Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/41a20fa4-6783-3fc5-a585-b5d19d51ab5b.roa
File:                     41a20fa4-6783-3fc5-a585-b5d19d51ab5b.roa (raw, json)
Hash identifier:          szvmiRPmgngrI425Ws1q/Kimx0Iw2fAkUWzLjqorFC8=
Subject key identifier:   03:85:26:58:4F:AF:0F:38:2B:11:02:A7:F6:8A:5F:19:FC:68:33:3F
Certificate issuer:       /CN=743065a1-7855-4be2-941a-23bce4898410
Certificate serial:       010D0C9F43285847AE36C2E550FA606716831E00
Authority key identifier: 1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/41a20fa4-6783-3fc5-a585-b5d19d51ab5b.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     209242
IP address blocks:        23.145.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c2:e5:50:fa:60:67:16:83:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743065a1-7855-4be2-941a-23bce4898410
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=ebf15509-e63d-44ad-b1a9-1a1d441f83b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1e:8c:92:80:63:f8:b2:6a:af:c3:1e:a8:4c:
                    7c:55:f3:34:17:e4:d2:55:e4:6f:8a:3f:62:fb:7b:
                    1a:97:05:e0:d1:ef:5a:05:ae:20:42:72:b8:7c:6f:
                    63:87:82:f8:27:10:d9:46:9f:d4:5b:ab:9a:35:54:
                    db:28:f2:e0:4d:47:61:18:6f:3e:99:6e:af:ac:56:
                    0f:1b:57:34:7d:0e:d9:15:b5:ca:f5:10:c2:cd:b8:
                    fc:46:4b:a3:96:18:de:22:32:0c:ee:2d:cc:0e:27:
                    32:ce:1c:76:a5:46:03:bd:95:1f:42:33:08:ea:54:
                    69:dc:c7:fd:6f:16:6b:0c:14:74:e9:ed:10:e2:a1:
                    cf:a5:40:ac:01:49:91:21:44:12:19:dc:cf:a8:7f:
                    62:d3:85:d5:bc:23:06:90:d8:f2:f4:c2:a9:4e:39:
                    23:2e:4e:39:29:a8:ef:dc:c7:11:87:ac:33:9d:b8:
                    c7:e8:6e:19:e8:eb:a9:ae:81:21:f4:8d:38:f8:0d:
                    a4:67:d0:4d:f4:67:3d:2b:99:22:dd:df:25:ac:d8:
                    d6:0c:27:3b:c5:ec:67:41:62:e8:8b:4b:bf:db:a9:
                    f4:43:79:b3:29:a3:16:7b:ed:ae:0e:93:46:08:47:
                    8c:50:9c:96:34:75:ea:63:95:ca:cc:1d:7b:ac:a8:
                    14:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:85:26:58:4F:AF:0F:38:2B:11:02:A7:F6:8A:5F:19:FC:68:33:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/41a20fa4-6783-3fc5-a585-b5d19d51ab5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl

            X509v3 Authority Key Identifier:
                keyid:1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:4c:df:0d:f2:93:03:d8:79:75:5c:ee:26:1f:85:00:e3:01:
         b8:bc:44:4a:fd:49:5c:92:00:1a:d4:3a:90:5a:0a:52:64:93:
         a1:c1:1e:71:df:11:0d:39:6b:4a:84:61:69:55:cb:61:f1:f3:
         04:7f:fe:4b:92:39:f3:25:94:2d:e2:cf:d2:f6:9d:db:76:e0:
         9e:aa:c5:60:93:bf:a1:81:35:7b:66:33:d0:0c:99:92:4d:ef:
         9f:6a:6b:91:16:44:a9:a2:25:2b:75:46:de:5c:af:a9:ac:97:
         5a:15:04:62:d3:43:a5:96:d5:26:53:e0:a1:39:d5:fe:89:96:
         41:d7:58:5d:4a:4f:5c:8a:3b:c7:e1:b8:cf:26:7b:7f:c0:b3:
         aa:71:d9:c5:ec:8a:af:49:35:74:05:f7:3d:67:53:03:b8:de:
         d6:50:b4:7e:c6:a9:f5:04:0a:03:79:e9:b2:77:f9:6f:2c:c1:
         7a:f9:fc:e9:0b:5f:5d:46:31:0d:0f:af:d5:fd:49:40:40:38:
         81:d1:03:6b:ae:5b:0f:08:fe:a3:40:0e:01:a1:77:4b:e4:1b:
         42:da:50:08:51:c9:8f:93:1d:68:1e:15:28:06:9f:a0:71:d7:
         33:2d:0d:30:9b:82:b6:e4:33:c7:92:66:dc:d3:cb:c5:cc:9e:
         81:ae:98:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:16 2024 by rpki-client on console-ams.rpki-client.org