Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/b7f492f9-928f-39d0-a238-386068d65d12.roa
File:                     b7f492f9-928f-39d0-a238-386068d65d12.roa (raw, json)
Hash identifier:          iPimW4FMakCwlNBEh78+5Y3g747acQvteksXZAx+Yws=
Subject key identifier:   93:E6:9E:C7:0E:60:A2:D4:B1:A8:07:8D:B5:47:EE:F9:85:29:48:F1
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F43285847EFEF8BB32C90D95E1D116900
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/b7f492f9-928f-39d0-a238-386068d65d12.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     26383
IP address blocks:        163.123.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:8b:b3:2c:90:d9:5e:1d:11:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=90dfa5fd-e141-47b2-b1d7-2466c6fead82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:23:40:46:28:e4:d6:72:9b:bd:10:e1:d3:37:
                    91:67:e0:3d:9e:a6:d3:46:a1:89:07:ac:f3:2e:52:
                    fe:0b:0f:66:64:82:63:a3:05:5e:2c:68:40:c3:9c:
                    29:9f:45:06:ff:13:23:4b:43:d8:90:25:5d:7a:93:
                    1d:9d:2a:52:17:22:3a:9d:00:2f:26:ff:42:48:b1:
                    6b:4b:be:26:4f:7b:a6:aa:8b:a3:50:75:8d:34:94:
                    97:6c:80:82:41:f7:fe:25:16:44:04:f1:c7:dc:4c:
                    0a:6f:a7:e2:8d:81:d0:80:4c:dd:c6:97:16:32:a8:
                    0c:10:78:cc:0b:8a:ee:97:62:58:43:3b:36:84:59:
                    c3:f3:d5:51:54:7b:53:f1:d5:d3:71:68:9c:d4:5e:
                    59:94:4f:4b:34:90:ac:db:01:f6:0c:f4:90:87:f6:
                    6b:83:6a:71:e2:d4:fd:cb:63:1f:bd:3d:a1:d5:e8:
                    eb:9c:1a:84:5f:e8:c6:1d:0f:17:bc:79:08:cb:89:
                    d5:4f:2b:39:78:6e:91:ce:85:f9:fd:40:a2:62:f3:
                    c0:94:7c:1d:24:1f:ed:e0:ac:91:9d:da:ce:81:2b:
                    91:fe:c9:82:a5:11:27:14:cc:85:02:ba:c9:6d:c6:
                    38:37:32:c0:66:c3:15:7e:78:20:c3:19:ce:d9:69:
                    7d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E6:9E:C7:0E:60:A2:D4:B1:A8:07:8D:B5:47:EE:F9:85:29:48:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/b7f492f9-928f-39d0-a238-386068d65d12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:65:23:94:ce:b9:53:1b:51:4a:5b:2d:95:bc:1c:43:d1:fd:
         1f:9d:e4:6f:70:21:04:77:08:d0:45:73:78:8a:d3:10:4b:28:
         11:bc:86:4d:26:dd:c5:9f:92:c0:ff:4f:94:bd:be:9f:36:7b:
         db:c9:9f:76:5c:94:78:0c:05:a2:76:43:de:54:5d:ad:ad:45:
         d4:82:5c:2d:00:05:9c:72:8d:e0:03:81:80:be:49:40:36:b3:
         6c:4e:59:0f:34:5a:cd:cc:55:6d:b5:05:0c:fb:e1:88:7f:cf:
         3b:c6:0d:2a:47:8c:b1:48:80:a4:9d:eb:f7:15:0f:af:ce:d7:
         7b:90:b6:0b:e7:17:cc:03:e0:b3:41:98:05:e7:9d:ca:7f:b5:
         fc:1e:b8:2c:7c:22:b2:4e:4c:83:42:3b:00:c4:29:33:12:c6:
         1e:44:c1:f2:f9:62:2b:0f:9e:8f:89:0c:1e:b3:de:ab:c4:d9:
         c3:c5:16:b0:b6:28:0e:4b:da:a3:5f:a7:5b:d7:8e:3c:5a:44:
         9f:1c:29:ae:16:6f:19:7c:e3:65:c5:29:52:e6:c9:20:1f:17:
         6b:55:29:c0:80:52:da:36:43:40:89:2d:07:f4:b1:69:00:b1:
         90:0d:55:74:4e:ba:cf:30:cb:ca:21:aa:6a:db:58:87:01:43:
         32:95:9f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:42:11 2024 by rpki-client on console-ams.rpki-client.org