Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/660fc943-b6d6-3832-851b-50a2c889df0e.roa
File:                     660fc943-b6d6-3832-851b-50a2c889df0e.roa (raw, json)
Hash identifier:          Gl22tle1BnnXCWKhtVqESOVyfYijGB3A4xr4nYV7EWE=
Subject key identifier:   3E:A3:30:48:5C:4F:91:13:99:A4:50:38:13:37:27:BE:66:72:06:EA
Certificate issuer:       /CN=e1029eed-2e88-4036-a7d9-ea093001f5cc
Certificate serial:       010D0C9F432858475A762DC36BACD072B8CC2160
Authority key identifier: 05:84:31:C0:C7:EB:DD:93:4A:82:99:B7:04:58:4B:4C:06:FD:54:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/660fc943-b6d6-3832-851b-50a2c889df0e.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     31898
IP address blocks:        23.190.16.0/24 maxlen: 24
                          2602:fc0f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/e1029eed-2e88-4036-a7d9-ea093001f5cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/e1029eed-2e88-4036-a7d9-ea093001f5cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:2d:c3:6b:ac:d0:72:b8:cc:21:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1029eed-2e88-4036-a7d9-ea093001f5cc
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=70b2be0c-b6cc-43ea-8345-362113699643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3d:e1:db:58:4d:59:b5:d2:b0:4c:cc:c2:a2:
                    df:0d:dc:75:1a:04:99:6a:f9:1c:09:28:d8:48:a7:
                    59:5f:d6:3b:a4:a9:f3:db:0b:fb:c2:12:4b:5f:b3:
                    89:96:84:cc:fe:2d:f7:b2:db:b1:bc:85:99:31:f0:
                    cd:51:80:d8:c1:87:d5:e3:a7:b6:bf:a7:22:9f:dd:
                    69:44:83:b3:ba:9f:dc:39:ee:12:99:30:92:9c:f3:
                    53:0d:63:eb:6a:15:a8:c6:e5:29:bc:01:10:54:e1:
                    65:4e:50:0e:c5:0d:ac:c8:a2:44:80:1f:d0:9e:af:
                    0e:58:df:6d:d2:0d:3b:97:66:8d:d0:20:2d:a9:eb:
                    12:c8:31:d8:df:7f:90:79:3e:16:7d:c3:e9:03:f9:
                    08:6e:c1:40:1c:ea:a2:03:8d:15:48:3c:1f:bd:19:
                    f0:4f:2d:6f:0e:42:7f:90:85:47:8a:82:1a:74:b6:
                    af:16:60:33:35:95:63:9b:60:a5:57:84:78:1a:a0:
                    65:04:85:d6:5d:e9:9e:97:b2:9e:54:73:7d:00:db:
                    20:8d:ca:40:8b:8e:b9:09:b9:c9:eb:c9:c8:72:82:
                    71:bb:2b:e8:18:b3:67:69:c7:75:34:5f:f6:33:91:
                    b6:15:53:45:63:f4:d5:38:1e:86:de:2d:f2:ae:10:
                    6b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A3:30:48:5C:4F:91:13:99:A4:50:38:13:37:27:BE:66:72:06:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/660fc943-b6d6-3832-851b-50a2c889df0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/e1029eed-2e88-4036-a7d9-ea093001f5cc.crl

            X509v3 Authority Key Identifier:
                keyid:05:84:31:C0:C7:EB:DD:93:4A:82:99:B7:04:58:4B:4C:06:FD:54:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.16.0/24
                IPv6:
                  2602:fc0f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:79:82:0d:b3:a7:43:78:15:79:c8:c5:7e:a5:76:1e:e9:70:
         8a:ad:04:87:54:61:cd:47:91:64:7e:e3:1f:fa:0a:54:31:b6:
         4e:48:dd:ee:96:9a:b6:43:6e:52:f1:16:ef:12:8f:c3:a5:83:
         8e:ca:fb:1f:1e:50:38:98:73:75:89:4f:fd:59:7b:4d:41:03:
         66:39:98:c3:c7:9c:0b:7b:26:66:5c:a4:60:71:f8:ad:5a:7f:
         11:95:6e:15:7d:00:ed:e7:0f:0b:15:e9:11:ba:0e:e6:28:99:
         cc:45:7c:0f:0d:b3:31:ab:d2:a5:b0:53:3e:ff:30:8c:13:4d:
         38:4b:8c:57:63:66:e2:c3:4d:be:ae:f6:95:d2:4a:40:ce:f0:
         96:19:20:75:2e:10:92:16:6b:de:0b:04:3e:05:04:89:ff:b7:
         dd:41:c7:fb:0c:5c:e9:48:22:eb:05:a5:26:82:3b:4a:59:d5:
         b7:ee:27:71:55:8f:59:91:d2:9d:94:08:55:21:fb:b0:8d:19:
         dc:2e:01:d0:f7:0d:57:89:21:75:06:86:a9:11:b4:f0:b7:0c:
         02:2d:64:72:e2:dd:24:ae:0c:a1:2f:c9:aa:5c:1d:03:34:43:
         10:da:05:32:82:2a:72:18:da:69:35:d9:72:5c:86:aa:6f:e1:
         2b:97:69:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:21:33 2024 by rpki-client on console-ams.rpki-client.org