Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404/6c05e886-82cb-3923-b78a-e1f178a13410.roa
File:                     6c05e886-82cb-3923-b78a-e1f178a13410.roa (raw, json)
Hash identifier:          gWdSxgilcm5vRa0h9kY/MoVPwFmLgm25fb411FuYvmQ=
Subject key identifier:   4E:2D:3A:8A:90:8C:C3:72:14:B5:1C:27:9F:1B:51:39:19:E4:22:D8
Certificate issuer:       /CN=226199ff-c84a-4ff0-9ddd-8c19169b5404
Certificate serial:       010D0C9F432858477BF655F2EDE9BC67E53AAF40
Authority key identifier: 94:1E:71:4E:59:90:57:2C:22:6D:24:E8:76:DB:98:F3:A6:0F:05:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404/6c05e886-82cb-3923-b78a-e1f178a13410.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     401031
IP address blocks:        23.179.168.0/24 maxlen: 24
                          2602:f903::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404/226199ff-c84a-4ff0-9ddd-8c19169b5404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404/226199ff-c84a-4ff0-9ddd-8c19169b5404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:55:f2:ed:e9:bc:67:e5:3a:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226199ff-c84a-4ff0-9ddd-8c19169b5404
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=2416943c-926d-4a4f-a851-d6bf5da905d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3f:ad:90:8f:06:0d:50:d9:51:5d:c8:f5:b5:
                    17:a8:d3:50:93:db:37:e3:3e:04:60:75:c5:ad:4a:
                    e2:4c:f0:e6:7e:ac:00:3f:c8:72:e7:8d:e6:33:e1:
                    3a:09:f8:61:46:f1:a2:21:bb:ac:84:c5:db:df:91:
                    34:b5:17:2b:54:ad:e8:73:72:67:f2:5c:5a:42:e4:
                    63:5a:b3:f2:86:b9:e5:5a:62:3f:4e:ae:7e:82:57:
                    15:4b:22:db:e0:23:33:32:c4:82:30:f1:fc:7e:1c:
                    5a:eb:9d:33:ee:c7:d6:81:b9:34:54:f4:df:f0:d1:
                    10:57:88:2b:2f:36:df:c0:88:fb:76:dc:c3:77:c5:
                    19:d9:a6:30:31:ff:43:30:c3:a5:53:ab:41:25:0e:
                    0e:19:a5:23:f3:38:82:86:ed:02:92:4b:1f:b4:e4:
                    19:8c:c0:c6:95:bf:40:a3:48:a6:d3:3c:95:1a:80:
                    a9:4a:5a:62:1d:ee:2f:05:b7:00:54:a8:31:47:a1:
                    58:b4:fc:98:71:fa:82:50:65:e2:29:b4:9b:c7:ee:
                    bf:38:87:10:eb:93:fb:7a:61:be:64:90:0f:6c:d3:
                    54:38:02:14:ce:1c:d6:fa:15:80:b1:bf:69:00:4c:
                    ac:2e:36:d2:24:ee:d8:67:7e:e9:08:22:b0:ae:41:
                    b3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2D:3A:8A:90:8C:C3:72:14:B5:1C:27:9F:1B:51:39:19:E4:22:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404/6c05e886-82cb-3923-b78a-e1f178a13410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404/226199ff-c84a-4ff0-9ddd-8c19169b5404.crl

            X509v3 Authority Key Identifier:
                keyid:94:1E:71:4E:59:90:57:2C:22:6D:24:E8:76:DB:98:F3:A6:0F:05:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.168.0/24
                IPv6:
                  2602:f903::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:40:c1:c1:c7:6c:bc:66:77:8d:45:6a:fe:a4:15:5d:9a:19:
         20:52:5b:26:9e:a2:47:98:41:15:68:41:18:ea:62:61:c9:9d:
         22:84:b7:c6:13:a9:19:ac:99:6b:a4:bf:49:fe:5c:fa:83:29:
         3e:a1:73:c2:26:4d:d0:f2:b6:54:81:39:ab:67:7e:bf:55:1c:
         cd:fb:9a:3b:25:85:dd:ef:7a:3b:ec:b5:73:84:7c:01:2d:1f:
         5a:1c:54:5a:3c:eb:b4:eb:96:50:2f:63:4c:7a:22:ec:9c:2e:
         b1:f2:00:52:66:fb:01:1c:39:bc:b9:2f:96:da:d5:97:5f:c9:
         f8:51:1c:4c:e0:fc:15:cf:eb:8e:ad:53:b9:3a:12:04:0b:89:
         bf:59:53:6f:a4:90:42:b5:8e:07:43:c8:f7:32:38:70:ba:3c:
         a4:62:2c:f0:9e:ed:18:cd:95:f5:6d:73:ff:fd:09:44:76:c7:
         8c:b3:df:11:47:63:72:8c:43:1d:84:9c:f8:e4:20:74:6d:ad:
         d0:5f:63:15:c5:c1:6f:ed:43:96:97:04:4c:b8:d9:90:22:63:
         5c:57:10:eb:65:52:b8:5f:60:58:d7:90:c3:65:0f:84:0a:8a:
         bb:13:f0:70:fc:03:a9:31:a3:bd:b9:47:71:a4:cd:29:59:90:
         13:89:22:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:22 2024 by rpki-client on console-fra.rpki-client.org