Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/a815c6c4-4483-3cc7-ac67-b19b39011030.roa
File:                     a815c6c4-4483-3cc7-ac67-b19b39011030.roa (raw, json)
Hash identifier:          HEg9M7eMmL+SDRventzwudDY8quVESOig+Jf60RSeGs=
Subject key identifier:   17:14:FB:C9:2F:8A:53:EA:1E:E6:F9:8F:64:C5:F3:EE:D1:11:D2:F7
Certificate issuer:       /CN=eb9c4fdf-96db-4874-8da5-2c10670d3aa3
Certificate serial:       010D0C9F4328584754E0C010CAEBD750E1B32C00
Authority key identifier: E8:0D:66:3F:6D:1D:2E:31:68:59:6E:B4:68:F9:30:65:9C:F1:60:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/a815c6c4-4483-3cc7-ac67-b19b39011030.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     401202
IP address blocks:        23.182.88.0/24 maxlen: 24
                          2620:ca:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:c0:10:ca:eb:d7:50:e1:b3:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb9c4fdf-96db-4874-8da5-2c10670d3aa3
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=9d0a0527-6ff9-43ca-9796-259a0a0cd4bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7b:4e:c3:ac:4d:19:1e:6e:cd:4a:52:60:54:
                    84:5e:49:2c:03:69:da:39:f8:b2:e7:53:0f:86:ac:
                    88:22:b6:bb:b0:de:a1:33:ea:56:8c:aa:fd:47:de:
                    b2:eb:4b:52:ab:fe:d1:02:61:f8:35:23:6f:25:1d:
                    2b:a7:4f:19:7a:8f:e2:46:ad:ae:47:6d:72:2a:94:
                    85:ae:c5:61:63:f2:a6:94:eb:3e:6e:0d:8d:f6:c2:
                    1d:01:c9:00:75:85:b4:1a:a0:99:f3:30:d3:b9:6a:
                    06:4d:71:df:5f:f4:1a:d5:fe:97:c3:83:e6:58:e0:
                    12:39:2d:61:3a:01:e6:07:c6:36:8a:07:34:20:61:
                    ff:fd:0a:90:d3:9d:ed:53:8b:42:56:47:70:6d:79:
                    10:f6:dd:bf:17:53:cc:37:69:7a:e6:ee:27:b0:06:
                    53:b0:3c:cf:bb:43:a4:49:37:d2:af:82:1e:d3:02:
                    57:c3:18:c2:ba:d2:83:b4:ff:a5:cd:44:ea:97:62:
                    b7:a8:15:6b:fb:92:32:17:07:eb:fe:91:59:dd:ae:
                    f3:ce:fe:4e:00:17:d5:1f:01:a4:4a:c4:ea:71:5c:
                    90:64:6b:c0:44:2e:b9:ed:f5:6a:17:65:70:22:98:
                    77:ed:e3:8e:e7:d2:11:cd:80:28:ec:d9:93:bc:d7:
                    a6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:14:FB:C9:2F:8A:53:EA:1E:E6:F9:8F:64:C5:F3:EE:D1:11:D2:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/a815c6c4-4483-3cc7-ac67-b19b39011030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.crl

            X509v3 Authority Key Identifier:
                keyid:E8:0D:66:3F:6D:1D:2E:31:68:59:6E:B4:68:F9:30:65:9C:F1:60:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.88.0/24
                IPv6:
                  2620:ca:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:4b:cd:0d:e6:17:10:7e:07:2d:cb:05:54:78:d0:5f:dd:5f:
         46:f4:f3:a2:ad:ce:06:c2:7c:68:52:99:5f:ea:1a:37:92:68:
         59:b4:d2:52:89:5e:7d:3d:3a:00:80:23:a6:b9:eb:11:14:24:
         4a:01:59:be:45:06:98:22:e7:72:69:cf:dd:f3:15:45:7e:93:
         fc:3f:cf:ce:62:12:96:a0:fb:46:42:59:63:b8:eb:20:32:bd:
         df:70:fb:c5:2c:78:69:20:21:d2:13:29:80:19:d6:4c:47:40:
         c7:9f:26:be:37:d5:a6:95:6f:1f:05:1c:13:c1:20:9f:72:ba:
         6c:dc:5e:ce:70:6c:bd:2f:db:1c:a2:7b:1a:40:a0:d1:1c:cc:
         d7:0a:9b:4b:57:51:39:16:11:5c:34:93:e7:9d:44:fa:00:0e:
         57:fc:2d:70:b2:0d:05:ac:80:e6:c9:1f:64:fb:bc:9c:0a:b1:
         57:4a:0e:75:21:ea:d7:6e:d2:5b:91:3c:21:7e:4b:f6:5b:88:
         3a:27:1c:1b:6f:c9:97:79:74:fd:aa:6a:d1:ce:0c:fb:1c:c1:
         7b:d0:c2:18:31:0b:16:ce:f3:68:36:d8:fa:70:06:b1:14:a5:
         7b:62:dd:4a:82:2e:95:d5:27:95:d2:4d:50:fa:e0:af:cd:88:
         ed:40:26:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:46 2024 by rpki-client on console-fra.rpki-client.org