Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/d7e5659e-3afd-31ea-8fe5-b8fac539b826.roa
File:                     d7e5659e-3afd-31ea-8fe5-b8fac539b826.roa (raw, json)
Hash identifier:          sXaQgL1Jy0nkAkWUvZETigX/piOPFoYgXKa9gaGJ2Lc=
Subject key identifier:   2C:BF:93:5E:ED:55:E5:F3:B2:A5:CE:CE:F9:8C:CD:13:19:40:01:30
Certificate issuer:       /CN=e76e962d-5249-4aed-ae77-b2d6c2ef42d0
Certificate serial:       010D0C9F4328584762D64DDEE747ABAF74A4D200
Authority key identifier: 10:86:A7:D2:EC:2F:54:91:40:CA:72:98:C8:E8:9F:03:57:52:8F:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/d7e5659e-3afd-31ea-8fe5-b8fac539b826.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     40895
IP address blocks:        23.247.192.0/22 maxlen: 24
                          163.123.168.0/22 maxlen: 24
                          209.209.32.0/22 maxlen: 24
                          2602:fd11::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:4d:de:e7:47:ab:af:74:a4:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76e962d-5249-4aed-ae77-b2d6c2ef42d0
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=755da0fb-afd5-426a-8ed6-f6e3073d8a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:56:b0:0e:32:a6:7d:19:9f:19:12:d9:28:08:
                    85:b1:98:e7:46:1b:eb:97:4e:16:ec:3a:b7:9b:fb:
                    d7:a1:05:9c:d6:4e:12:e1:de:33:83:e6:1e:39:03:
                    55:10:14:47:3b:4f:b8:b1:36:32:43:86:77:27:5b:
                    92:ac:14:21:7f:fe:de:32:3d:7e:18:38:65:8d:00:
                    76:0a:6f:c0:18:f7:3f:4c:0d:54:38:70:7d:73:33:
                    9f:8a:e5:2a:0a:8b:7c:60:7c:e5:6d:29:1b:4d:3e:
                    97:93:c7:fa:4a:73:82:a4:30:1b:f8:0a:2c:5b:9b:
                    de:62:32:b6:65:0d:7a:bc:68:bf:17:4d:0c:3d:b6:
                    4d:ab:54:58:de:02:25:f3:b5:10:0c:85:74:7a:39:
                    25:5a:5e:92:2a:52:74:b0:2b:e6:a4:52:7f:12:c6:
                    29:38:66:0b:70:b9:19:34:dc:43:2b:fe:9a:ed:c2:
                    16:de:ea:d7:03:22:6e:69:cd:ad:e6:cc:88:b3:b6:
                    0f:e4:84:bf:9f:84:84:98:29:37:e0:f3:b4:99:4a:
                    fb:76:28:bd:1d:9e:2b:66:a8:9d:e8:0c:d2:6f:3b:
                    db:25:33:12:77:ca:a6:cd:26:dd:0d:2a:90:ce:c1:
                    da:f8:2a:1d:82:c1:dc:41:35:ef:23:39:29:24:5f:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BF:93:5E:ED:55:E5:F3:B2:A5:CE:CE:F9:8C:CD:13:19:40:01:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/d7e5659e-3afd-31ea-8fe5-b8fac539b826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.crl

            X509v3 Authority Key Identifier:
                keyid:10:86:A7:D2:EC:2F:54:91:40:CA:72:98:C8:E8:9F:03:57:52:8F:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.192.0/22
                  163.123.168.0/22
                  209.209.32.0/22
                IPv6:
                  2602:fd11::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ee:3c:d7:76:6e:a3:67:18:c8:54:b0:db:0f:38:24:0f:d3:
         05:60:d5:d0:98:e8:1b:4a:2b:9a:3d:af:a8:2a:75:a2:bf:09:
         d6:c4:fc:0a:c7:bf:ff:0f:5f:c1:dd:dd:c1:25:df:e4:ba:17:
         49:93:e4:74:14:03:99:db:e4:72:e5:5b:ed:ac:f9:94:f9:cb:
         fc:a0:9e:f3:89:7a:3d:85:68:5b:11:32:a6:3e:99:2a:e5:86:
         fe:2c:21:03:43:a4:bd:4c:69:01:58:1d:cf:26:dc:1f:2d:1c:
         5d:d9:e1:fa:f0:f4:0d:34:b2:48:1c:df:06:bd:31:a9:20:37:
         2f:45:dd:af:32:c2:57:91:b7:3a:3c:4f:b2:d1:a6:3c:8e:33:
         68:87:e9:f9:a4:9f:54:0e:88:02:e4:da:63:8a:1d:ec:46:43:
         78:0d:1e:a3:e7:be:ab:fa:95:30:08:52:98:98:83:33:4e:d8:
         33:91:7b:ad:ba:3d:c3:c7:6e:de:8b:c8:03:20:2e:55:84:8f:
         3c:37:00:a5:6d:c0:a8:a6:8c:4c:91:f8:fe:af:32:46:8c:0f:
         b6:bd:4f:22:96:fc:3d:e8:93:e4:22:9b:ed:f2:f5:09:9a:4c:
         63:e4:0d:e8:1e:96:b1:2f:e4:d2:7c:e5:fc:7d:5e:cd:c8:02:
         5b:82:77:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:31 2024 by rpki-client on console-fra.rpki-client.org