Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa
File:                     0545c8d8-2be5-3872-8fa1-55668d1f1902.roa (raw, json)
Hash identifier:          1WK2ppx2Kl9F6fBEdoBo49Xg9J2395PehNwPLzuPIXg=
Subject key identifier:   C3:FB:70:F1:13:08:12:38:F1:6B:50:B7:30:11:AB:DD:3F:C3:96:C2
Certificate issuer:       /CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7
Certificate serial:       010D0C9F4328584733F8A4A440101EF7C80F3CC0
Authority key identifier: 74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa
Signing time:             Fri 13 Sep 2024 18:07:10 +0000
ROA not before:           Fri 13 Sep 2024 18:07:10 +0000
ROA not after:            Thu 12 Dec 2024 19:07:10 +0000
asID:                     40205
IP address blocks:        23.189.216.0/24 maxlen: 24
                          2620:cd:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:f8:a4:a4:40:10:1e:f7:c8:0f:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7
        Validity
            Not Before: Sep 13 18:07:10 2024 GMT
            Not After : Dec 12 19:07:10 2024 GMT
        Subject: CN=df7b730d-0e82-4368-b0ee-344b7cbefb9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d7:76:a9:c6:b0:38:51:ce:c0:98:f0:df:9e:
                    5f:c5:8e:98:5a:68:9a:71:1c:e7:01:e3:62:fc:47:
                    d5:07:76:6d:72:d6:1f:aa:05:a9:94:fb:63:0f:ca:
                    c0:d3:74:95:b6:ca:8f:79:69:ab:4c:d4:b6:7c:1f:
                    21:84:de:4c:63:8a:22:14:09:57:43:68:6d:d0:8f:
                    e4:af:06:03:20:05:98:8d:c5:04:ce:49:2e:3b:15:
                    9c:8e:54:69:e1:a5:20:b6:56:ec:1a:1d:f2:5c:04:
                    2e:1f:a3:67:5a:48:7f:c6:f7:84:0a:a8:18:67:4e:
                    cd:d0:ea:6d:2d:f7:b6:2a:3e:88:3d:50:71:24:72:
                    b5:23:b3:c2:d5:8a:78:35:3a:a6:13:3a:00:00:bb:
                    cd:ee:0e:9f:de:48:b7:96:a7:24:b0:e1:67:6e:58:
                    43:c6:9d:86:2f:37:89:9f:79:62:95:b9:d6:75:79:
                    ed:30:1d:6d:87:84:df:b1:b7:ee:8f:11:64:8b:2a:
                    a0:25:ac:76:19:84:b5:46:55:fb:bc:5c:99:65:c8:
                    59:e3:b5:f1:bb:8c:2b:ca:29:5e:be:23:e8:29:4c:
                    3b:c7:56:c2:30:cc:f9:41:2b:08:76:53:a1:f6:ee:
                    f2:cf:b1:f2:b0:f2:99:38:0c:c7:04:39:c4:09:be:
                    93:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FB:70:F1:13:08:12:38:F1:6B:50:B7:30:11:AB:DD:3F:C3:96:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/0545c8d8-2be5-3872-8fa1-55668d1f1902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl

            X509v3 Authority Key Identifier:
                keyid:74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.216.0/24
                IPv6:
                  2620:cd:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:1f:40:d7:12:9f:4c:79:f1:d6:f3:9f:da:61:a5:26:f1:bd:
         4c:50:06:52:36:d8:b7:ac:39:4e:25:14:20:fc:16:38:db:20:
         0f:51:79:4b:77:cf:78:71:d8:72:80:a5:70:0c:7e:cc:d4:f5:
         d5:dd:3e:34:33:ac:15:d2:94:98:f7:3e:bf:68:b3:0b:f3:d7:
         3a:ce:45:79:e1:91:19:b9:23:8b:54:51:e8:f0:17:2d:67:10:
         be:45:c4:5d:b1:9b:71:64:9c:6d:62:ee:2c:1e:99:22:c9:63:
         2b:4d:5f:ab:82:c1:ce:53:bc:7f:e6:c5:bb:9e:1d:66:44:83:
         24:13:73:2d:e7:4c:fd:7e:54:06:27:48:00:1a:3a:d1:cf:bd:
         ff:e5:da:62:24:86:7f:d6:0c:0b:c3:c0:5b:fe:d8:92:48:bf:
         55:52:4b:6a:5e:55:85:41:cf:bd:e3:12:3a:91:ec:d1:68:09:
         ec:c8:33:c7:c7:98:28:3d:de:bd:6b:5a:64:84:aa:9c:37:03:
         05:ed:14:82:65:e1:35:bf:ba:d1:f5:c7:1c:12:0d:c1:a1:27:
         29:10:ec:e6:40:5b:11:55:03:78:be:13:5e:b8:ba:d3:46:6b:
         9c:ea:ca:6b:47:8d:44:10:5d:9a:62:40:d6:8b:fe:7b:be:26:
         35:e9:48:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:10 2024 by rpki-client on console-fra.rpki-client.org