Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/f8553b5d-807d-3297-a922-562a8bd98bc4.roa
File:                     f8553b5d-807d-3297-a922-562a8bd98bc4.roa (raw, json)
Hash identifier:          o6iV/f2cp00jyZ0btv+i0b2fjgmBC9FVOHsOF8kkYoM=
Subject key identifier:   F8:D8:B7:99:FB:18:58:4A:01:DE:72:7C:19:A8:74:0F:A3:C4:D2:A4
Certificate issuer:       /CN=7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56
Certificate serial:       010D0C9F432858481F652B3BDB749BA0FB8FEB00
Authority key identifier: 0A:48:B2:75:13:D3:0B:90:F1:F9:23:F8:EA:4D:77:B2:95:3A:E2:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/f8553b5d-807d-3297-a922-562a8bd98bc4.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     54364
IP address blocks:        23.173.240.0/24 maxlen: 24
                          2602:809:c000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:2b:3b:db:74:9b:a0:fb:8f:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=345efc87-ff01-44ff-9ccd-ffe5d01d1c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:6a:81:80:f4:09:70:95:98:b2:b8:9d:fb:
                    e6:7f:bb:92:64:82:89:a1:8c:68:81:fe:e7:96:e9:
                    9b:ae:f2:80:2a:ae:07:35:56:aa:a4:d2:f1:22:18:
                    ed:2e:6e:5b:b4:c3:0b:03:e2:f7:06:45:3b:92:91:
                    5b:20:51:65:f6:3e:53:25:ff:d4:4a:0f:dd:a6:15:
                    68:a2:56:87:67:54:36:81:ad:64:bb:be:79:c0:7d:
                    c6:28:db:44:3e:49:15:4f:6d:e5:3d:be:ff:40:64:
                    5a:ee:16:df:ac:df:79:22:d6:d1:82:07:81:20:df:
                    95:68:e2:4b:e7:2d:36:88:7f:00:d1:9d:d4:5a:55:
                    1b:db:17:9e:59:4e:ae:59:d9:8d:b2:7a:0d:f2:d9:
                    37:b8:c5:d2:20:6d:d8:e2:73:a5:ab:b5:ad:ee:79:
                    85:65:a1:ea:9b:7a:62:60:7d:f7:5c:66:63:34:db:
                    6e:00:af:26:62:9b:0c:cd:3d:eb:4e:32:ef:24:3d:
                    58:36:95:1e:d0:a8:fd:a6:7c:c3:dc:79:46:e9:40:
                    db:17:45:a3:6a:2e:26:83:c0:a2:99:47:9e:f6:09:
                    fb:4d:36:17:f0:46:b5:76:2d:b6:ca:0e:fb:4c:44:
                    fb:a6:ef:50:c6:66:d2:f2:4a:d7:31:0f:80:0a:47:
                    8a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D8:B7:99:FB:18:58:4A:01:DE:72:7C:19:A8:74:0F:A3:C4:D2:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/f8553b5d-807d-3297-a922-562a8bd98bc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.crl

            X509v3 Authority Key Identifier:
                keyid:0A:48:B2:75:13:D3:0B:90:F1:F9:23:F8:EA:4D:77:B2:95:3A:E2:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.240.0/24
                IPv6:
                  2602:809:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:95:33:13:53:d0:aa:27:fb:a5:ff:92:cf:0a:1d:4d:01:6c:
         02:9a:c1:19:c0:a5:70:92:54:f0:2d:b4:26:ec:ff:d2:71:b5:
         7a:13:bd:15:2c:ff:cb:8a:8d:ae:30:0f:64:88:12:29:a7:9a:
         bd:c6:16:84:9d:19:08:8e:9e:87:7e:c6:70:47:4f:b2:ef:74:
         e1:54:36:a1:56:6b:b5:eb:0a:bd:5d:2a:13:ec:d1:6c:40:d7:
         a8:75:f9:09:a2:42:a2:66:a0:a3:e3:5b:d8:f6:f1:c2:6e:62:
         d0:12:da:59:a6:ea:de:91:97:56:05:df:f8:72:3f:d8:8d:0c:
         eb:ec:25:36:b8:0b:f1:dd:dd:d4:f3:f3:8d:8a:8c:a7:91:22:
         86:47:fa:08:fa:fa:9f:30:3a:4e:b5:f2:9f:a6:65:03:d9:3f:
         e5:95:21:1e:1e:d7:7a:e3:63:1c:ce:2b:62:2f:a8:08:a1:86:
         98:bb:1a:b5:a3:fa:ff:c8:d5:1f:d4:c5:37:4a:7d:9c:86:c9:
         74:6b:81:20:50:da:a2:a9:05:17:68:47:32:e4:b5:38:94:ba:
         f1:7a:0c:27:2a:da:48:88:59:63:0d:91:bf:de:ee:39:5b:3c:
         e4:c8:51:85:ae:32:54:69:08:61:97:05:d4:2d:75:0f:df:2e:
         60:d0:22:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:33 2025 by rpki-client