Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/61d1f620-1d7b-3891-85a6-9459d770a042.roa
File:                     61d1f620-1d7b-3891-85a6-9459d770a042.roa (raw, json)
Hash identifier:          a4//5imJAjbRL0syRJr48SyZDpPLvEoC3nEv9A6Y7tQ=
Subject key identifier:   FA:A4:18:4E:DF:C7:E7:A2:2C:A9:3C:A6:CB:2B:45:A9:E0:1B:78:95
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285847362B63C279BA32B663BDF140
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/61d1f620-1d7b-3891-85a6-9459d770a042.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     393886
IP address blocks:        23.19.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:63:c2:79:ba:32:b6:63:bd:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=b012b30a-d9b4-4de3-a6ac-3f126e7a1964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c2:2a:e2:b5:a2:6c:f8:9a:eb:5f:53:60:b4:
                    14:69:fd:05:1d:9e:6d:96:76:de:c3:70:87:61:07:
                    da:8d:96:5d:be:2e:62:61:3b:62:2f:ee:25:06:5d:
                    a2:d4:9a:ca:43:a5:3c:26:a2:0c:69:f5:27:ba:37:
                    93:6f:c4:7b:96:62:59:c1:5d:e2:2e:28:2c:8d:f6:
                    8b:eb:75:ac:cd:11:fe:a8:76:66:5c:8e:3d:9d:a0:
                    b8:9a:9e:4c:b9:ab:4b:ba:af:55:a2:d0:b2:8a:68:
                    c9:54:dd:f9:dc:f1:25:ef:58:85:e9:47:0a:e7:8c:
                    83:f9:87:fe:59:14:b8:9f:9a:9a:a4:39:00:a6:fe:
                    6c:39:3c:7c:10:f1:99:78:9e:76:70:0e:4f:bf:a5:
                    22:e5:23:3f:91:fc:da:55:ac:cd:a8:ac:b9:d5:62:
                    bf:49:c4:47:8d:7b:53:ec:5e:9f:ba:75:dd:2a:34:
                    c7:ce:7a:73:0d:16:11:d9:78:fa:c9:39:dd:0b:43:
                    1c:34:01:97:21:88:14:d0:1d:72:2d:d1:9c:c9:3d:
                    73:71:c4:62:21:dc:11:36:82:6d:5c:43:0b:5e:cb:
                    20:51:19:81:53:68:f5:1d:00:7e:9f:ca:62:39:40:
                    f8:27:9e:38:c0:71:e2:4a:de:6f:41:dd:9c:d8:9e:
                    04:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A4:18:4E:DF:C7:E7:A2:2C:A9:3C:A6:CB:2B:45:A9:E0:1B:78:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/61d1f620-1d7b-3891-85a6-9459d770a042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:41:6a:f6:02:ff:74:71:c0:75:c8:02:08:23:d8:a3:7f:12:
         b0:c7:6e:96:f2:f8:99:f8:b5:82:4e:1e:50:90:f1:69:ef:19:
         50:e2:23:8d:7d:da:22:9c:aa:13:be:8e:64:30:3d:fa:48:e5:
         ab:87:3b:73:77:2e:7a:7f:25:e3:4a:af:56:51:c3:5b:c1:13:
         21:17:19:66:f5:f7:5d:f7:b5:67:cb:fd:77:fe:3b:f9:70:9f:
         a8:df:d5:53:88:9f:f0:2b:44:bd:23:69:b4:ca:36:2d:f7:ba:
         0a:22:5a:9d:64:e5:86:6f:c4:9b:a5:9c:39:05:a7:cf:1c:4e:
         ea:3c:35:3a:5a:79:2d:04:cd:b6:59:6a:cc:69:6f:13:d7:d0:
         40:8f:cc:b9:57:d7:de:14:70:11:83:9c:f3:c3:2d:c4:2d:41:
         21:66:e6:9f:23:35:47:f5:27:88:36:56:c4:65:c9:15:fc:38:
         a5:9b:ad:0a:a9:ae:57:bf:02:35:e0:18:fa:3b:b4:c5:ab:f1:
         d9:00:ab:ea:fb:82:db:ee:b0:d4:c8:88:30:e7:26:76:ad:ee:
         19:e4:f5:fa:01:bc:d7:6b:69:dc:34:98:59:2a:94:ad:45:cb:
         b3:cb:09:56:d5:1e:06:1f:55:01:8b:70:8a:2f:8e:de:d0:b6:
         55:a3:63:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org