Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4ca0fb0e-603a-3c70-926c-431077a6023b.roa
File:                     4ca0fb0e-603a-3c70-926c-431077a6023b.roa (raw, json)
Hash identifier:          3V75gDsuaIB4emtrR87k/DO2H39oj/HC/3Q9T2zDUDg=
Subject key identifier:   3E:F2:4C:48:3B:2F:D8:94:37:A0:F9:81:F2:64:0E:B2:D0:D0:43:60
Certificate issuer:       /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial:       010D0C9F432858477230E71D9C90CEE987A87C64
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4ca0fb0e-603a-3c70-926c-431077a6023b.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     13780
IP address blocks:        23.128.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:e7:1d:9c:90:ce:e9:87:a8:7c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=9622e5df-f2a2-4e22-a8b8-9585ac5d8428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:68:cd:8e:64:df:41:38:38:55:7d:cd:50:3a:
                    a6:5d:1f:4a:ea:9e:b3:41:1f:ef:df:17:3a:36:02:
                    19:4a:6d:9f:17:d6:9b:d1:e9:d2:c2:b1:5d:89:68:
                    6b:0d:a7:00:3d:ae:9d:6b:7b:39:44:3a:6c:e8:e4:
                    9c:97:5c:f8:ab:73:16:ee:dc:d4:3b:74:7f:06:d4:
                    f5:9e:14:16:8d:ae:4c:78:37:41:e6:55:c6:41:bc:
                    6f:46:45:36:d5:ad:ea:45:3b:6c:b4:f7:75:dc:e2:
                    9c:51:f5:d0:db:56:e1:1d:2a:54:ce:f4:64:41:37:
                    3a:cd:c4:a3:2d:b2:f9:81:fe:64:10:31:49:8d:eb:
                    7b:c7:0f:fe:a9:ef:b4:79:95:e5:8f:a7:f8:94:70:
                    db:2b:80:7d:2d:9e:d2:7e:b2:49:21:ee:3c:e9:d9:
                    dc:88:6c:81:37:70:fe:be:e9:94:e6:51:26:5f:24:
                    8f:22:77:4c:b6:8a:4b:e3:dc:5d:d5:92:95:5f:04:
                    66:83:03:8e:98:99:4c:f1:32:55:3e:22:ca:25:1d:
                    92:3c:13:d6:d6:d3:c3:33:e4:93:79:24:af:34:0e:
                    de:f3:ce:3c:5f:92:c5:4c:8c:7d:6b:59:f5:56:c2:
                    ea:f5:04:84:ab:66:f2:e3:0a:60:d1:b6:74:06:cb:
                    b5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F2:4C:48:3B:2F:D8:94:37:A0:F9:81:F2:64:0E:B2:D0:D0:43:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4ca0fb0e-603a-3c70-926c-431077a6023b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl

            X509v3 Authority Key Identifier:
                keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:be:aa:b4:a4:9b:e2:f1:52:71:60:64:d2:f3:47:84:93:99:
         98:49:81:bc:c4:c3:6d:ef:14:95:b0:fd:48:d8:a8:93:a4:ea:
         b6:55:1f:ac:2c:d2:17:55:c4:09:e0:a0:c9:89:dc:34:d9:8e:
         11:fe:99:f1:c5:0b:f0:13:c5:77:ff:1f:99:b3:b5:ac:36:12:
         1b:9a:01:3f:70:e8:1a:47:4b:6e:25:da:c6:64:6e:e0:7e:0d:
         62:e6:06:4d:36:69:25:50:7a:ee:f4:13:4f:a8:d1:38:18:b2:
         f4:0e:58:ed:dc:e7:ec:12:ab:56:a5:b3:e4:f2:c5:23:43:ad:
         39:31:5c:fe:f8:fc:0c:21:91:68:b6:d0:14:3b:d5:34:ed:08:
         d9:04:3d:3f:5e:42:0b:f4:3e:e9:5e:fa:ab:84:e6:4e:80:d7:
         35:59:b1:ca:98:b2:07:8b:1e:31:dc:2b:fc:42:a7:11:2a:5b:
         75:f1:6e:92:06:d2:4f:5f:aa:36:c8:11:9f:75:82:35:d4:14:
         0f:f3:00:fb:f5:bc:4f:a1:df:7c:54:3f:c3:dc:cd:b6:ca:ea:
         b5:a2:b4:f9:f7:fd:0a:8d:18:6c:b4:04:e3:8a:6e:d6:88:63:
         d6:5e:fa:4b:f8:20:f8:33:be:ae:18:a0:36:96:28:51:f0:d0:
         43:4f:f9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:29 2024 by rpki-client on console-ams.rpki-client.org