Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214/ee53c556-765e-35c9-8966-5082a9f224c3.roa
File:                     ee53c556-765e-35c9-8966-5082a9f224c3.roa (raw, json)
Hash identifier:          GfE3eQ0DJnhomf2IdF0MlTzaXDeC9Molw3/4Jk7uSlU=
Subject key identifier:   71:64:FF:C9:83:5F:DD:78:9C:F6:39:36:FB:2D:90:AC:4E:94:75:85
Certificate issuer:       /CN=59155035-b41f-4dae-a0c7-c24cb714c214
Certificate serial:       010D0C9F4328584728307D5673A12777E8900680
Authority key identifier: AA:B1:0E:2F:23:C7:08:ED:61:85:36:9E:78:0A:4C:F8:A1:C7:A1:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214/ee53c556-765e-35c9-8966-5082a9f224c3.roa
Signing time:             Mon 09 Sep 2024 12:49:59 +0000
ROA not before:           Mon 09 Sep 2024 12:49:59 +0000
ROA not after:            Sun 08 Dec 2024 13:49:59 +0000
asID:                     7029
IP address blocks:        23.187.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214/59155035-b41f-4dae-a0c7-c24cb714c214.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214/59155035-b41f-4dae-a0c7-c24cb714c214.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:30:7d:56:73:a1:27:77:e8:90:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59155035-b41f-4dae-a0c7-c24cb714c214
        Validity
            Not Before: Sep  9 12:49:59 2024 GMT
            Not After : Dec  8 13:49:59 2024 GMT
        Subject: CN=9d4f9928-b88f-41b9-acfd-615309cbc932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:61:11:4e:74:50:85:c8:7c:71:e9:4c:a2:
                    86:67:6e:fe:a3:8e:39:f7:07:20:a9:ec:5b:b5:20:
                    69:0d:73:0f:09:19:bc:83:1c:f1:3e:9a:64:ac:6f:
                    6b:71:e4:41:7d:28:e7:ae:95:ba:1f:7c:50:20:04:
                    35:13:14:87:dd:71:0b:28:d4:14:43:40:27:61:b2:
                    6f:e4:63:67:88:00:1c:75:1a:e0:ef:16:be:f5:bc:
                    5c:77:4c:44:36:67:c2:fd:d0:fa:58:ae:e2:4b:96:
                    1e:f0:71:e9:33:fb:cb:dc:b4:75:a6:ec:da:ff:48:
                    83:02:f2:21:db:1b:b5:e5:50:f0:a4:85:36:f2:63:
                    e3:4e:ff:db:ee:31:d3:2d:2e:fe:ce:a5:50:9c:71:
                    e8:04:72:59:ab:3a:97:df:6b:b8:15:b2:d3:f7:a8:
                    97:15:c7:df:e1:04:eb:a9:60:2b:c1:47:2b:73:c5:
                    29:6b:6a:34:2e:44:0f:87:47:2c:34:af:f9:b4:68:
                    c1:13:9b:fc:e1:4e:37:35:d7:b4:f6:4b:b4:1c:e2:
                    85:43:8a:06:1c:3f:b6:d4:48:cb:e1:d9:d6:b2:18:
                    26:9e:49:99:4a:f4:8c:3e:57:6c:00:8a:77:34:fe:
                    99:d4:7a:79:14:a5:4e:d3:a3:4f:a2:a1:46:12:be:
                    39:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:64:FF:C9:83:5F:DD:78:9C:F6:39:36:FB:2D:90:AC:4E:94:75:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214/ee53c556-765e-35c9-8966-5082a9f224c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214/59155035-b41f-4dae-a0c7-c24cb714c214.crl

            X509v3 Authority Key Identifier:
                keyid:AA:B1:0E:2F:23:C7:08:ED:61:85:36:9E:78:0A:4C:F8:A1:C7:A1:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:3c:e4:0c:85:01:40:ad:91:ad:7d:7f:db:13:3d:7a:fb:
         88:fc:1f:f2:11:31:df:87:15:b5:b1:cb:b1:ff:f1:8f:15:c9:
         7d:40:d4:7e:91:98:4b:08:17:10:70:d2:d1:22:3c:66:00:64:
         5d:af:63:05:c1:9b:38:04:ac:7b:16:d4:23:eb:4e:5b:e3:df:
         d4:79:0b:0b:c5:b4:90:34:ed:fb:a8:cc:ac:8e:36:66:66:90:
         d8:96:da:6d:d4:c2:79:c2:21:06:4a:f8:df:90:b8:51:7b:8f:
         7f:b0:44:53:49:56:32:53:f3:c5:2f:c4:49:ef:6c:9c:4f:05:
         29:20:f4:d9:cc:d2:3f:0b:ff:2f:ae:91:ae:4d:52:73:40:eb:
         d6:cb:51:45:9b:5f:65:a4:24:0f:a5:2f:05:68:10:cf:b4:c5:
         98:d0:dc:e7:82:8a:68:7e:7b:3c:50:76:df:7f:e1:00:3e:85:
         5b:3e:6d:07:85:02:a2:4b:72:46:88:0c:d2:cb:f5:52:04:9f:
         b5:86:dd:63:4d:22:9f:2c:0c:22:ec:fe:43:2c:be:ca:6c:42:
         d5:86:44:a5:99:1c:fb:0c:33:ba:38:94:54:7a:98:5d:a1:b5:
         2c:bc:60:94:cc:b3:10:d6:3c:25:b6:0a:84:bd:69:63:55:91:
         7b:8b:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:19 2024 by rpki-client on console-fra.rpki-client.org