Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/42c863cf-672c-3dba-b238-a9738d249ba8.roa
File:                     42c863cf-672c-3dba-b238-a9738d249ba8.roa (raw, json)
Hash identifier:          0Mb8nFzUpmoo5IXM5MRDI/KFeRh8yq8whOKWduDbWlc=
Subject key identifier:   E4:1A:35:6B:8A:81:B5:74:93:17:AA:C6:5C:5C:A3:35:E4:1D:5F:C1
Certificate issuer:       /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial:       010D0C9F4328584795168E0CB88CA18773FA1740
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/42c863cf-672c-3dba-b238-a9738d249ba8.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     210630
IP address blocks:        23.137.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:8e:0c:b8:8c:a1:87:73:fa:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=d176b73e-68cb-4f44-9587-c09818318584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:59:7e:42:9f:ad:8c:e5:4a:a5:b8:90:2d:a2:
                    bb:db:2c:0f:4a:fd:84:e6:bf:99:17:bf:a0:a1:ff:
                    3a:59:7b:40:50:47:78:65:08:8d:ad:34:9f:a1:eb:
                    7b:3f:0f:81:11:44:16:60:1f:a1:f3:dd:62:1c:03:
                    28:4d:7f:3d:26:f3:6b:4e:57:fe:aa:30:8a:fb:9c:
                    26:94:23:25:eb:09:9e:c0:8a:db:2f:74:35:81:1d:
                    c5:b0:96:f4:60:5f:2b:e7:fd:1b:f9:44:fd:72:f6:
                    ac:96:d5:b0:2c:3d:ec:55:68:bf:0a:a5:c1:f7:21:
                    41:5b:0c:0a:20:ea:b3:5b:f6:67:f6:92:d5:ad:8b:
                    92:c0:47:40:d3:7a:d6:95:22:fa:82:f3:2a:c6:ec:
                    d4:08:87:7a:35:b4:02:cd:9b:24:d1:b7:3f:1d:1e:
                    ae:79:4c:f4:5e:5f:22:d7:97:1c:0e:9d:b2:76:a6:
                    be:69:a1:4e:e3:f0:a6:a7:81:31:8d:49:e8:26:87:
                    39:94:a9:d0:ef:f6:34:85:fc:04:ed:fb:63:87:b6:
                    96:84:d9:ab:c4:a3:de:fd:f8:1f:a8:b2:5f:5d:ad:
                    7b:a7:d0:62:4a:bb:f1:c6:b5:b3:73:ab:d8:bc:9c:
                    5e:0e:5c:23:84:05:25:77:4b:5a:61:92:4b:19:c8:
                    d8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1A:35:6B:8A:81:B5:74:93:17:AA:C6:5C:5C:A3:35:E4:1D:5F:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/42c863cf-672c-3dba-b238-a9738d249ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:8a:e7:d7:13:8a:93:4a:0c:12:b2:89:d2:3e:79:25:60:ab:
         b3:10:cc:2a:3f:f2:79:03:c4:41:b0:4a:a3:05:18:a6:0b:82:
         b6:93:dd:ce:2c:17:47:c2:e3:90:17:a9:ac:1f:c0:0f:43:2f:
         0e:72:c4:c4:de:b1:03:23:0d:3e:fc:38:fc:de:db:36:ec:37:
         ae:29:0e:3b:1e:6f:c4:d4:84:3f:71:4f:db:35:bc:cc:ee:c2:
         9e:06:51:26:4c:c5:64:2f:9b:36:e2:94:ff:c0:16:b7:92:1c:
         56:b9:e4:5d:93:6e:d4:2c:69:db:03:0e:aa:bb:55:4f:cc:bc:
         a0:84:f7:1d:cc:de:80:1b:aa:9e:c9:c6:be:a6:92:08:53:8d:
         5f:d2:bb:34:2b:88:c1:0c:d4:de:43:12:d8:4f:2e:6a:1b:c3:
         63:58:f7:e8:3e:e8:49:56:33:e1:4e:ea:50:63:36:04:1a:3b:
         75:90:b5:31:73:bf:38:2b:c3:9b:7d:09:df:7d:17:8d:d0:24:
         d6:04:a3:4f:2a:4e:14:8c:e3:b3:c3:59:59:16:0e:eb:79:a7:
         08:91:b4:93:7f:99:3d:7d:8c:d6:1d:3c:de:05:66:16:4a:88:
         ce:ed:45:1e:e7:50:96:63:8a:1b:f1:6b:21:07:ab:47:ae:ac:
         4a:e3:b4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:29 2024 by rpki-client on console-ams.rpki-client.org