Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/1674c815-a319-33a0-90ef-e2ce8a54a99a.roa
File:                     1674c815-a319-33a0-90ef-e2ce8a54a99a.roa (raw, json)
Hash identifier:          CL1rtT7hh8DJRp/eqXkMhK3hL6Op4GQSWQQ5zmmc8ZE=
Subject key identifier:   46:F6:81:CE:7C:B4:0A:DC:D9:21:62:8B:97:DB:65:4D:42:93:74:B4
Certificate issuer:       /CN=e04d8190-ec33-4551-9197-d06746d399d0
Certificate serial:       010D0C9F43285847BC2C11FEC7248529C4405800
Authority key identifier: 02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/1674c815-a319-33a0-90ef-e2ce8a54a99a.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     26658
IP address blocks:        23.249.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:11:fe:c7:24:85:29:c4:40:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04d8190-ec33-4551-9197-d06746d399d0
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=00cbacc8-b064-45bf-b191-357b61b73cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:52:03:15:e8:2d:eb:c6:c1:c7:3d:f0:98:
                    89:9a:87:7d:54:6d:d9:ce:e7:86:f0:32:8c:bb:b0:
                    c4:f1:75:e6:ff:eb:93:7b:7f:3a:62:e6:26:c5:74:
                    55:63:07:5d:a5:d4:dc:ae:76:c5:41:69:0c:68:79:
                    78:1d:53:84:d6:77:1b:2c:4f:c6:fc:cc:e3:d7:44:
                    85:84:66:40:ac:02:10:93:ac:69:d6:ea:f3:b9:9e:
                    f3:5e:d5:63:9d:2c:94:6b:1d:aa:63:34:39:41:fb:
                    9d:17:14:d4:9a:3e:69:bd:50:f3:97:81:8b:de:70:
                    fb:07:19:02:48:7f:ec:90:69:e6:75:9b:da:fe:3f:
                    fd:1a:11:97:ac:61:fd:a8:f3:92:fe:ae:e6:f9:fe:
                    89:29:d7:69:7d:b4:80:de:cb:50:ad:89:1f:da:71:
                    60:74:ca:2e:02:e0:b1:b8:c5:4e:fe:03:77:70:13:
                    f7:56:e7:1e:ff:34:8a:ac:30:8b:ec:83:3d:f0:9e:
                    64:34:62:4d:98:80:24:1b:09:ef:10:16:ad:69:84:
                    4c:cf:a8:eb:12:d5:29:75:eb:af:e5:0c:0b:cd:36:
                    a2:48:19:1d:21:4c:20:8f:45:b0:6b:33:74:09:d5:
                    5f:fd:24:a2:5b:66:97:75:f3:82:43:50:d9:99:1e:
                    11:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F6:81:CE:7C:B4:0A:DC:D9:21:62:8B:97:DB:65:4D:42:93:74:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/1674c815-a319-33a0-90ef-e2ce8a54a99a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl

            X509v3 Authority Key Identifier:
                keyid:02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:89:52:81:c3:59:d7:ac:84:03:c3:1b:00:5c:4c:e1:7f:24:
         97:a2:9f:f7:26:e0:ad:b8:76:17:d4:b5:14:8d:f6:39:e0:54:
         7e:88:ea:e2:63:89:ed:17:ad:92:ea:ff:af:8f:1d:50:dc:34:
         49:24:42:4c:b2:63:71:75:aa:fc:58:ff:f1:41:47:fb:fc:89:
         57:b5:68:b4:69:f0:9e:42:a2:80:cd:99:7b:21:34:e7:c6:88:
         31:f1:a0:cc:a9:a5:0b:7a:05:fd:1a:d7:f7:64:14:ce:dc:64:
         09:b4:6b:38:2a:69:0e:e1:f0:84:c9:9e:df:ee:b4:73:b0:b2:
         5a:60:43:bc:f8:ad:60:45:75:da:4b:c1:4c:ee:2a:6f:f9:b1:
         7c:87:bd:c5:f0:9b:24:b0:78:5b:59:a4:76:67:0d:20:83:f8:
         7f:3f:80:ce:ea:d6:e2:d1:e6:22:49:af:3c:72:b3:7d:8d:06:
         38:e1:5c:eb:f6:78:b6:20:e8:55:8e:52:fb:d5:50:d0:af:2f:
         b5:6d:ba:69:72:5f:17:9b:d0:02:96:44:c0:25:f8:31:08:e0:
         f6:9a:68:1e:e9:14:5c:2f:15:07:87:b1:d7:73:ac:4a:c6:80:
         06:82:c9:82:57:88:90:b7:82:84:77:b1:65:c1:2e:00:c1:3c:
         06:15:3d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:33 2024 by rpki-client on console-fra.rpki-client.org