Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ebdf651-a37d-3ef5-acd3-a4af767959fd.roa
File:                     4ebdf651-a37d-3ef5-acd3-a4af767959fd.roa (raw, json)
Hash identifier:          kr2YJ2JpUNGUHQUJHJUVXmb+Ps1zRfuFbRuPHjLVYw0=
Subject key identifier:   31:9E:D7:5D:48:AA:5D:96:E7:23:FF:40:D0:CD:8C:71:0C:B6:B8:B8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858476C9F0AE798D893733B358478
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ebdf651-a37d-3ef5-acd3-a4af767959fd.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     12083
IP address blocks:        23.230.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9f:0a:e7:98:d8:93:73:3b:35:84:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=f71af79e-00d4-4e99-a16b-b43598feb658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:73:6e:65:32:41:00:cd:04:52:5e:be:44:
                    fb:0c:e6:7d:49:d4:75:6d:e4:3b:a8:e1:b8:e4:0a:
                    b0:f8:df:d0:94:6d:85:4b:33:e5:09:66:ae:d7:66:
                    ce:59:cf:2a:e2:52:a6:e7:f6:e1:5f:d9:a9:ac:59:
                    69:41:c7:ee:3c:5e:8d:4e:8e:05:b9:82:14:57:69:
                    b2:60:19:84:23:da:ea:f9:af:17:94:ff:8d:e0:11:
                    b0:90:90:5f:f0:a2:94:4c:1f:76:fb:6b:5c:66:4b:
                    a3:79:0f:99:8b:e0:3b:3c:c7:63:ff:d5:82:32:05:
                    6d:28:22:5f:51:a1:b3:09:36:d9:40:ea:79:d2:e2:
                    da:42:f1:80:de:e7:65:cf:23:de:a1:99:9e:0d:f1:
                    54:19:d4:13:fb:ab:bc:ab:dd:3a:bd:6f:17:56:3d:
                    26:ab:0f:8d:94:1f:93:e4:9c:20:e2:af:fc:e9:73:
                    9d:44:03:83:3a:2a:3f:e0:f8:3a:47:a5:08:a5:b9:
                    af:e1:91:ec:08:c5:1c:de:1d:96:bf:1c:dd:fe:95:
                    06:92:c7:34:57:c9:27:77:df:17:72:a9:d9:3a:80:
                    c7:dd:47:15:3b:53:85:04:6d:90:92:52:b5:77:98:
                    69:b5:b7:da:6b:27:74:73:34:11:8c:33:1c:2b:25:
                    91:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9E:D7:5D:48:AA:5D:96:E7:23:FF:40:D0:CD:8C:71:0C:B6:B8:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ebdf651-a37d-3ef5-acd3-a4af767959fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d6:43:df:2c:ef:a3:3a:88:dc:1a:7e:6e:21:ad:25:ef:85:
         50:dc:13:46:e8:72:6d:e3:07:4f:b2:53:f4:b7:c6:5b:81:bd:
         5f:02:fc:b2:29:4f:68:7d:65:d0:15:f0:57:1a:35:d4:56:2a:
         47:27:40:80:b4:ed:88:6f:a7:b1:d2:bb:61:a4:70:b8:07:24:
         46:3f:34:d6:7d:95:55:e6:7e:21:a7:5c:6a:72:80:15:bb:eb:
         95:52:b7:5c:80:ea:13:e7:90:6d:ce:47:7b:ba:ff:94:7b:11:
         d3:0f:86:a5:45:f4:c1:fd:52:6c:b0:98:fd:a5:69:2d:3d:88:
         21:5c:43:ee:9b:7f:22:0a:1a:c2:94:ae:7e:b2:53:b7:d9:b8:
         5d:22:66:78:5a:49:06:56:61:43:25:04:8a:e2:fe:88:b0:b1:
         2d:dd:56:ab:98:7a:1b:4c:85:98:17:87:e4:92:cd:42:97:e5:
         3b:a0:69:f5:a9:56:70:58:ed:12:8a:96:ee:dd:84:bb:d6:86:
         e5:94:73:b5:6f:71:be:8b:9c:2a:4e:e9:5b:c1:27:97:02:ba:
         da:71:d5:69:5e:08:a5:b5:99:cd:24:aa:35:a5:6d:42:d0:81:
         e7:03:63:12:93:f7:f4:1c:d6:89:db:e5:1d:03:ea:3f:78:81:
         25:c0:5b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:48 2024 by rpki-client on console-ams.rpki-client.org