Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/f8ba03ab-eb1d-305c-b6c7-6661ebf6f5a4.roa
File:                     f8ba03ab-eb1d-305c-b6c7-6661ebf6f5a4.roa (raw, json)
Hash identifier:          Mk+q7SynWdxUgYcbDmP/qx28GvY9HGMBLbhVHvKBwxM=
Subject key identifier:   C6:12:5D:EE:54:DE:5D:0B:6E:7D:2C:63:61:1A:D0:89:45:E7:03:5E
Certificate issuer:       /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
Certificate serial:       010D0C9F432858477AA5BFD2F86E7D99FAD5D680
Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/f8ba03ab-eb1d-305c-b6c7-6661ebf6f5a4.roa
Signing time:             Wed 09 Oct 2024 01:42:32 +0000
ROA not before:           Wed 09 Oct 2024 01:42:32 +0000
ROA not after:            Tue 07 Jan 2025 02:42:32 +0000
asID:                     401371
IP address blocks:        23.187.152.0/24 maxlen: 24
                          2602:f82d::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7a:a5:bf:d2:f8:6e:7d:99:fa:d5:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
        Validity
            Not Before: Oct  9 01:42:32 2024 GMT
            Not After : Jan  7 02:42:32 2025 GMT
        Subject: CN=393ae55b-00cb-4709-8c42-47b6389d251d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:16:6d:4e:a8:e4:be:23:32:1d:bd:3d:cd:93:
                    22:1d:32:19:51:e8:13:62:76:35:3f:b2:39:a7:09:
                    fa:11:81:a7:ae:dd:5d:2f:55:41:f2:25:18:54:ce:
                    3c:24:c9:f5:1f:fc:8c:4a:0d:3f:f9:f6:9d:00:5a:
                    23:28:ee:3e:73:17:90:94:b0:44:76:cd:5b:dc:de:
                    36:0b:c1:4f:38:83:f9:2e:ce:c7:76:d6:58:e2:09:
                    58:2a:ee:bd:f0:01:15:be:b3:7f:95:c2:ca:ce:d3:
                    0a:8c:b5:25:15:8f:cb:2a:29:77:bf:11:d5:7b:1e:
                    e6:fa:a1:7c:7b:2b:78:58:cb:11:60:8e:d8:f2:87:
                    7d:c8:d6:05:47:7e:74:c3:be:6f:9c:85:91:aa:11:
                    1d:9b:77:50:7a:2d:14:be:79:d2:dc:6d:ad:11:d0:
                    cd:bf:2c:4e:4f:70:4e:70:71:d6:23:bd:95:22:02:
                    1c:f9:37:0e:1b:57:20:b8:a4:0e:f2:27:9d:cf:c0:
                    a2:94:24:db:45:48:6a:40:f4:4a:41:70:a4:55:5d:
                    80:45:d5:fd:74:27:49:16:5f:52:08:42:cb:ee:4d:
                    b2:9a:32:9c:c6:ee:03:30:c1:d1:ac:b3:7a:14:3d:
                    ae:47:2e:16:6a:4b:91:56:05:09:fa:48:23:10:7c:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:12:5D:EE:54:DE:5D:0B:6E:7D:2C:63:61:1A:D0:89:45:E7:03:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/f8ba03ab-eb1d-305c-b6c7-6661ebf6f5a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.152.0/24
                IPv6:
                  2602:f82d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:79:00:96:95:dc:26:2a:0d:02:b5:6b:50:6d:7c:f5:4a:66:
         c0:f6:be:c1:58:66:41:f3:46:ec:cc:55:4b:23:16:34:8a:fd:
         97:09:c5:69:7c:6f:b8:0f:89:c8:b5:94:a5:07:3f:d8:c4:29:
         57:b7:c5:50:93:e8:fd:cb:2c:b3:7c:a3:06:e5:0b:fa:10:55:
         1a:8e:43:cf:07:60:8b:78:30:cb:cc:b3:d3:62:4e:a8:6c:57:
         d8:02:dd:1a:ed:78:88:8b:8b:69:8b:58:fa:7a:99:ba:1f:3e:
         4e:0c:8f:02:3d:a9:bd:18:28:06:bd:2c:d2:f9:12:e5:4b:81:
         49:4a:2f:9f:b8:e7:a0:21:28:74:38:79:e9:1b:9d:13:42:8a:
         68:f9:b9:70:0c:36:c9:dd:60:d8:48:c2:2c:63:5e:f8:e2:55:
         3f:9c:33:b1:c6:d9:ab:ba:79:ab:8f:93:b9:43:89:ba:09:63:
         a9:c7:b4:b7:57:05:6d:77:d9:47:e0:c9:ab:ed:61:96:09:e3:
         40:31:8d:07:30:f5:a6:fa:2b:77:63:c7:bc:33:ab:8a:c3:f1:
         3f:10:6c:73:2f:ab:34:8f:e6:15:68:3d:03:a2:82:72:1e:3d:
         16:21:f7:03:a2:ca:14:7e:c6:73:9d:f3:ae:20:db:f3:79:3c:
         13:11:07:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:19 2024 by rpki-client on console-ams.rpki-client.org