Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/77efcf0c-d256-3988-b1d9-86cfee38f155.roa
File:                     77efcf0c-d256-3988-b1d9-86cfee38f155.roa (raw, json)
Hash identifier:          MljDDp13fy7tdwOkvEjoqeBbDZ1KBLctaWc/J09vQ6k=
Subject key identifier:   1F:26:D7:68:D9:36:D3:5E:37:9D:4B:32:F9:F5:DC:DE:60:A2:61:FA
Certificate issuer:       /CN=41fd7014-304a-4567-8e40-00c686067021
Certificate serial:       010D0C9F432858477F837528F637CB2631DEDEC0
Authority key identifier: BF:02:DB:00:C4:CC:5B:8C:84:38:99:A1:A1:3C:21:B4:11:26:EC:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/77efcf0c-d256-3988-b1d9-86cfee38f155.roa
Signing time:             Thu 10 Oct 2024 19:32:29 +0000
ROA not before:           Thu 10 Oct 2024 19:32:29 +0000
ROA not after:            Wed 08 Jan 2025 20:32:29 +0000
asID:                     31788
IP address blocks:        23.191.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/41fd7014-304a-4567-8e40-00c686067021.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/41fd7014-304a-4567-8e40-00c686067021.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7f:83:75:28:f6:37:cb:26:31:de:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41fd7014-304a-4567-8e40-00c686067021
        Validity
            Not Before: Oct 10 19:32:29 2024 GMT
            Not After : Jan  8 20:32:29 2025 GMT
        Subject: CN=e43bd14b-7d21-4b12-bc5f-ca6817909252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:ae:02:04:6e:e1:43:b5:45:fc:2b:86:85:
                    4d:50:8e:12:13:a7:30:8e:b4:85:42:54:bd:89:0c:
                    e1:7c:81:48:f6:6e:85:e2:c1:54:9b:4d:76:02:4d:
                    0c:76:04:90:6e:53:ed:fd:2d:4f:eb:d8:97:16:c8:
                    31:1e:21:b6:58:c1:15:ef:17:e1:98:9e:a0:9a:d3:
                    3b:97:21:71:b3:ea:97:0c:10:e8:f4:60:72:e5:14:
                    84:0c:07:6e:90:e0:49:43:2d:72:ec:6c:fe:97:c6:
                    6f:a6:58:9c:b7:ea:bf:e2:29:72:3c:1e:68:a4:d8:
                    e4:f1:3f:07:85:75:2e:df:b5:b6:5e:50:42:de:ea:
                    5c:d0:f1:c4:61:44:8b:61:d3:4e:b6:84:3c:87:e7:
                    9c:3e:71:b7:81:41:3b:5f:92:c1:79:ec:51:b9:2b:
                    15:63:2f:bd:e7:05:07:9d:66:f8:df:05:e3:7d:ed:
                    93:0d:a6:00:d5:c4:db:31:30:da:b2:86:a6:77:bd:
                    ec:db:f8:4b:fc:51:dc:3b:c8:1f:0e:72:4a:da:0b:
                    00:8a:66:71:fb:ac:38:e7:9b:56:fc:14:ce:41:ec:
                    f0:93:3c:c5:dc:c1:62:6b:2a:4a:bb:b6:7c:63:f3:
                    49:1e:3f:3c:ff:9e:54:6a:c4:87:67:be:86:50:92:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:26:D7:68:D9:36:D3:5E:37:9D:4B:32:F9:F5:DC:DE:60:A2:61:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/77efcf0c-d256-3988-b1d9-86cfee38f155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/41fd7014-304a-4567-8e40-00c686067021.crl

            X509v3 Authority Key Identifier:
                keyid:BF:02:DB:00:C4:CC:5B:8C:84:38:99:A1:A1:3C:21:B4:11:26:EC:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:cb:4d:7c:24:f5:ad:b1:b6:79:7e:8a:1e:ea:56:d5:b3:c0:
         2a:53:bf:f4:59:3d:6c:0d:a1:c5:5f:9f:c5:8e:fb:4d:b5:9c:
         43:40:13:00:6c:d0:cc:ce:57:5c:57:f4:59:52:f2:be:78:d0:
         be:01:a3:32:a1:b8:72:9d:6a:6f:7e:d0:1e:e8:23:0e:89:a4:
         40:48:d4:71:a9:88:de:7c:a4:02:47:8c:e4:34:c5:94:20:d5:
         7b:83:84:07:7d:28:5a:b9:8b:3c:e1:26:3a:01:1d:93:02:b1:
         f3:2e:4e:a8:bb:ae:6e:e7:23:00:22:f4:38:ee:70:51:30:94:
         93:6d:d0:06:d6:73:55:54:32:5c:b8:40:52:36:8a:40:3d:f0:
         73:bb:b7:f9:96:c5:eb:aa:2c:3d:8a:52:5e:35:41:4b:a8:78:
         4c:33:c7:fa:77:86:3a:1f:b1:24:09:63:a1:f1:4d:57:4d:9a:
         aa:af:86:2f:9c:c6:19:85:17:16:e0:56:74:64:90:46:a5:b6:
         20:94:aa:51:89:40:03:15:74:49:6c:06:ac:af:62:59:eb:54:
         40:e3:2b:f8:d1:a8:de:ce:57:9f:26:11:25:07:87:88:8b:3f:
         d3:5c:41:36:d9:68:a0:1d:55:b3:d6:9d:ab:41:ce:cb:e9:8e:
         b3:ef:c7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:19 2024 by rpki-client on console-ams.rpki-client.org