Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23e1b432-b8db-35e3-bb3f-188f5db76cf1.roa
File:                     23e1b432-b8db-35e3-bb3f-188f5db76cf1.roa (raw, json)
Hash identifier:          krkffDoXQm2SM81xdAcMl0o4rpZJQvVf3zK5opuVrkM=
Subject key identifier:   CB:12:15:4D:EC:4E:E3:37:5A:4A:A5:92:2D:1E:B8:1F:85:EE:CD:09
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848811B104CC299735620397BC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23e1b432-b8db-35e3-bb3f-188f5db76cf1.roa
Signing time:             Sat 11 Jan 2025 02:00:39 +0000
ROA not before:           Sat 11 Jan 2025 02:00:39 +0000
ROA not after:            Fri 11 Apr 2025 01:00:39 +0000
asID:                     55286
IP address blocks:        198.89.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:81:1b:10:4c:c2:99:73:56:20:39:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 11 02:00:39 2025 GMT
            Not After : Apr 11 01:00:39 2025 GMT
        Subject: CN=500b4b42-ace1-47b8-8922-ffe642a179a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:9f:40:ef:94:44:00:5f:de:6c:61:43:12:
                    e7:96:28:c3:65:29:dd:cb:25:fe:79:75:2d:99:8e:
                    1b:a6:e9:e3:eb:de:12:63:2e:bf:17:f2:62:90:e2:
                    be:0d:8b:22:a3:25:d2:0b:4e:7d:dd:e1:56:78:70:
                    c0:7f:ee:3d:36:fd:78:c2:94:d0:6d:b2:71:03:3c:
                    1e:61:91:73:11:8c:52:68:7c:c9:fe:59:02:00:ee:
                    d0:5f:04:f7:3b:e7:0b:ea:89:93:83:6b:af:86:2f:
                    fe:b4:98:d5:6d:21:72:e4:7f:ec:bc:51:e0:e4:00:
                    eb:fb:b8:71:35:66:01:8b:4d:c7:0d:72:49:ac:a2:
                    84:94:fa:ff:51:4f:88:94:98:77:73:8d:1c:ad:d9:
                    30:e4:9a:b8:54:64:e1:47:af:ee:8e:93:71:14:e5:
                    24:f3:c2:ca:a2:a8:fa:80:f7:40:84:33:c7:46:b1:
                    75:21:55:8b:f0:76:fb:90:34:70:46:45:f9:e0:10:
                    be:57:39:d3:11:9d:ac:d2:5e:ed:dc:3c:81:98:6c:
                    3d:28:55:3f:59:78:40:83:f4:da:77:73:80:92:ce:
                    9e:d2:62:fc:ce:9c:86:dc:ce:57:39:b9:8e:4e:1e:
                    e4:8b:56:bc:79:f1:49:36:80:67:cd:f0:6c:22:ef:
                    82:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:12:15:4D:EC:4E:E3:37:5A:4A:A5:92:2D:1E:B8:1F:85:EE:CD:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23e1b432-b8db-35e3-bb3f-188f5db76cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:1b:d9:1a:bc:8b:71:cb:b5:0c:b4:b6:a1:e0:35:51:ad:18:
         ca:78:43:45:bb:87:1f:70:08:88:5e:cf:91:55:d5:f5:77:f9:
         0c:0e:39:3d:5d:2b:ae:e6:6d:15:37:3b:71:1c:29:86:0f:21:
         53:d8:16:0a:95:b6:7d:4e:38:18:48:34:e2:cf:1f:c8:6e:59:
         3f:28:63:d6:4e:44:72:aa:05:dc:3d:4a:fd:8c:58:9d:da:63:
         39:48:f8:d1:ce:a1:c4:76:13:3c:e3:6b:73:69:cb:70:46:3f:
         a5:bd:84:b6:c0:3c:be:62:e7:03:bb:a0:a3:97:3a:4c:59:db:
         c0:5e:0a:93:13:65:67:22:95:6e:19:0a:f2:b9:36:36:03:21:
         1b:9c:84:b5:b5:8c:30:4f:c8:58:68:04:66:44:7c:b6:7a:4e:
         3b:60:9f:37:93:6d:48:ef:0f:ea:18:6c:30:a4:c0:3f:ae:30:
         6f:83:c5:70:03:9a:92:9f:67:5f:6a:00:63:66:c8:53:8a:27:
         38:91:e5:99:b7:8b:3f:76:2e:f3:02:71:bb:00:b9:36:62:1d:
         c7:35:06:2e:8c:f9:94:37:7d:80:88:5e:f5:34:19:62:d7:e7:
         a8:4f:b0:79:a1:e0:fa:50:4d:c0:37:bc:51:3b:94:84:f2:6a:
         38:48:05:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 04:36:20 2025 by rpki-client