Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/7f168c5b-c14e-3b1e-918a-0069b8ca7e04.roa
File:                     7f168c5b-c14e-3b1e-918a-0069b8ca7e04.roa (raw, json)
Hash identifier:          HajHmCfDU0P/Gx76b2kAmGb7zHMfvrcOQTmPbWT2bVw=
Subject key identifier:   70:4B:F4:F2:82:C0:17:36:45:F5:AC:1D:9D:59:9F:32:74:D7:23:C5
Certificate issuer:       /CN=bf246bfa-4298-4264-af85-3fb2845207f8
Certificate serial:       010D0C9F432858474B1B54F47B4521FA60ED3F40
Authority key identifier: 0C:B2:02:68:95:CB:E4:C6:84:98:68:D4:B4:1A:BB:BD:65:6D:BF:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/7f168c5b-c14e-3b1e-918a-0069b8ca7e04.roa
Signing time:             Sun 22 Sep 2024 01:00:32 +0000
ROA not before:           Sun 22 Sep 2024 01:00:32 +0000
ROA not after:            Sat 21 Dec 2024 02:00:32 +0000
asID:                     395886
IP address blocks:        23.135.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/bf246bfa-4298-4264-af85-3fb2845207f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/bf246bfa-4298-4264-af85-3fb2845207f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4b:1b:54:f4:7b:45:21:fa:60:ed:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf246bfa-4298-4264-af85-3fb2845207f8
        Validity
            Not Before: Sep 22 01:00:32 2024 GMT
            Not After : Dec 21 02:00:32 2024 GMT
        Subject: CN=af693a71-23c3-4511-80bb-364c090cb42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ab:79:fd:56:c2:9f:e6:ac:fc:e2:ba:f4:cc:
                    f1:f4:f5:fb:37:29:34:bf:9c:93:8b:ea:64:66:f6:
                    33:59:dd:d7:42:a5:38:9f:db:3a:c9:ab:ec:ad:30:
                    d3:e7:18:f5:8d:b2:a8:b0:73:8f:19:19:a3:ef:55:
                    11:8b:86:c1:ac:d5:d8:63:fb:21:7a:b0:9a:ee:45:
                    fa:4e:7b:ca:c7:92:03:79:e9:3b:f6:b0:a5:6b:83:
                    50:59:59:ea:8b:5c:3d:19:4b:f4:ed:d2:b6:1c:3b:
                    d4:cc:f7:8d:d8:73:a3:e8:2f:6c:ed:a0:eb:02:ec:
                    d5:c1:10:34:b1:51:89:19:cd:21:b5:e4:6e:87:78:
                    09:bb:b5:56:f8:d7:d4:df:52:b1:3a:14:68:a2:9a:
                    51:7f:ef:8c:c2:86:2b:8d:d7:7c:c2:29:f8:e2:26:
                    8c:f5:fc:81:b1:7c:2c:80:f5:3f:37:43:65:bc:86:
                    1c:27:1e:a5:fc:d5:36:3a:fd:1d:b6:02:4b:0a:90:
                    72:33:b9:be:2e:69:15:cc:78:a5:ce:8e:3f:40:10:
                    42:b4:dd:66:18:6f:88:bc:a3:97:ed:ce:10:41:9d:
                    fa:2d:dc:c8:39:26:05:1a:5f:84:33:88:17:44:16:
                    0d:96:ff:b4:62:1d:e7:27:1b:ce:7c:07:8a:f4:8b:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4B:F4:F2:82:C0:17:36:45:F5:AC:1D:9D:59:9F:32:74:D7:23:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/7f168c5b-c14e-3b1e-918a-0069b8ca7e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/bf246bfa-4298-4264-af85-3fb2845207f8.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B2:02:68:95:CB:E4:C6:84:98:68:D4:B4:1A:BB:BD:65:6D:BF:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ed:5a:bf:46:5b:73:2a:ed:7f:4c:32:f5:8d:7f:d4:f1:91:
         64:09:2d:23:b4:84:2e:88:15:d1:be:24:98:4b:e2:b2:0d:4f:
         0d:78:4b:f8:69:23:ac:8e:fb:df:3c:88:03:be:21:d5:41:5e:
         4c:dc:d3:7a:39:0a:b4:93:a6:d5:de:3c:c0:4f:e3:ee:28:9d:
         ae:af:82:9b:08:40:2b:b8:b3:c7:60:f7:41:9f:9b:99:13:2e:
         b3:fe:84:b2:b5:9c:a7:0f:21:1c:82:95:df:e1:76:07:78:37:
         8a:d9:66:8b:cc:72:42:92:fb:14:6d:c9:d6:bf:39:21:58:77:
         7c:39:ef:9f:7d:0a:11:c8:05:c2:bd:ab:bd:fa:7b:b3:37:55:
         87:58:78:bc:ea:ca:b1:da:67:58:a1:08:04:96:f9:04:db:d9:
         ba:03:96:96:3a:2e:73:f2:60:44:23:d9:40:14:6d:e3:75:41:
         97:46:73:a4:03:d4:93:0d:47:08:e5:44:de:9e:51:31:93:7a:
         9e:e7:bd:81:c6:fb:b6:0a:e2:7f:84:1a:04:fd:f4:10:04:13:
         de:0c:30:fd:16:2c:c4:51:32:31:8d:a3:09:69:b5:b0:61:cd:
         98:b0:b5:7a:0e:a2:83:d4:22:73:e7:56:c4:2a:bc:2d:cc:34:
         89:80:88:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:59 2024 by rpki-client on console-ams.rpki-client.org