Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/a9ab03a5-fcb2-34f6-b792-539de8f3beef.roa
File:                     a9ab03a5-fcb2-34f6-b792-539de8f3beef.roa (raw, json)
Hash identifier:          rb6GcEqe1cgg6fap3pL6RAIBLN6Ph85tDZy52BPKU4U=
Subject key identifier:   E6:68:CB:A1:11:C2:50:5D:E8:36:E8:BF:41:38:09:5E:30:07:98:B1
Certificate issuer:       /CN=cf35609e-0e1f-484a-af8f-815006d97f11
Certificate serial:       010D0C9F4328584819CFC1B1D9EAFEC0F319CAD0
Authority key identifier: CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/a9ab03a5-fcb2-34f6-b792-539de8f3beef.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     14694
IP address blocks:        23.136.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:c1:b1:d9:ea:fe:c0:f3:19:ca:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf35609e-0e1f-484a-af8f-815006d97f11
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=d0171802-1286-4d0c-b4d7-831852840cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:78:7a:59:31:79:f5:d1:9c:26:c0:7e:f7:
                    17:e1:77:44:6d:87:4e:75:53:c5:f0:db:7d:8a:bc:
                    cc:27:87:1b:ff:8a:ec:95:54:ef:8d:2f:c9:8a:67:
                    f8:d6:14:d1:f5:21:5c:79:90:d9:e1:e6:6f:73:d4:
                    dd:6f:c8:2b:1f:ee:a6:b9:7a:c5:75:26:f0:79:df:
                    6a:86:a6:ce:71:dc:a4:95:f3:a1:f6:78:ed:7b:96:
                    c1:21:24:db:54:97:bd:97:70:c2:d7:df:7c:aa:bc:
                    cc:28:f9:58:c9:7b:d8:c7:70:7d:37:9e:ad:e5:d6:
                    ea:af:82:11:1c:60:49:12:3b:05:25:cf:8d:01:80:
                    12:b3:0a:56:ff:34:d3:91:f9:3b:9b:2c:5f:08:f8:
                    04:fb:f4:10:49:02:d3:0c:e0:ec:14:0e:a6:ff:92:
                    b8:48:61:c1:b7:6e:f9:d9:e5:b3:b8:7c:51:0b:d3:
                    20:9d:2c:01:ff:22:44:74:60:79:b9:f3:57:63:cc:
                    92:ba:80:02:52:15:5f:44:16:bd:1d:ba:e4:b3:36:
                    78:08:c1:b4:da:31:5f:9d:6e:3c:e0:e8:ce:35:cd:
                    48:f3:f5:17:d1:d4:b3:da:95:2c:89:dd:3b:08:86:
                    de:3d:74:ab:98:42:ac:16:a9:68:bb:ed:ef:5f:69:
                    01:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:68:CB:A1:11:C2:50:5D:E8:36:E8:BF:41:38:09:5E:30:07:98:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/a9ab03a5-fcb2-34f6-b792-539de8f3beef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.crl

            X509v3 Authority Key Identifier:
                keyid:CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c3:b8:3e:41:1d:82:98:5d:31:43:c3:d5:8b:79:08:33:10:
         c8:7e:b5:72:ae:62:ec:c9:d2:74:85:06:e4:ac:92:53:ed:aa:
         69:9e:79:24:2f:94:42:ff:ec:b3:ec:63:50:65:54:7e:20:2a:
         71:31:06:ba:bb:9a:80:82:af:a4:03:da:d9:99:1e:ff:6d:f8:
         ae:39:81:79:5d:cb:24:0d:db:f7:4f:a0:39:5c:f2:2f:20:0a:
         cc:fd:54:72:86:79:ec:8e:76:1b:af:c5:4a:07:66:aa:a6:88:
         2d:b4:3e:28:30:4e:6d:1f:be:19:7f:ea:ec:2b:3c:32:11:8f:
         d4:34:4c:59:7e:10:17:ab:f6:20:8e:86:fd:c6:c1:ee:f3:91:
         34:e3:0a:bf:6a:be:fe:bb:7f:80:6a:53:8a:0a:98:47:7c:19:
         6f:87:f6:2a:05:73:ab:0a:f4:96:58:fb:45:fb:a5:69:1e:86:
         5c:38:bf:c5:cf:bb:11:72:f2:fc:97:aa:70:db:f2:12:66:bd:
         46:08:a7:de:60:53:36:af:b7:9f:6f:3f:cb:b0:54:ca:05:61:
         b7:68:a5:cc:93:e2:83:4c:b7:01:f0:6f:44:7e:ee:1f:1d:e7:
         da:f0:bd:e5:0e:56:ae:29:24:d4:d3:10:2e:cc:7d:8f:05:bd:
         59:83:94:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:11 2025 by rpki-client