Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/cb9a4e83-bcfc-3465-82bf-4111784123b0.roa
File:                     cb9a4e83-bcfc-3465-82bf-4111784123b0.roa (raw, json)
Hash identifier:          r0Q3Qj2YkoeKCLN8cNAZ4IWQWSnHw/mdyFDUC5lI2rs=
Subject key identifier:   4F:2C:4A:6A:43:C8:A0:BF:88:6E:A9:D3:97:86:58:2F:0C:B2:DA:F0
Certificate issuer:       /CN=fa1ef48c-319b-4888-9b6e-efede6d159ca
Certificate serial:       010D0C9F43285847075846CB990CF4B093C13940
Authority key identifier: EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/cb9a4e83-bcfc-3465-82bf-4111784123b0.roa
Signing time:             Wed 28 Aug 2024 18:28:28 +0000
ROA not before:           Wed 28 Aug 2024 18:28:28 +0000
ROA not after:            Tue 26 Nov 2024 19:28:28 +0000
asID:                     401323
IP address blocks:        23.187.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:07:58:46:cb:99:0c:f4:b0:93:c1:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1ef48c-319b-4888-9b6e-efede6d159ca
        Validity
            Not Before: Aug 28 18:28:28 2024 GMT
            Not After : Nov 26 19:28:28 2024 GMT
        Subject: CN=4be8b04f-14b6-4e9d-9df6-3011ef251856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:63:97:57:0f:4e:cf:1d:34:91:33:3e:b6:cb:
                    74:2f:b3:41:13:03:03:3d:0c:05:69:7a:7b:48:2e:
                    fc:cf:dd:2c:ea:49:9f:6d:f2:a3:6a:b7:24:e4:e9:
                    28:79:9c:32:67:22:61:36:ec:76:c5:ff:03:2e:4f:
                    31:06:d5:1d:9b:b3:26:cf:2d:bb:b7:e8:c5:43:af:
                    de:d7:4c:fc:dd:77:e8:e3:d7:c3:52:8e:b7:6b:66:
                    f2:1e:11:81:87:20:69:aa:92:d1:29:b8:19:ce:b9:
                    c9:1b:ba:15:4b:0e:f1:8a:6e:4d:47:56:89:e1:f8:
                    b1:f1:72:55:f6:06:80:88:8f:ad:e4:a8:9e:14:0c:
                    06:f2:aa:bf:6e:4d:55:25:b7:94:86:33:3a:bf:d1:
                    3d:01:02:8d:d2:23:19:f3:e0:5e:07:05:8f:d6:c8:
                    06:6c:a6:64:eb:97:35:bf:d8:91:87:9c:05:8a:82:
                    82:54:0e:d0:f8:46:14:fe:ca:76:db:c2:7e:13:27:
                    37:48:11:fc:d9:5d:eb:88:f8:c1:ac:6d:92:51:1a:
                    d8:35:3a:33:e9:ec:a5:fd:8a:fd:ae:be:a7:e8:f5:
                    0c:33:02:f3:64:9e:0b:91:6c:de:1e:ae:8c:5f:43:
                    89:9e:db:38:92:be:7b:9f:f4:97:51:d2:8f:be:a4:
                    a8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2C:4A:6A:43:C8:A0:BF:88:6E:A9:D3:97:86:58:2F:0C:B2:DA:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/cb9a4e83-bcfc-3465-82bf-4111784123b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.crl

            X509v3 Authority Key Identifier:
                keyid:EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:31:92:2d:b2:a0:1f:dd:02:43:97:c6:bb:c7:1d:25:02:9f:
         7a:fa:21:c6:fe:fd:7a:8c:96:b4:9e:35:20:ce:71:c0:96:e4:
         75:54:2c:3d:ec:3a:47:66:94:5a:2d:da:b9:db:b0:ae:07:2e:
         c3:37:c5:15:da:06:fc:e8:0d:ab:6b:bb:86:5d:fd:42:b2:90:
         ca:3d:cf:ec:86:cf:4e:c7:95:46:83:8a:46:4d:0c:c8:2e:22:
         00:4f:8b:4a:70:03:4c:1c:a7:a0:9b:a4:52:9d:43:91:1a:1e:
         91:d3:91:88:f3:1c:b3:31:fc:dc:71:ee:dd:97:6d:bf:50:e0:
         37:2f:83:61:6d:bf:56:f8:e4:0d:13:ac:fa:81:b3:73:6e:86:
         f3:88:be:7a:90:85:fd:0e:be:6f:d8:71:c6:40:c5:2d:92:e7:
         3f:37:b3:fa:2c:58:10:e0:e6:7e:e6:b7:71:a5:11:8a:90:73:
         00:cc:9f:03:d6:76:8b:43:55:f7:da:31:9a:a0:e9:f8:38:89:
         d8:ea:d9:da:4e:e2:5a:12:60:92:f9:f1:90:c0:95:e2:a6:ea:
         03:57:6e:f5:7d:96:cc:77:18:f0:e5:ee:19:92:9e:f1:1f:17:
         c1:eb:6f:59:d7:7c:2d:c3:fb:e6:5d:fc:e7:bb:04:9a:55:10:
         f4:c7:40:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:29 2024 by rpki-client on console-ams.rpki-client.org