Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ea6729c8-1432-34c9-8142-e82d79df9657.roa
File:                     ea6729c8-1432-34c9-8142-e82d79df9657.roa (raw, json)
Hash identifier:          wZUQ2ckg0WAZg+usFt7jcPWpIeshJG5zSvDHMw508Qs=
Subject key identifier:   0E:E8:98:41:AF:37:56:35:5B:3A:31:84:65:8A:83:E8:AE:0E:A4:53
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285847E35F7207959AD3E3D8236740
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ea6729c8-1432-34c9-8142-e82d79df9657.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     11232
IP address blocks:        24.56.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:72:07:95:9a:d3:e3:d8:23:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=caed77c8-5fdd-4191-b6c4-270ef3dd81b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d5:05:b1:22:3c:b5:7d:bd:40:e9:c2:3e:94:
                    8a:be:7e:e9:cd:3e:37:95:0c:1f:00:36:8b:82:72:
                    1d:41:e8:03:09:1d:83:74:d0:d1:7e:0b:b7:0c:e5:
                    ad:17:a2:93:94:26:34:1b:6c:de:1b:aa:c7:96:25:
                    42:6f:10:25:91:d2:63:f9:b9:1c:5b:85:44:1b:fb:
                    fb:53:85:f7:2c:80:57:6a:b3:cb:d7:9a:bc:32:e1:
                    1e:80:20:a1:5a:a8:e0:10:35:22:d0:98:1c:41:8b:
                    9b:ad:d6:28:fa:0a:80:c8:fe:43:d8:fe:9a:55:ab:
                    61:ff:c8:ad:d4:2b:e4:3c:b4:14:0b:2a:f5:90:00:
                    dd:d1:a0:16:66:51:6c:16:20:cd:7b:ee:fa:24:a6:
                    59:cb:fb:1c:97:1e:35:96:c8:ad:97:ed:ed:5d:47:
                    fa:49:6b:79:d7:29:ff:f5:c4:82:91:95:b5:1f:c5:
                    d8:1b:cc:f3:46:10:87:7d:1a:9e:5e:62:97:1c:65:
                    6a:1c:5a:82:c7:66:68:2b:b9:9f:80:eb:e4:35:d3:
                    fb:fd:5a:f7:e4:a0:57:ee:70:70:dd:e9:b5:0e:76:
                    a8:9b:de:8a:7c:9b:71:33:ce:6e:1f:96:0c:47:14:
                    0d:22:91:32:5f:3e:07:e9:a6:43:2c:2b:64:1a:21:
                    79:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E8:98:41:AF:37:56:35:5B:3A:31:84:65:8A:83:E8:AE:0E:A4:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ea6729c8-1432-34c9-8142-e82d79df9657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.56.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:8d:a8:61:42:e6:c0:db:82:89:4f:d8:6c:71:6c:ef:cc:95:
         2e:d0:fa:91:03:8f:51:6e:34:58:c1:93:88:92:e0:98:a5:69:
         61:e2:a2:31:87:df:a6:65:bf:36:8d:d1:e9:7e:7d:3f:8b:07:
         5f:7a:fb:fc:a3:c3:e8:29:2a:7f:1b:4f:66:82:2f:f7:df:f6:
         5b:8a:70:a3:25:20:47:c7:94:31:4d:3f:94:88:f8:fc:4b:7c:
         e1:9c:6e:7d:80:97:50:30:e5:b2:3b:be:c3:f5:17:8d:7b:32:
         0d:46:78:99:63:19:29:52:17:1c:09:e4:77:b7:49:f1:e4:2b:
         85:e4:89:ce:c0:4b:dc:05:1d:a5:a8:ff:7a:42:6b:55:85:83:
         d2:91:c8:0d:c4:bb:f7:52:35:d9:83:da:c5:d5:3c:7f:d8:4e:
         36:92:2c:c8:23:44:f1:05:bd:e7:20:7e:3c:c6:62:2b:b9:37:
         88:32:dc:19:a5:ae:9a:9e:7f:b1:c9:11:09:94:31:2f:25:c0:
         21:45:d3:21:11:91:64:49:7f:a8:92:0e:91:c5:28:37:49:f4:
         80:bd:ee:87:d4:63:32:d0:31:9c:79:f1:27:fb:9e:2c:f8:21:
         68:88:79:e4:a1:57:4c:86:96:55:66:10:9e:24:9d:8a:db:15:
         99:70:3e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:04 2024 by rpki-client on console-fra.rpki-client.org