Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/b1689224-3522-322c-b540-085659c0b310.roa
File:                     b1689224-3522-322c-b540-085659c0b310.roa (raw, json)
Hash identifier:          +rqfvZ+eYDwJKzSaL6wEAV8GxacAx14euPE4wZM/C7k=
Subject key identifier:   2B:22:C5:4E:CC:F1:BC:7C:CE:3B:15:22:55:4D:2A:AA:D7:97:DF:E2
Certificate issuer:       /CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Certificate serial:       010D0C9F43285847A73BDD2A9D4AB0CC451EBE00
Authority key identifier: 9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/b1689224-3522-322c-b540-085659c0b310.roa
Signing time:             Fri 25 Oct 2024 01:00:31 +0000
ROA not before:           Fri 25 Oct 2024 01:00:31 +0000
ROA not after:            Thu 23 Jan 2025 02:00:31 +0000
asID:                     19740
IP address blocks:        23.173.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:3b:dd:2a:9d:4a:b0:cc:45:1e:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816b4d34-3880-4b72-b786-365fbdec8ba0
        Validity
            Not Before: Oct 25 01:00:31 2024 GMT
            Not After : Jan 23 02:00:31 2025 GMT
        Subject: CN=e13c7b3e-5298-4512-9861-86e48bb96d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f9:64:16:a3:a8:98:fd:fd:c3:a6:1e:c9:dd:
                    6b:02:63:a4:3c:a4:8e:c7:6b:be:0d:3f:21:18:8e:
                    56:d5:5b:1d:19:69:e7:6a:94:28:ae:71:6e:57:ea:
                    76:c9:f5:0f:f5:1e:63:2d:f2:d3:b2:a3:ad:41:5d:
                    98:a3:bf:e0:9b:f8:80:7d:f9:c5:fe:43:f3:7a:ef:
                    be:6b:df:6d:68:81:e9:09:a4:65:72:cc:69:52:03:
                    c2:a4:16:c0:61:62:a4:1b:9e:98:3e:16:34:d3:41:
                    4f:31:72:09:c5:5c:ea:8c:4e:2a:e7:5c:58:f8:c3:
                    8e:2c:65:f3:36:9c:e7:d6:6c:97:00:86:a1:94:0d:
                    51:7c:8b:72:32:77:3e:e2:8a:4c:97:06:7e:7d:b1:
                    98:d3:ad:0b:64:15:c9:b3:3b:63:d5:1e:c5:8d:ac:
                    b1:1e:08:4c:0c:a5:6e:77:34:23:a4:b9:d2:71:cf:
                    6c:a0:37:9b:ab:dd:9a:17:1a:b6:8e:c8:80:be:65:
                    87:05:56:a7:bb:53:57:e3:aa:a4:8d:7d:e6:8f:3a:
                    25:00:b1:4c:fa:27:d2:74:f2:ab:68:38:f9:15:38:
                    c8:32:40:c7:cc:1e:7c:a3:93:c5:69:74:6f:d8:b8:
                    74:bc:08:1d:e9:73:a4:ee:79:dd:e3:6c:66:72:69:
                    72:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:22:C5:4E:CC:F1:BC:7C:CE:3B:15:22:55:4D:2A:AA:D7:97:DF:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/b1689224-3522-322c-b540-085659c0b310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b5:a4:51:e7:e2:21:5e:48:5e:83:9a:9b:14:81:d8:c3:b0:
         45:38:91:b5:63:be:14:c6:e2:4a:50:d6:70:72:95:ec:47:f8:
         63:fc:61:f9:db:84:04:6e:dd:cf:c1:c5:78:0c:2e:11:c3:b8:
         62:b4:5f:cf:a9:07:aa:b0:cf:1b:b0:22:2c:21:97:e0:c1:b4:
         cb:bb:fb:e0:d5:7e:0d:f3:49:cf:92:c5:92:24:ec:58:7c:c4:
         1c:51:79:4f:08:05:f9:c8:24:12:07:5f:86:0e:5b:e0:aa:89:
         74:f7:87:c3:23:93:39:e8:00:29:8a:41:ba:a6:40:75:81:02:
         c3:15:62:b8:2b:8f:85:ef:60:6c:79:85:8f:e9:8c:d5:46:4c:
         14:be:db:ea:2a:35:d2:ee:70:bd:30:94:3d:17:f9:4d:56:c6:
         ab:f8:4e:4a:81:8d:b2:4e:e1:56:48:20:0d:77:37:3f:7f:49:
         7f:65:96:2b:19:94:e5:d5:9f:e9:ca:b0:38:76:37:26:f1:e8:
         10:39:16:bf:81:81:fd:41:3d:cb:af:c2:30:b0:af:b8:6f:35:
         92:86:69:82:2d:87:1f:8d:0e:c0:ec:4f:1a:7f:a2:79:ae:da:
         08:1f:87:49:d3:e0:05:d9:83:e3:73:3e:60:0b:64:36:56:de:
         a9:be:7e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:46 2024 by rpki-client on console-ams.rpki-client.org