Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/e6a5be0c-3342-3531-9d15-9b4cc482f541.roa
File:                     e6a5be0c-3342-3531-9d15-9b4cc482f541.roa (raw, json)
Hash identifier:          QbpOnX225alApS2hf6RJnPVOsMQCQeQIjD9kc428y+0=
Subject key identifier:   89:F4:B9:78:14:F1:68:ED:4B:97:85:7C:85:99:9A:4E:9B:E7:40:4F
Certificate issuer:       /CN=0e527a59-f1c7-4664-a1be-8a0911a07432
Certificate serial:       010D0C9F4328584742BB4AEA3DE6B7DCA12E8180
Authority key identifier: 6A:29:73:86:E7:27:75:53:C5:7C:59:76:56:81:A2:37:EE:4C:DD:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/e6a5be0c-3342-3531-9d15-9b4cc482f541.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     40864
IP address blocks:        23.159.240.0/24 maxlen: 24
                          96.125.192.0/20 maxlen: 23
                          2606:1b80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/0e527a59-f1c7-4664-a1be-8a0911a07432.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/0e527a59-f1c7-4664-a1be-8a0911a07432.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:4a:ea:3d:e6:b7:dc:a1:2e:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e527a59-f1c7-4664-a1be-8a0911a07432
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=0f5ffd0a-0bab-4b28-a886-06223501ad68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cf:8b:a3:cc:21:08:94:72:e3:b4:69:32:72:
                    51:f9:9b:5b:32:77:ab:fb:a7:05:84:31:7c:4b:9b:
                    ba:6b:f4:83:ec:93:c2:a7:66:b0:77:b1:54:32:e1:
                    c6:6e:5d:e8:32:4b:42:ed:19:fe:5b:45:e8:2e:bb:
                    95:10:fd:4a:b1:5d:9e:80:65:0f:d9:20:93:8e:5f:
                    70:94:9b:7f:f1:f9:4b:75:19:28:cd:27:c1:2a:f5:
                    39:2a:74:96:8a:92:d5:92:6a:11:f9:67:52:a0:f7:
                    0c:bc:57:6c:e9:e9:f7:ec:ff:51:2a:a9:05:ea:7c:
                    1e:f4:24:bf:c1:27:07:87:b4:fb:e9:74:45:76:87:
                    9b:30:77:d9:13:34:a2:08:2d:ff:83:ea:dc:33:3f:
                    ce:7d:19:11:f6:55:71:86:73:67:ac:70:06:52:23:
                    cc:59:1d:4e:ae:6b:f5:a6:38:b9:55:59:8f:f4:2f:
                    44:c9:7b:1d:61:ca:1e:0e:4a:f1:c1:5d:78:44:5f:
                    2b:79:cc:f5:ef:51:63:ae:ee:f7:ad:9b:47:d5:8e:
                    e4:ee:d9:6d:78:c1:5a:8b:54:30:58:63:d7:7c:9e:
                    06:d9:dc:38:0d:5e:d5:47:fc:46:92:bc:7a:6b:96:
                    e5:a7:94:40:d5:59:c5:87:ef:ea:ec:4f:2b:ff:d7:
                    d5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F4:B9:78:14:F1:68:ED:4B:97:85:7C:85:99:9A:4E:9B:E7:40:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/e6a5be0c-3342-3531-9d15-9b4cc482f541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/0e527a59-f1c7-4664-a1be-8a0911a07432.crl

            X509v3 Authority Key Identifier:
                keyid:6A:29:73:86:E7:27:75:53:C5:7C:59:76:56:81:A2:37:EE:4C:DD:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.240.0/24
                  96.125.192.0/20
                IPv6:
                  2606:1b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:1e:ef:57:03:0a:11:85:f2:ea:13:86:c3:04:c3:c0:49:9a:
         b3:61:d3:2e:cd:92:5a:ea:26:50:89:36:bb:64:3e:46:22:2e:
         6c:fa:fd:ca:2d:55:85:a6:d8:37:dc:da:1e:35:66:2c:f1:15:
         89:04:3a:e4:5b:3a:e8:e1:65:7f:4f:6d:b3:68:92:19:82:bb:
         89:09:c1:d7:87:45:66:4f:e4:86:ee:c6:92:4c:09:88:90:8c:
         d7:f6:6c:75:53:9c:63:60:1c:1a:18:ef:4f:f7:5e:3b:49:15:
         e7:5d:a8:98:ef:80:0a:38:5b:3e:89:ff:89:8b:9d:f3:0d:61:
         ab:13:48:09:01:a3:77:57:33:ab:d8:28:f3:0e:64:20:25:a6:
         b7:f9:cc:bb:a3:13:d8:a4:70:63:21:86:38:76:4a:d9:f8:6e:
         54:42:da:e2:7d:85:e0:23:17:a5:c2:4d:c3:98:f9:0b:62:a1:
         f2:42:cd:ae:4c:39:36:46:af:41:62:2b:45:dd:c6:a7:ce:65:
         2d:42:ea:23:1c:69:54:7f:d1:08:11:f0:f6:3b:84:8e:f1:12:
         d6:fa:ca:7a:2f:3f:f8:ee:87:21:f7:7d:cc:48:1a:ab:ef:10:
         c5:b4:fd:f9:f3:1d:2f:84:90:d1:da:58:3a:04:bb:bb:57:98:
         5e:0b:f7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:27 2024 by rpki-client on console-ams.rpki-client.org