Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c52eefb8-44ff-3a80-a24e-0665d5a3ec15.roa
File:                     c52eefb8-44ff-3a80-a24e-0665d5a3ec15.roa (raw, json)
Hash identifier:          TWYaB0uOgLCctSL/+UX9cr2eZoh2d+b79x2L0cU6Ndw=
Subject key identifier:   BD:40:5D:15:5F:9B:B9:17:B6:6F:4F:42:F3:6E:8C:BE:43:C9:36:2A
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285847362B5EA91BC1126C3153E080
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c52eefb8-44ff-3a80-a24e-0665d5a3ec15.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     19148
IP address blocks:        23.19.52.0/24 maxlen: 24
                          23.19.53.0/24 maxlen: 24
                          2607:f5b5:2::/48 maxlen: 48
                          2607:f5b5:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:5e:a9:1b:c1:12:6c:31:53:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=89e9ad7e-927d-4809-8044-168ebc1ea322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:a1:d9:fc:14:46:5b:6c:7b:6d:61:1f:29:
                    15:57:f7:b2:1b:76:8a:44:34:cf:fe:28:91:86:8f:
                    0a:11:a7:16:61:fc:6e:3f:7e:7d:20:6c:2f:5a:65:
                    80:0a:15:99:73:1b:6e:6d:0c:04:91:a8:e9:e0:5f:
                    41:b3:eb:75:e7:7d:68:53:b7:f4:c6:68:f8:a8:38:
                    cc:ae:a1:4d:f2:0d:9c:ad:d6:7e:83:c1:89:0e:55:
                    50:b5:1e:d9:b2:84:f1:8c:90:96:d7:92:aa:84:4d:
                    ff:4d:8c:c2:5c:24:fe:51:00:ca:26:16:aa:53:1e:
                    71:43:62:c8:06:50:61:4e:8b:f5:95:9f:d8:a1:3d:
                    e5:08:34:ff:b2:63:ea:5e:a3:41:e8:b7:6e:8f:1e:
                    5b:5d:08:e3:72:16:ed:14:95:27:10:16:89:ca:f8:
                    25:87:46:1d:17:15:a2:72:d3:3c:4c:ba:24:7f:0b:
                    4b:94:ff:71:0e:03:e4:54:3d:99:f0:d6:a0:9b:ca:
                    98:43:8a:e1:63:20:e2:88:a4:45:49:6e:56:62:c8:
                    71:bc:35:ba:28:9e:9b:93:bf:1d:82:65:07:71:30:
                    e0:e4:8a:ac:4d:f7:07:95:82:5e:7a:93:95:7b:a6:
                    0b:a7:12:7c:03:cf:8d:bf:bf:1b:a8:85:69:b7:61:
                    57:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:40:5D:15:5F:9B:B9:17:B6:6F:4F:42:F3:6E:8C:BE:43:C9:36:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c52eefb8-44ff-3a80-a24e-0665d5a3ec15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/23
                IPv6:
                  2607:f5b5:2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:7c:c0:64:d6:0b:83:d6:5f:80:92:2d:b9:4e:de:5f:09:fa:
         8e:2f:22:fe:08:7c:5d:51:7b:f1:b4:51:2e:8d:84:33:1d:ed:
         71:6c:9c:a5:1e:66:af:92:60:0b:23:f5:65:4d:ca:ac:e9:20:
         32:ca:3a:50:81:a5:82:bc:aa:25:ae:70:c0:79:48:14:ba:10:
         72:68:c3:b2:20:14:92:10:62:d7:ea:00:8b:24:80:be:50:c1:
         d5:54:cc:cf:e7:69:3c:e4:24:3f:43:a8:f6:f7:aa:1a:b5:b1:
         d0:bb:2d:e4:96:48:5b:b4:ba:6d:23:3e:7f:1e:b9:9f:a5:7b:
         45:2c:21:4a:7b:a4:86:bf:bb:5c:6a:02:63:36:3d:3c:09:1b:
         14:e3:c2:2f:d1:0a:55:96:08:76:bf:11:db:92:8a:22:d6:88:
         e2:0d:56:ca:8e:17:b5:e7:7a:99:c6:f4:85:a3:bf:4f:29:ae:
         1f:52:6a:ad:e4:04:8a:aa:0f:c3:05:80:29:82:da:95:c4:41:
         46:36:c3:75:91:ff:e5:29:07:f6:ce:73:e7:d0:02:39:0b:18:
         a7:a3:bd:15:ed:f4:80:fd:4f:41:5a:09:f0:ce:49:8a:b6:2a:
         e7:68:8e:d3:d7:84:51:78:25:12:63:32:df:a6:9c:65:d9:80:
         ca:18:99:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org