Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/7017deb8-bb92-3642-93d0-67e0704f3ba3.roa
File:                     7017deb8-bb92-3642-93d0-67e0704f3ba3.roa (raw, json)
Hash identifier:          7GFVjoPlVy/BGoMF/rr5lQOPoeZCSYBm/ueP1hCsoBs=
Subject key identifier:   B1:2B:2F:C0:49:0D:EC:B0:79:F8:73:E7:F4:6E:58:D2:5A:22:43:32
Certificate issuer:       /CN=ef944392-b528-43c2-9abf-e4543229ae2d
Certificate serial:       010D0C9F432858472829D5A7E6E687BBF5928800
Authority key identifier: D4:42:D8:A2:9F:91:A1:39:11:A3:D6:02:E4:F4:E4:3F:46:CD:E9:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/7017deb8-bb92-3642-93d0-67e0704f3ba3.roa
Signing time:             Mon 09 Sep 2024 12:36:35 +0000
ROA not before:           Mon 09 Sep 2024 12:36:35 +0000
ROA not after:            Sun 08 Dec 2024 13:36:35 +0000
asID:                     7029
IP address blocks:        23.188.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/ef944392-b528-43c2-9abf-e4543229ae2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/ef944392-b528-43c2-9abf-e4543229ae2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:29:d5:a7:e6:e6:87:bb:f5:92:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef944392-b528-43c2-9abf-e4543229ae2d
        Validity
            Not Before: Sep  9 12:36:35 2024 GMT
            Not After : Dec  8 13:36:35 2024 GMT
        Subject: CN=2abfb1a3-0f2f-4979-a6f0-9c3c5eb86665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:88:bc:e2:d3:5a:46:a2:08:45:76:0a:93:23:
                    5d:25:16:70:87:ea:65:10:a7:12:bb:f1:d4:1e:60:
                    df:ca:23:33:c0:c8:d4:5c:f4:34:fa:5a:81:c3:34:
                    a1:2b:6c:3c:22:bc:97:a6:fa:72:6c:e8:79:f6:ff:
                    0c:c0:5b:4f:1a:eb:0a:d7:08:4c:89:2f:03:28:13:
                    b8:dd:19:bf:d6:44:56:70:63:d7:f5:1c:7b:08:ff:
                    85:32:75:b8:57:2f:2c:a8:a7:ab:74:8b:a1:4d:1f:
                    c4:b2:e8:74:75:a4:f3:9d:03:7b:42:74:68:7d:8f:
                    4d:b7:d7:ea:a3:7a:91:09:8a:b0:cd:33:ee:a2:df:
                    2e:25:c8:11:2f:a6:53:8f:d6:87:62:83:58:be:33:
                    0e:5e:6b:0f:fd:5a:cb:9f:2d:4f:f6:23:90:5d:41:
                    ce:e5:b4:cc:1b:0c:c1:ec:a3:07:a9:90:be:a8:dc:
                    31:ae:5f:4f:f3:05:f6:5a:7d:ad:9d:4c:99:bc:3e:
                    9d:7d:ed:0b:df:dc:0b:e2:c1:c6:b9:bc:e4:44:fd:
                    24:59:4b:03:a6:7d:38:bb:87:b3:05:7d:7d:9b:55:
                    2c:c4:09:33:03:a1:dd:58:05:2a:4c:09:34:ad:ed:
                    f0:34:52:8d:1e:72:11:a6:c2:1c:37:f0:3e:b7:eb:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2B:2F:C0:49:0D:EC:B0:79:F8:73:E7:F4:6E:58:D2:5A:22:43:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/7017deb8-bb92-3642-93d0-67e0704f3ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d/ef944392-b528-43c2-9abf-e4543229ae2d.crl

            X509v3 Authority Key Identifier:
                keyid:D4:42:D8:A2:9F:91:A1:39:11:A3:D6:02:E4:F4:E4:3F:46:CD:E9:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef944392-b528-43c2-9abf-e4543229ae2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:8a:35:cc:54:47:c0:15:77:fc:2c:c0:80:6d:81:44:51:39:
         38:45:70:d8:9c:ef:de:a9:55:60:2d:dc:5b:25:b9:93:eb:95:
         1a:6e:d6:54:ea:2e:ac:03:71:57:97:6c:ba:c7:1b:7a:ae:9c:
         f4:34:a4:c6:09:02:71:08:6a:e6:0e:70:51:c9:49:ec:85:0b:
         98:55:f6:c8:de:d4:68:d9:55:2b:7c:c5:4b:05:da:ef:0a:8b:
         51:b1:32:78:dd:e3:51:12:28:f5:4b:46:0d:d1:e0:6c:68:07:
         3e:1f:76:31:b6:55:a4:a1:c1:e7:ba:98:ee:a0:ee:1d:85:ea:
         ee:13:98:de:b6:e3:e8:98:54:51:a1:d7:aa:ae:63:f7:f5:25:
         47:a0:8a:39:7a:de:2a:54:59:9e:ef:30:af:fd:fa:b0:f8:fa:
         87:f0:56:c7:fc:bf:dd:77:2a:12:b7:bc:f0:72:c8:45:53:5e:
         0c:95:e6:b6:a9:49:27:a6:5e:f8:9f:c1:8f:fa:f3:b5:0c:3b:
         48:3a:0b:c1:c5:bb:bd:24:c3:eb:5a:5d:22:79:54:d6:66:f2:
         2b:0f:74:26:0f:b4:61:2a:66:30:db:67:9a:88:cf:71:21:8b:
         35:4e:a5:3d:00:58:47:89:2b:10:ac:c5:5c:e8:6c:66:c3:54:
         5e:3e:c0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:29 2024 by rpki-client on console-ams.rpki-client.org