Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa
File:                     eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa (raw, json)
Hash identifier:          JgeEUacsOqLIfglnXP3Duzj6JnQbAxXlG+F5SNh1rMo=
Subject key identifier:   19:FC:5C:F5:A3:4A:39:3F:D3:78:3E:1F:04:72:7A:DC:F9:29:C4:87
Certificate issuer:       /CN=68a35552-4277-4e62-a51e-4b31ab8d4ca0
Certificate serial:       010D0C9F43285847F41F9EEA4AA6D94583428680
Authority key identifier: 16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa
Signing time:             Thu 21 Nov 2024 14:00:51 +0000
ROA not before:           Thu 21 Nov 2024 14:00:51 +0000
ROA not after:            Wed 19 Feb 2025 14:00:51 +0000
asID:                     401021
IP address blocks:        23.176.152.0/24 maxlen: 24
                          2620:0:8000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:1f:9e:ea:4a:a6:d9:45:83:42:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68a35552-4277-4e62-a51e-4b31ab8d4ca0
        Validity
            Not Before: Nov 21 14:00:51 2024 GMT
            Not After : Feb 19 14:00:51 2025 GMT
        Subject: CN=8ae87af5-c740-48cc-a942-cbd094472790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2d:f3:a3:05:5e:57:6d:7b:de:76:06:c7:92:
                    06:4d:00:ab:b1:d6:05:e1:30:33:ef:fd:d6:f0:17:
                    21:74:ff:29:33:c1:ce:5b:07:30:3c:41:f4:1b:4f:
                    97:e9:cd:89:61:34:14:0e:5b:c9:01:3c:09:c7:7c:
                    8f:67:ae:ad:06:fe:90:58:ff:c7:5b:ba:04:e7:71:
                    af:37:6f:00:ad:f6:e1:72:a6:6b:25:4f:82:0a:b3:
                    7d:77:75:bf:37:70:2f:45:d8:7d:e8:63:2e:eb:0c:
                    7b:6c:de:b7:93:02:e9:9d:ce:a0:ab:2b:a3:e7:9a:
                    41:bb:8a:25:9a:41:d4:40:8c:83:13:4b:dc:d6:b4:
                    43:f4:d0:2b:36:6e:1a:07:48:86:2f:3c:2e:4c:e8:
                    8f:08:05:40:a4:46:0c:af:5a:8c:88:f7:a1:78:b9:
                    c2:92:3b:90:3f:66:5c:5f:4a:57:27:88:fd:28:10:
                    c9:28:4a:69:f7:8f:8b:ef:bd:8d:30:b4:7a:89:d7:
                    a7:38:7f:c8:97:8b:60:f0:e4:cc:4f:d2:b5:f0:bd:
                    3a:3a:65:f9:2f:e6:77:19:ab:90:dd:a6:44:cb:a9:
                    8e:b9:81:5e:22:55:b3:b9:02:e3:20:9a:50:ec:4e:
                    d7:d6:8b:29:e1:5d:1a:44:8d:d2:be:6b:b7:5e:33:
                    6b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FC:5C:F5:A3:4A:39:3F:D3:78:3E:1F:04:72:7A:DC:F9:29:C4:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.crl

            X509v3 Authority Key Identifier:
                keyid:16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.152.0/24
                IPv6:
                  2620:0:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:5f:9d:91:96:21:75:07:bd:63:4d:0e:ed:c5:9c:ad:e0:2d:
         4b:ad:9e:16:08:9b:1a:a7:84:f9:b5:b7:9b:0f:be:ab:9e:26:
         6e:eb:a2:a4:4b:01:ef:a8:00:e4:2c:0a:d6:85:3d:5a:bc:64:
         f3:f8:74:c1:7e:c0:c5:6a:e6:89:75:66:a1:30:ed:c0:6e:e2:
         a5:70:ee:e3:4c:e3:9c:2f:1d:d5:b5:3b:8a:b5:a2:c3:5f:e7:
         84:80:dd:e3:10:0a:8a:0e:17:16:df:29:bf:ee:6b:92:cc:55:
         fc:43:16:53:74:17:c9:30:72:0a:ec:d9:a4:1d:12:d0:25:14:
         4d:f9:8b:a0:47:e1:d9:13:2a:61:6f:14:07:bf:61:18:2b:8c:
         38:10:2a:7b:b0:b5:b8:ff:65:07:ab:a0:70:bf:86:b2:26:85:
         a9:ba:bd:ea:26:13:98:9c:92:55:87:db:d6:25:d0:63:6e:ba:
         71:fc:f9:fa:c7:81:ad:f8:75:c8:bc:4e:b8:99:84:73:66:37:
         1b:bc:81:3b:02:54:4c:90:37:b1:34:3b:aa:f3:8a:e7:66:32:
         f1:48:ef:9f:8a:a8:6d:74:0e:a1:26:27:6b:c8:e8:10:b4:84:
         7a:28:db:dc:18:26:26:17:86:24:80:0c:f5:d9:8a:ad:eb:54:
         f6:c0:af:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:35:58 2024 by rpki-client on console-fra.rpki-client.org