Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/b69dba44-b52d-3b7d-b73a-0f59964dcdad.roa
File:                     b69dba44-b52d-3b7d-b73a-0f59964dcdad.roa (raw, json)
Hash identifier:          YX3zTvW0nlNxzGTjVpXckuG61QIR2VhV6BG9KUOtX68=
Subject key identifier:   94:03:B7:D0:AC:1D:0E:29:A6:DF:14:DC:53:71:64:16:3C:36:6F:12
Certificate issuer:       /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
Certificate serial:       010D0C9F4328584785BBB050D35C3FBD8040CC30
Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/b69dba44-b52d-3b7d-b73a-0f59964dcdad.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     14618
IP address blocks:        23.165.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:b0:50:d3:5c:3f:bd:80:40:cc:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=2edeb2c6-d4fa-441c-aabf-1231e6c208bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0e:f4:b0:60:e5:75:1e:f6:0e:39:8f:ae:a7:
                    6d:c8:9f:be:c8:a9:77:b6:ae:f9:86:5f:df:a5:bd:
                    45:2f:cd:f8:f4:46:48:85:fb:d3:de:ab:cb:ad:22:
                    ce:f8:b2:d0:f3:ea:d7:33:24:f7:86:cc:dd:56:95:
                    7a:9f:15:ee:88:d5:c0:72:1a:52:6c:51:8a:91:c7:
                    ae:97:21:f0:b8:7c:ed:68:df:f5:5f:5b:59:13:fe:
                    65:59:96:56:ab:07:06:c7:6e:28:6c:55:03:ee:ac:
                    c8:dd:ef:e6:e9:83:23:1c:02:e5:92:ed:e8:95:44:
                    90:6a:47:a4:2d:2a:ea:37:1c:c6:38:67:c3:50:6c:
                    3d:b7:97:2b:b6:4a:2e:2e:1c:8e:28:de:6f:7b:09:
                    90:5a:73:a5:fb:39:18:06:27:12:b0:6c:47:1d:ab:
                    5f:cc:bd:c9:1b:fd:93:56:8d:01:b8:0f:7b:f1:6a:
                    c6:54:48:12:a4:d4:de:f4:c6:34:12:ca:6c:3f:eb:
                    7e:a5:cf:e4:44:3f:4f:fc:50:ca:b7:18:58:42:59:
                    6f:6b:c0:c3:fa:63:93:a2:d6:45:26:28:5b:59:6e:
                    ab:bb:1f:f1:97:38:92:89:0c:65:ff:a0:fd:46:55:
                    42:68:28:17:55:6f:07:5d:f9:9d:d3:6d:c0:d6:a7:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:03:B7:D0:AC:1D:0E:29:A6:DF:14:DC:53:71:64:16:3C:36:6F:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/b69dba44-b52d-3b7d-b73a-0f59964dcdad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:42:e7:ab:17:8b:d1:ee:32:aa:c1:11:2c:a3:3a:e9:d0:01:
         49:fa:1b:7a:a2:08:7e:e2:8a:d1:52:94:5a:dc:ab:02:86:26:
         f2:1a:f5:fa:a6:e2:f8:ea:00:3e:e4:32:96:52:bd:0a:27:98:
         2f:94:db:84:06:f3:0e:c9:29:5b:c7:6b:58:08:cb:85:57:9f:
         44:c9:c6:0e:61:11:a6:6f:2f:6e:42:15:28:8c:e3:d2:8d:07:
         38:7a:fb:af:39:43:8b:ff:10:4e:88:c2:f3:38:2b:79:a0:fc:
         8e:fa:ab:32:05:42:06:2c:70:6b:72:b6:5f:e7:17:c9:dc:04:
         6c:fa:4b:6e:57:b2:44:e2:3d:b9:ee:85:a4:40:d6:38:28:db:
         43:f0:44:4e:cf:d0:ca:00:62:f6:42:e8:90:7b:ed:d7:e2:81:
         ea:e7:9a:22:3c:0b:1e:a6:c1:5f:3e:2a:95:98:82:6f:96:e5:
         77:50:ad:d5:6a:ac:9e:20:8c:82:7e:27:8d:63:0f:0d:10:2b:
         68:68:64:c2:49:56:11:b5:c0:6e:c1:77:9b:e3:20:59:5f:cc:
         53:05:a6:a0:bb:03:fa:2c:3c:c2:5c:c5:21:68:90:5d:f1:0a:
         d1:36:13:fc:0f:3e:8c:2b:4c:8f:ca:5c:74:df:a0:6b:e0:72:
         6e:c8:c9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:10 2024 by rpki-client on console-ams.rpki-client.org