Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/5038e415-936d-36b4-b347-422bca3e97e0.roa
File:                     5038e415-936d-36b4-b347-422bca3e97e0.roa (raw, json)
Hash identifier:          7P0sRL98rw6Twtk/M++NvJfjeQiECMDr488+q5SqNno=
Subject key identifier:   3C:13:FE:FA:D8:4F:F3:8D:0C:F2:25:39:AE:73:A9:91:75:39:7A:36
Certificate issuer:       /CN=75c2d703-b68a-47d9-8657-d65247155419
Certificate serial:       010D0C9F43285847E95A2994B7369978871D0080
Authority key identifier: 06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/5038e415-936d-36b4-b347-422bca3e97e0.roa
Signing time:             Sun 17 Nov 2024 17:24:58 +0000
ROA not before:           Sun 17 Nov 2024 17:24:58 +0000
ROA not after:            Sat 15 Feb 2025 17:24:58 +0000
asID:                     21658
IP address blocks:        23.175.40.0/24 maxlen: 24
                          23.175.41.0/24 maxlen: 24
                          149.112.109.0/24 maxlen: 24
                          2602:f926::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e9:5a:29:94:b7:36:99:78:87:1d:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c2d703-b68a-47d9-8657-d65247155419
        Validity
            Not Before: Nov 17 17:24:58 2024 GMT
            Not After : Feb 15 17:24:58 2025 GMT
        Subject: CN=dd650a64-7903-42d6-b9e7-9efecd165e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:7b:d9:69:c3:01:bc:40:9e:13:39:fd:b4:
                    d6:89:a0:93:0e:5c:54:e0:5d:ad:18:d3:1d:a7:6d:
                    bf:3d:a0:de:db:9a:d1:01:24:99:24:90:74:45:62:
                    52:98:ec:4c:c0:9c:64:b7:21:0e:fe:26:ed:cb:0e:
                    76:33:29:de:53:8c:15:b8:7e:fa:22:75:52:86:9a:
                    99:75:dd:fe:3f:1d:9f:32:a5:15:3c:20:b1:7e:61:
                    e7:df:2c:58:a2:df:e4:67:0f:fc:27:7b:96:1b:f3:
                    92:79:26:56:a2:af:38:d5:d4:f3:4b:29:53:13:a8:
                    63:8d:b2:bd:dc:f0:39:c6:df:48:24:41:d6:7e:63:
                    fa:97:6f:6a:68:21:be:2c:fd:89:16:87:75:6d:50:
                    e1:4d:46:2f:8d:d0:69:a4:c4:ad:42:1f:fe:ae:e2:
                    73:4a:04:5f:84:0e:fe:94:d2:9e:01:a4:c0:08:59:
                    fe:6a:b8:98:d1:b9:bb:c7:b8:d7:5e:d2:d3:9b:d2:
                    dc:d8:85:c6:98:cd:0b:8c:f0:e4:78:cd:fa:6f:be:
                    50:6f:05:5c:09:e6:7d:f5:91:9c:10:ef:c0:53:2c:
                    48:8f:bf:d7:42:48:5f:86:bd:a6:24:1b:67:f0:7c:
                    83:86:3c:34:b8:9e:0c:f8:a8:b9:bf:7a:e4:bc:b3:
                    4f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:13:FE:FA:D8:4F:F3:8D:0C:F2:25:39:AE:73:A9:91:75:39:7A:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/5038e415-936d-36b4-b347-422bca3e97e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl

            X509v3 Authority Key Identifier:
                keyid:06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.40.0/23
                  149.112.109.0/24
                IPv6:
                  2602:f926::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:31:98:96:65:43:7f:08:f2:ba:a8:23:aa:26:ce:e8:1e:ce:
         35:cc:70:c0:cb:d8:36:71:ab:73:9d:9e:9d:f0:5f:40:d2:3f:
         3a:32:95:b4:af:c9:b2:41:f5:b7:78:04:a8:5c:a5:74:b1:1a:
         fe:21:bf:dc:f8:eb:fd:dd:64:91:7f:85:d2:89:01:92:1f:bf:
         fa:b5:fd:99:1b:ef:1d:84:77:4b:d4:b2:d9:4e:da:a9:f4:84:
         2c:45:ec:db:52:2b:a4:dc:c5:da:fb:fc:63:12:ba:8d:a2:c7:
         b2:06:b9:82:8f:06:d6:1f:84:3d:f4:9f:3f:3b:4c:a5:b0:b7:
         cd:2f:84:2f:2b:4f:74:cc:31:0f:04:c9:81:d0:72:c8:09:3f:
         28:b5:20:1e:d4:83:7f:98:db:59:26:c6:d0:ac:ce:f7:0d:7d:
         e4:c2:c6:e0:00:00:fb:8c:ed:5a:bc:92:4f:84:ac:47:4a:26:
         d2:1c:80:e1:56:de:4f:9b:f3:0a:12:74:df:58:0d:69:1e:85:
         4e:18:18:89:a7:6b:45:99:2d:37:72:93:3d:2c:ff:b3:57:f9:
         1b:b4:b3:04:62:ef:05:36:32:d2:e5:7f:91:53:df:7c:2b:1e:
         19:6f:22:58:7d:57:b0:7a:95:01:c6:88:f1:a4:7f:a5:25:e1:
         9a:67:ec:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:22 2024 by rpki-client on console-fra.rpki-client.org