Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/0fd6fb70-f735-39b4-be34-4ae6851d9ac1.roa
File:                     0fd6fb70-f735-39b4-be34-4ae6851d9ac1.roa (raw, json)
Hash identifier:          ipFHt8lhR5kYlM1DTnnSZv7pMJut4vLEmOEC1oPh58U=
Subject key identifier:   DF:3A:9D:C1:97:DD:32:A6:04:CC:9E:7D:F0:4B:73:06:40:13:BF:A4
Certificate issuer:       /CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
Certificate serial:       010D0C9F43285847888657F85992AF4D5A4B6A00
Authority key identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/0fd6fb70-f735-39b4-be34-4ae6851d9ac1.roa
Signing time:             Mon 14 Oct 2024 01:00:31 +0000
ROA not before:           Mon 14 Oct 2024 01:00:31 +0000
ROA not after:            Sun 12 Jan 2025 02:00:31 +0000
asID:                     59426
IP address blocks:        23.177.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:86:57:f8:59:92:af:4d:5a:4b:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
        Validity
            Not Before: Oct 14 01:00:31 2024 GMT
            Not After : Jan 12 02:00:31 2025 GMT
        Subject: CN=db4e1b68-af4e-4f72-a0d7-5b680beeb3bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:d5:33:a4:6b:3c:6c:2c:4c:b4:c3:0f:fb:
                    67:7c:b0:d0:47:f4:d6:38:30:73:a0:e2:3d:f5:4b:
                    42:a1:fa:06:eb:23:09:55:40:5b:28:dd:73:2a:4f:
                    5a:10:c2:0c:f1:98:bd:b4:d9:fa:a0:f7:b7:75:c3:
                    c7:96:e4:46:53:60:7e:13:3f:40:ee:cf:b8:21:6c:
                    dd:a8:56:d9:bb:cb:63:34:8d:f1:6c:87:5c:91:87:
                    7e:6a:7e:9d:5c:9b:5d:67:9c:68:07:48:4b:3a:2b:
                    c3:3f:31:7a:78:92:5c:ca:d2:f9:a2:70:8f:0c:7f:
                    cb:ad:b7:34:84:9f:fa:a1:ed:78:f1:66:54:cf:cf:
                    36:2f:9f:1e:7b:cf:c2:9f:4f:fc:bc:7f:10:a3:e7:
                    31:8f:78:97:55:f3:9f:4d:d9:5c:45:13:98:93:69:
                    77:f0:1c:39:be:c1:11:66:fa:7c:92:99:01:93:f4:
                    e6:e9:77:1d:db:eb:0c:14:59:7e:b6:22:ce:66:f5:
                    88:2f:f2:ed:3e:86:4c:40:f8:89:64:31:d9:64:5a:
                    85:b2:8e:2d:05:df:77:3c:d8:73:a7:26:49:35:28:
                    12:4e:1f:41:84:7f:bd:4e:cd:e9:d5:1f:9d:be:e7:
                    9f:9a:3e:99:ee:76:12:3b:6d:8f:f7:af:1a:9b:cf:
                    3d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3A:9D:C1:97:DD:32:A6:04:CC:9E:7D:F0:4B:73:06:40:13:BF:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/0fd6fb70-f735-39b4-be34-4ae6851d9ac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl

            X509v3 Authority Key Identifier:
                keyid:00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:6a:a3:4e:a0:c4:ed:64:87:1d:c8:91:8d:78:2b:e0:1a:ea:
         ba:a7:15:2e:a0:d4:4d:2c:58:a1:7b:31:18:5e:3e:4f:8b:b5:
         2c:25:a6:34:45:c8:41:92:d5:cd:bd:54:8a:63:6c:a3:7a:b9:
         26:d0:5f:42:80:40:a6:1f:da:89:08:6f:b2:69:a1:c7:b5:9b:
         17:2d:b2:44:fb:40:77:a4:03:20:5f:e7:c6:d7:63:37:51:ed:
         c4:42:ee:00:9a:20:a9:21:56:1f:cd:f1:eb:ce:2b:e2:e7:68:
         7e:fd:a8:b8:9f:57:6f:55:a5:25:5a:a6:35:0d:60:f5:5a:f0:
         db:96:d3:42:23:b7:3d:2b:01:13:f3:fb:b0:9c:7d:45:be:fd:
         6a:ff:4a:55:a3:a1:0e:0d:14:31:70:e9:f3:f8:19:1d:c4:53:
         57:8f:b7:a3:93:3f:bc:c5:1c:ee:8e:7f:1b:14:f1:8e:56:50:
         74:4e:3b:8b:b4:fe:2b:62:eb:2a:56:d3:3a:b5:56:a4:27:97:
         d2:f2:6d:fb:83:3d:cc:d9:00:39:c6:c3:e2:4b:8e:d5:bf:4d:
         60:8a:f2:2c:55:4f:99:62:99:95:fc:d6:eb:af:09:0b:b5:ba:
         0d:c4:cf:31:14:77:c5:04:b1:aa:b7:d7:93:fa:59:47:92:14:
         a2:26:2d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:36 2024 by rpki-client on console-ams.rpki-client.org