Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/61c8de2e-29b9-3a37-b006-4f6f481eb688.roa
File:                     61c8de2e-29b9-3a37-b006-4f6f481eb688.roa (raw, json)
Hash identifier:          sdBJlj5Hydj9Uvaet3xrotmuF3ay9zYd08XJ7cVbyww=
Subject key identifier:   26:EF:FB:AE:E4:D8:82:20:25:0D:88:F9:68:B3:7D:BF:01:49:4B:D3
Certificate issuer:       /CN=e04d8190-ec33-4551-9197-d06746d399d0
Certificate serial:       010D0C9F43285846DC1343087A6881E316C52E10
Authority key identifier: 02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/61c8de2e-29b9-3a37-b006-4f6f481eb688.roa
Signing time:             Tue 13 Aug 2024 06:29:40 +0000
ROA not before:           Tue 13 Aug 2024 06:29:40 +0000
ROA not after:            Mon 11 Nov 2024 07:29:40 +0000
asID:                     26658
IP address blocks:        23.249.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:dc:13:43:08:7a:68:81:e3:16:c5:2e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04d8190-ec33-4551-9197-d06746d399d0
        Validity
            Not Before: Aug 13 06:29:40 2024 GMT
            Not After : Nov 11 07:29:40 2024 GMT
        Subject: CN=63e4eee4-e356-4fa4-b6d5-86672703fc6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:02:8a:65:b5:97:31:6a:14:c4:bd:07:c8:96:
                    e2:65:19:b1:5b:2c:41:2e:bc:39:cc:8e:c8:92:1d:
                    13:67:1d:b0:75:3e:69:2b:bc:d8:51:33:20:77:68:
                    09:b7:62:70:c5:95:22:74:45:78:6d:12:22:1d:b5:
                    e9:93:a6:42:8a:c8:9c:a3:99:05:61:48:2f:86:56:
                    78:99:ce:8a:66:7a:92:88:94:19:0d:44:ff:15:96:
                    e6:f1:81:ea:63:3b:e7:b7:9a:e4:2e:e4:8b:f1:71:
                    f8:70:38:4b:ea:e0:91:55:a4:0c:61:09:4f:ea:d7:
                    f0:e2:6c:e1:34:66:56:5e:54:6f:94:7c:08:35:80:
                    31:48:f2:7f:18:62:bb:5e:57:71:a1:e0:f7:7f:0c:
                    65:4f:d0:d9:1e:d9:0e:be:34:47:eb:40:c2:25:3f:
                    cb:a6:cf:1d:13:4b:07:90:ae:50:24:14:54:8a:d1:
                    85:9a:b6:37:bb:39:34:d8:24:97:28:b2:28:50:86:
                    3d:3b:ec:f5:88:79:35:42:51:06:8c:3d:ef:ab:34:
                    2b:6b:14:cf:e9:84:32:f5:9c:b3:11:19:05:0c:0a:
                    70:72:d8:9c:b4:a9:22:d3:58:cc:54:5c:54:86:ca:
                    71:05:93:03:4a:1c:d8:4a:03:bb:2d:f7:d7:6d:e2:
                    44:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EF:FB:AE:E4:D8:82:20:25:0D:88:F9:68:B3:7D:BF:01:49:4B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/61c8de2e-29b9-3a37-b006-4f6f481eb688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl

            X509v3 Authority Key Identifier:
                keyid:02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:f4:40:3c:47:45:38:4b:d9:3d:40:3b:ce:ed:b9:11:de:10:
         c6:c0:76:d0:14:b0:dd:7d:31:2a:30:95:2a:91:f1:89:b1:d0:
         d0:cc:90:6d:bd:29:36:b1:16:e7:eb:5f:4d:dd:bb:b3:4c:fe:
         c8:c2:e7:22:eb:d7:3a:3d:23:22:e7:b1:4b:fa:6d:ee:e8:59:
         be:33:68:0f:5c:e5:b5:e1:35:5f:bf:ce:26:34:27:fa:af:6c:
         a8:b6:58:3c:03:8f:b5:14:9f:81:82:46:70:e9:ea:9c:e5:52:
         24:e7:7c:fc:1c:52:b4:eb:f7:1c:69:99:b8:f2:e0:a6:ac:4f:
         94:0d:01:b3:a3:3d:5a:f5:f8:08:5f:70:9a:d0:60:9a:71:dc:
         fc:44:28:d6:4a:78:8d:8f:57:30:c0:b8:79:db:ef:05:e8:1d:
         d4:12:d1:47:27:ae:e3:07:8d:e7:cb:df:cf:ca:d5:46:bc:25:
         ef:61:fd:84:7a:6e:da:51:08:8c:5a:da:0d:1f:f2:c6:1a:b3:
         ab:38:29:01:a1:bc:bc:bb:80:15:ff:e9:2a:4d:d2:ae:7e:77:
         cc:df:f9:0a:34:f4:8e:ed:00:b5:c3:5e:3f:4e:cb:bb:7e:d8:
         26:b4:22:84:9b:93:83:26:38:ed:bc:1c:5d:12:fa:fa:7e:15:
         c0:bc:ca:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 18:23:04 2024 by rpki-client on console-fra.rpki-client.org