Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/418d5b7e-cf8c-3089-898e-9f42550c78c7.roa
File:                     418d5b7e-cf8c-3089-898e-9f42550c78c7.roa (raw, json)
Hash identifier:          5fABTZM3Ei/2rP15wbuE/gXkRuzRDq2KT7g33TOtpxE=
Subject key identifier:   B2:98:6D:00:02:5F:5D:AB:25:FA:EF:93:72:DF:D6:A5:A2:30:FF:8C
Certificate issuer:       /CN=1df08146-5ee7-4c5b-9f08-3436e38ab3bc
Certificate serial:       010D0C9F432858451F56AC3DBD8E32CDC649B040
Authority key identifier: 55:71:F3:B6:E8:B2:11:08:B1:95:A4:6D:6D:78:65:76:F7:28:77:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/418d5b7e-cf8c-3089-898e-9f42550c78c7.roa
Signing time:             Wed 06 Mar 2024 23:10:46 +0000
ROA not before:           Wed 06 Mar 2024 23:10:46 +0000
ROA not after:            Tue 04 Jun 2024 22:10:46 +0000
asID:                     399619
IP address blocks:        23.138.24.0/24 maxlen: 24
                          2602:fb57::/36 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:56:ac:3d:bd:8e:32:cd:c6:49:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1df08146-5ee7-4c5b-9f08-3436e38ab3bc
        Validity
            Not Before: Mar  6 23:10:46 2024 GMT
            Not After : Jun  4 22:10:46 2024 GMT
        Subject: CN=81d148c3-b758-43f2-860e-8842cf7d5ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ed:b8:60:a4:d3:d0:10:da:6b:df:b9:f2:66:
                    ef:cd:31:ae:5f:f1:42:36:59:ff:34:82:e9:4c:f1:
                    aa:13:ec:9a:89:d9:fe:aa:2f:52:17:41:c7:fc:6a:
                    bc:41:5f:a7:7b:f6:70:11:eb:55:06:23:a6:3b:14:
                    7e:be:3a:78:9b:d8:b9:ab:18:58:37:f8:2d:e0:c9:
                    10:92:11:7c:47:76:ad:d8:6e:a4:16:ab:ca:0e:1b:
                    c1:99:c5:39:63:5b:92:4b:56:65:a1:33:2a:72:b4:
                    b2:09:2e:81:77:62:43:06:95:31:e1:71:de:dd:ff:
                    e5:d8:69:64:21:f4:84:ed:e2:b2:a9:16:9e:cc:72:
                    a5:2f:c7:1b:9a:93:72:c0:bb:00:14:cf:2d:fd:f4:
                    32:d4:b9:be:53:e3:6d:e0:b9:e4:3b:1e:11:1f:0f:
                    56:2e:85:82:14:2f:a2:75:91:b5:d0:3d:c7:cb:94:
                    32:38:5b:dd:5d:9b:af:88:a6:e6:89:bb:8b:b9:3e:
                    56:28:79:3e:37:93:d1:1c:de:7d:38:3a:7c:2c:43:
                    e1:24:df:04:ba:e6:9f:67:7b:6f:38:c2:ac:13:dd:
                    e9:ed:08:3a:47:d8:b0:c7:0f:7b:cf:b7:6b:f4:dc:
                    ef:26:e0:4c:1d:da:1d:78:5b:5e:35:ca:13:17:0f:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:98:6D:00:02:5F:5D:AB:25:FA:EF:93:72:DF:D6:A5:A2:30:FF:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/418d5b7e-cf8c-3089-898e-9f42550c78c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.crl

            X509v3 Authority Key Identifier:
                keyid:55:71:F3:B6:E8:B2:11:08:B1:95:A4:6D:6D:78:65:76:F7:28:77:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.24.0/24
                IPv6:
                  2602:fb57::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ef:18:d9:d5:d0:29:46:31:c7:10:52:ec:2e:fa:e1:15:a5:
         a2:da:b2:18:20:28:a6:19:07:b0:e4:fc:a0:db:b6:a5:22:d0:
         d0:b3:9d:a5:0a:f6:96:b9:c0:44:d6:12:34:83:64:24:5b:26:
         02:55:11:b0:21:f8:45:29:9f:78:2d:f6:ef:a9:b6:68:c7:ec:
         fa:85:2f:de:a3:1a:06:b5:93:47:e9:97:b8:d5:2d:82:61:65:
         1d:3e:7d:a9:36:90:f0:93:a3:8f:d0:c7:52:0e:b5:8f:7c:6d:
         0b:d9:3a:5c:56:10:f6:85:52:44:34:07:16:eb:d5:8c:34:59:
         08:ac:78:fe:73:79:ef:8b:32:5d:3b:11:5e:5b:b8:d3:17:e9:
         65:34:bb:c9:dd:b7:c4:3f:2a:62:4e:48:15:b5:9b:1e:27:89:
         2c:a3:ec:cd:df:2d:6e:6a:99:a5:62:50:9e:77:e6:42:68:93:
         0e:f5:15:f3:64:48:8b:77:49:65:eb:b5:b1:37:79:64:d5:b3:
         b5:e2:76:7b:bb:58:64:13:79:0e:64:7f:11:c9:22:6d:c1:cb:
         ee:e0:15:41:2b:e9:79:dc:cc:1c:ce:20:4c:2c:35:0f:0d:68:
         8c:16:3e:1f:d4:36:40:68:86:b7:62:73:06:62:0b:b9:f9:4f:
         4b:7d:52:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:49:02 2024 by rpki-client on console-ams.rpki-client.org