6e:56:94:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:45 2025 by rpki-client