Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/25d151f0-5c0f-3146-948d-00e1c8dc139b.roa
File:                     25d151f0-5c0f-3146-948d-00e1c8dc139b.roa (raw, json)
Hash identifier:          jP87F822ECNd50gQ6/M0X3LLGIGhqwj9+TKBBm9AHrc=
Subject key identifier:   F9:0B:0B:73:9C:D2:9F:45:45:2F:45:7D:ED:0C:AB:37:0B:63:5C:85
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F432858478456774374412C2FA7003080
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/25d151f0-5c0f-3146-948d-00e1c8dc139b.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     14445
IP address blocks:        23.137.136.0/24 maxlen: 24
                          23.137.137.0/24 maxlen: 24
                          23.137.138.0/24 maxlen: 24
                          23.137.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:77:43:74:41:2c:2f:a7:00:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=548e7375-7b65-4c13-8237-ab572d6a76ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:57:ef:7a:60:17:a1:f9:e1:31:24:55:f7:15:
                    e1:ee:ec:22:5a:41:2f:33:93:2b:c6:4e:4b:03:c9:
                    19:64:91:bb:20:e1:6e:96:8b:7c:73:f0:29:74:2e:
                    85:e2:4d:42:17:8e:67:e3:9f:fe:cc:11:54:5c:d1:
                    d6:5e:80:f9:72:1a:1d:55:dc:ff:e4:c4:ea:39:64:
                    78:5c:ed:ff:b7:2a:17:6d:3a:b3:fe:84:8c:db:55:
                    d6:8c:42:c1:74:cb:6c:d2:a2:56:f7:41:8e:7b:f4:
                    33:3d:4f:95:99:c9:f1:6d:e0:a8:05:cd:db:a4:5d:
                    b8:d9:af:8b:dc:b6:e3:c8:9a:05:78:55:e9:05:f5:
                    18:8f:04:f1:f7:ec:d5:57:c8:7d:bb:e4:89:00:37:
                    00:95:c4:7b:3e:1d:9c:1a:83:4f:8b:d8:83:ed:7f:
                    06:2a:36:a0:7c:6b:b1:a3:d6:1d:68:fd:d9:4d:0b:
                    4d:69:3a:96:a3:9a:3d:f6:63:23:6f:55:fe:b5:ca:
                    a4:91:17:63:b7:a8:dd:a3:98:30:69:b7:76:7a:4f:
                    1e:86:de:9d:c3:92:e5:94:01:12:7b:07:f8:fe:95:
                    2c:0d:c0:8f:cc:0f:53:87:eb:56:b3:15:db:60:af:
                    e4:b3:f9:94:92:e3:32:a6:ec:71:36:fd:19:f2:3e:
                    10:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0B:0B:73:9C:D2:9F:45:45:2F:45:7D:ED:0C:AB:37:0B:63:5C:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/25d151f0-5c0f-3146-948d-00e1c8dc139b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:99:b5:6f:69:9e:7a:6f:0a:5c:96:fe:45:23:a0:8f:66:1b:
         b3:a2:f3:2c:58:36:e9:db:94:15:ff:7c:43:d5:19:71:9c:3b:
         80:43:ea:c3:24:0f:93:b9:5e:a6:ce:9b:62:04:21:b6:80:e7:
         80:25:ae:62:0a:48:83:6a:2f:f3:7b:04:87:64:1b:c8:95:ad:
         99:f7:53:05:3d:d0:48:c9:ba:26:c5:d5:ad:32:bf:f5:ee:e7:
         7a:93:b9:f9:96:7d:95:6e:a6:7a:a1:b6:f4:95:25:2f:32:ef:
         d2:4a:51:7d:f2:a3:83:3d:4d:9b:d0:fd:b6:fc:76:47:67:83:
         61:b4:e3:05:82:07:f3:cc:40:84:af:6b:98:29:eb:59:f9:a4:
         4b:94:33:e1:23:82:3c:16:30:9d:8c:2e:ac:1b:f2:43:3b:aa:
         34:cc:ae:3d:06:6d:f3:02:d0:48:f2:e0:ca:81:68:07:90:cc:
         47:86:c8:6b:27:5e:ec:25:40:a8:26:e2:8a:54:09:0c:93:32:
         3c:ef:0a:88:bd:82:33:8b:3e:a5:e3:ae:0c:ef:35:ca:a3:4c:
         ac:be:30:fc:32:e8:43:5f:90:ca:b7:24:57:fe:f8:8b:f3:67:
         3b:72:58:b0:03:33:3b:6e:80:35:1e:9d:3e:37:a0:fa:85:d2:
         04:7e:68:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:28 2024 by rpki-client on console-ams.rpki-client.org