Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/0fed81d4-a0d2-3f8c-86d1-9f6c467fcf89.roa
File:                     0fed81d4-a0d2-3f8c-86d1-9f6c467fcf89.roa (raw, json)
Hash identifier:          73LxjZuFxywrROBxTOUZh3zYkO/1mgQnxqKe+cA48I0=
Subject key identifier:   7C:38:B0:57:A4:28:BC:0B:B5:38:5B:C3:C1:30:B0:7F:EC:33:EC:A3
Certificate issuer:       /CN=e0d54f0d-8151-4500-80b5-008165b77555
Certificate serial:       010D0C9F43285847766108126D60861088240F80
Authority key identifier: 6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/0fed81d4-a0d2-3f8c-86d1-9f6c467fcf89.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        173.241.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:08:12:6d:60:86:10:88:24:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d54f0d-8151-4500-80b5-008165b77555
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=d4cf23ab-f0c3-4750-bba0-ec1d74328c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e0:83:a2:14:f3:d0:b0:a9:e8:63:37:cd:2a:
                    e5:91:7d:3e:f0:51:15:4a:22:5d:52:94:51:54:07:
                    f4:1a:db:34:79:ff:30:c1:57:20:d5:d8:a1:b8:d7:
                    b3:1b:4b:9c:f0:a7:7b:de:ab:1e:57:2e:32:00:1c:
                    21:3d:53:1e:09:42:28:4d:f3:f4:46:fb:3f:ca:b6:
                    b6:f1:a8:22:c2:44:29:84:65:05:b7:df:cf:e3:f7:
                    34:7d:be:1a:ea:ce:53:62:57:58:16:47:ac:de:61:
                    47:2f:c8:68:32:79:60:9e:c7:17:4a:d2:a9:43:74:
                    c3:e7:83:67:7a:cb:55:1f:0e:2b:f3:da:d5:9a:23:
                    20:33:9e:9e:1f:1a:b6:34:32:10:77:1f:4f:c4:d5:
                    83:7e:75:f7:9f:14:82:5a:44:5f:98:04:29:8e:e5:
                    d2:8f:ae:2b:a5:95:32:0e:b8:d3:80:d7:3d:91:a8:
                    9b:08:8c:c6:15:e9:c9:af:6a:05:a0:8c:d6:68:d1:
                    54:66:e7:8c:21:db:bc:87:28:e5:2b:46:5c:d1:c0:
                    d2:f4:26:c2:1e:b2:4b:b1:df:22:39:33:eb:1d:1a:
                    1e:f2:9f:c7:fd:58:f0:c3:92:6b:c8:5f:a8:ed:72:
                    7d:59:1e:e1:55:94:78:61:b4:8c:20:0b:9f:22:59:
                    b5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:38:B0:57:A4:28:BC:0B:B5:38:5B:C3:C1:30:B0:7F:EC:33:EC:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/0fed81d4-a0d2-3f8c-86d1-9f6c467fcf89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl

            X509v3 Authority Key Identifier:
                keyid:6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:16:1d:27:24:53:33:9b:7f:f6:0b:c2:1f:37:9a:b9:97:fe:
         29:06:d1:c6:13:3a:f0:62:7a:d7:6d:e3:93:eb:e5:cd:46:f4:
         2c:84:b7:71:5f:45:31:c4:5a:60:eb:30:b1:1a:0d:7a:08:a0:
         ee:7f:60:e3:5c:f2:c6:49:de:cb:ab:a0:b2:46:16:17:33:eb:
         55:51:d9:e0:96:5a:4a:29:c4:c4:a6:27:88:e9:0b:41:9d:52:
         ea:dc:d9:3c:16:00:48:cd:10:a9:60:fb:52:c1:7e:8a:d1:b9:
         23:96:27:8c:7d:0d:37:e7:e3:fd:09:ad:e6:b4:f3:8c:fe:a3:
         93:02:f5:d4:47:68:3b:55:3c:75:d1:f5:e6:bb:15:ca:4c:e8:
         7e:7f:a9:26:f3:a3:38:e1:14:18:8b:da:53:44:92:d8:59:fc:
         a5:be:61:2f:ac:d8:ee:59:4e:a8:11:0f:62:f1:e9:e8:46:a3:
         6d:ba:aa:4b:f3:c6:e7:04:a7:eb:82:ac:8f:53:33:f2:32:60:
         97:cf:13:04:a4:38:f9:8d:b4:5c:ad:51:64:a0:85:cb:36:81:
         5f:98:4d:cd:ee:29:a6:04:96:6e:a1:7d:fb:b1:4a:c9:39:32:
         e2:5f:94:11:d9:e9:fe:38:3f:82:ee:6c:61:d8:da:a1:60:9a:
         91:41:a7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:54 2024 by rpki-client on console-fra.rpki-client.org