Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/f877bd71-35ee-39f7-89dd-9b00abaa8fab.roa
File:                     f877bd71-35ee-39f7-89dd-9b00abaa8fab.roa (raw, json)
Hash identifier:          pBdrj3kY0FPWq+ZtJPnzYHxTxdrJHUVCL/sWszL0UR8=
Subject key identifier:   35:17:1B:DC:CF:63:BB:76:33:41:69:4E:A5:06:72:B1:6D:D3:9B:C4
Certificate issuer:       /CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
Certificate serial:       010D0C9F432858473A5B93A6B91E1704E309D600
Authority key identifier: 66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/f877bd71-35ee-39f7-89dd-9b00abaa8fab.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     13781
IP address blocks:        23.151.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:93:a6:b9:1e:17:04:e3:09:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=a3900730-4fe0-4bd9-8fa7-8421d3358ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:90:92:b9:2b:8a:34:d2:c2:2a:77:e1:63:64:
                    7d:a7:8c:09:e7:bf:4b:e7:86:8d:16:3a:8d:99:d7:
                    d9:68:51:d4:96:cd:2e:97:58:90:ea:5b:f5:3c:e9:
                    33:2c:ed:61:8f:e3:dc:62:77:ec:28:cf:f0:7e:73:
                    09:6b:ea:35:76:1b:a2:53:ca:36:9c:d6:e5:5a:39:
                    18:70:9e:46:76:2d:c6:eb:29:8f:35:a8:d3:a8:f2:
                    24:1f:66:b3:f5:3c:9c:eb:ee:25:0a:4f:06:80:4d:
                    e8:bf:60:c7:fa:1e:06:73:c4:ad:21:21:b8:5e:4a:
                    11:b6:69:78:a3:b1:ef:3f:f5:85:8e:93:fe:0d:49:
                    48:df:bb:b7:9d:5e:7d:85:82:70:43:e5:16:4d:fa:
                    9a:72:fc:9b:8d:df:df:e3:ca:13:5b:f4:82:6d:09:
                    ab:14:f3:6f:d9:11:0f:4c:e9:16:3e:fe:fe:59:8c:
                    44:16:c9:74:93:70:2b:a7:8c:b8:f0:c4:dd:a6:7b:
                    b1:d2:e9:59:26:3e:c5:8c:2a:05:8d:c8:b7:85:87:
                    0b:87:fd:54:4d:55:d4:27:e1:b6:7f:c4:7d:00:1d:
                    f8:78:24:98:39:4a:eb:26:24:b2:dc:e8:41:da:81:
                    6a:02:1f:b6:17:fa:f4:3a:84:98:1f:26:3c:1c:e7:
                    02:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:17:1B:DC:CF:63:BB:76:33:41:69:4E:A5:06:72:B1:6D:D3:9B:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/f877bd71-35ee-39f7-89dd-9b00abaa8fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.crl

            X509v3 Authority Key Identifier:
                keyid:66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:30:54:d9:65:99:9a:7d:c1:10:3d:e8:12:f1:1b:58:3b:51:
         76:33:cc:89:bc:65:00:57:2f:26:a0:70:46:3e:61:b4:a8:90:
         14:27:e3:80:db:ea:52:a1:53:1a:34:89:01:13:62:9a:04:ef:
         39:1a:e5:52:89:03:2d:08:07:0d:53:24:32:b8:b3:67:58:9d:
         10:e5:fe:d6:7e:02:9b:82:98:13:2b:03:8e:31:52:08:ca:80:
         b9:2d:c8:ba:47:de:6b:d5:0c:a9:3f:92:9f:25:b4:c8:eb:6e:
         9b:63:a9:fb:26:a9:f1:30:e7:99:c9:78:49:1c:1e:3c:51:4d:
         87:67:94:fa:9e:1c:fe:77:55:e7:01:34:d7:8f:4a:fb:b5:42:
         cb:37:7d:58:c4:f3:0b:ba:de:48:4c:c9:6a:94:3b:85:13:dd:
         c2:88:bb:40:6c:45:dd:6d:95:c8:ea:d1:89:3d:0e:dd:a5:87:
         fb:b5:1c:f6:ef:7e:41:a1:68:f8:26:46:f4:8e:93:bb:1e:f2:
         dc:39:ad:6f:f1:e6:4c:69:56:8b:d1:46:25:32:d7:f2:7b:d7:
         49:01:ff:77:e8:f7:08:44:9e:d9:d9:31:41:d1:62:5f:67:8a:
         0f:d5:ea:ea:f0:2a:b1:5d:7a:71:19:55:8c:9a:08:48:87:cb:
         58:f4:34:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:35 2024 by rpki-client on console-fra.rpki-client.org