Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/1c565ec3-f89d-3f40-9504-a7c53ce73e16.roa
File:                     1c565ec3-f89d-3f40-9504-a7c53ce73e16.roa (raw, json)
Hash identifier:          j1L5UWyQovuG4bRoBzv18yIlNUkMiyOO+H1PaUqmFtA=
Subject key identifier:   0E:31:58:81:2E:51:63:90:AA:29:DE:7C:BF:71:53:A4:00:55:54:53
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F43285847643B78588B7F2432DCBCE680
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/1c565ec3-f89d-3f40-9504-a7c53ce73e16.roa
Signing time:             Tue 01 Oct 2024 01:00:31 +0000
ROA not before:           Tue 01 Oct 2024 01:00:31 +0000
ROA not after:            Mon 30 Dec 2024 02:00:31 +0000
asID:                     18526
IP address blocks:        23.176.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:64:3b:78:58:8b:7f:24:32:dc:bc:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Oct  1 01:00:31 2024 GMT
            Not After : Dec 30 02:00:31 2024 GMT
        Subject: CN=0cf05ea3-c5d3-461a-b490-ce7b33b5f4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8a:42:63:12:5c:36:f5:d4:2f:9f:fe:15:7e:
                    c5:9e:a9:6b:50:db:fc:52:a0:82:21:64:59:e2:54:
                    1d:d8:93:7f:e5:e2:54:dc:a4:76:13:48:c6:03:7d:
                    5a:c5:be:5f:47:41:65:8f:c4:13:9e:75:d7:3b:10:
                    02:49:0f:29:45:9f:02:64:88:8a:89:e8:c1:6b:ba:
                    a8:c7:12:5f:af:e3:1b:8e:6c:07:61:59:69:67:dd:
                    7b:9f:82:d6:ba:d5:3a:52:ed:6e:31:30:a3:5d:dd:
                    f2:49:e4:06:80:c3:3f:ad:32:2d:00:ba:66:d3:ca:
                    3d:46:4e:63:85:f7:fd:3c:3a:93:df:5c:99:27:4f:
                    06:84:93:18:bc:1a:2a:51:18:13:84:33:76:e0:41:
                    f6:21:d8:9e:49:0a:f6:ec:4a:58:d4:79:de:83:ab:
                    ce:7f:08:70:df:54:03:4e:d8:62:a6:23:0c:21:e5:
                    03:e9:8d:1b:3b:a5:4a:94:0f:5e:a2:84:34:5a:c6:
                    92:1e:5a:77:ad:b3:36:1b:48:25:d5:f5:15:62:dc:
                    96:7c:47:dc:5f:a3:5e:17:1a:6f:84:7b:c7:6c:84:
                    0b:a9:79:9e:25:dd:47:d3:9c:95:81:c8:74:26:33:
                    bb:fb:a4:1c:03:ce:42:84:21:38:ab:a4:ac:20:84:
                    dc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:31:58:81:2E:51:63:90:AA:29:DE:7C:BF:71:53:A4:00:55:54:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/1c565ec3-f89d-3f40-9504-a7c53ce73e16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ac:04:59:49:88:23:33:da:6f:9a:1a:9c:38:59:73:7d:46:
         aa:8f:ed:1c:da:90:bc:46:30:7c:5e:6a:e7:2e:9f:11:c4:41:
         49:31:07:83:f8:d4:a9:36:64:37:94:71:01:de:a4:a4:96:35:
         fa:53:aa:a7:15:d7:c3:92:7a:00:ab:7b:4e:ef:d8:54:ac:44:
         d8:d7:c4:34:ca:87:ed:f8:a5:7c:e6:00:a9:57:15:f8:93:7e:
         37:29:2e:46:92:be:61:70:5d:e5:fc:97:e0:21:37:5b:8f:34:
         93:de:21:63:1e:4b:73:b5:40:5a:70:db:c3:df:d2:b3:0f:35:
         b9:db:1e:4c:0b:db:0b:fb:b6:a2:05:56:61:99:bd:fd:d3:9a:
         db:b4:3f:54:b5:5a:cd:a9:c2:73:ba:2b:c1:ea:72:02:49:e7:
         c5:ce:6d:da:77:56:09:ae:5d:ad:e9:c7:f7:a2:20:82:c5:76:
         11:73:cb:70:49:2b:1b:df:07:62:e2:5b:47:14:d4:d0:5c:3d:
         c3:5e:dd:46:61:75:60:1f:d7:83:a4:14:7e:5a:11:e9:14:5b:
         2a:91:ba:9b:50:33:31:5f:21:c6:02:11:fc:f2:6b:da:89:c1:
         2d:42:50:3b:d9:72:11:14:f9:a8:97:85:d6:ce:37:1e:8b:4a:
         b7:b8:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:45 2024 by rpki-client on console-fra.rpki-client.org