Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa
File:                     3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa (raw, json)
Hash identifier:          GN/oMD5AEmXkOoXpkCB+t0aUzHPfHh4z/IQSTspz8EM=
Subject key identifier:   D9:13:55:6C:1A:B9:06:48:0F:DC:D4:9E:96:4D:51:EC:99:B0:BF:C7
Certificate issuer:       /CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98
Certificate serial:       010D0C9F432858479D76BD0E706093F161A02340
Authority key identifier: F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     53610
IP address blocks:        23.159.24.0/24 maxlen: 24
                          2602:fa53::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:bd:0e:70:60:93:f1:61:a0:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=f177ed0f-c61a-43da-b17c-2b03d3aacbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:37:be:58:26:2c:1f:95:f5:4a:9d:c7:69:c5:
                    14:f4:dd:08:64:37:fd:28:c2:41:77:29:cd:47:31:
                    b9:26:c0:b6:9a:25:69:b4:22:e2:6f:51:14:dc:5b:
                    cc:f8:d0:d2:b5:6f:42:8a:a6:53:a0:f9:74:bf:2c:
                    d5:23:2e:14:77:e8:d6:bc:a3:d2:63:ac:37:de:36:
                    a6:05:5e:b1:35:8a:3c:80:3d:63:bf:01:fd:72:e7:
                    54:78:1b:b5:7d:a2:0e:13:06:2d:01:b6:5d:d8:59:
                    28:a3:65:27:af:51:27:1a:43:0c:d2:b2:08:54:33:
                    0e:a8:3b:5b:3d:0a:73:83:21:fa:2e:9f:36:d3:46:
                    12:49:9f:f6:3a:e4:1a:ac:d2:b9:c6:d1:29:60:4c:
                    8e:51:07:e9:1b:d4:77:6c:c8:b8:ba:74:c5:e3:1c:
                    1b:0e:41:63:4f:94:b6:d5:d0:50:38:8b:4f:9d:e2:
                    05:d8:2d:85:86:3c:31:19:9f:55:ff:c2:7c:7a:86:
                    d8:bf:28:73:1a:09:73:a7:97:91:ab:24:b5:05:ef:
                    4e:64:91:6f:93:a3:e6:53:46:6b:d0:95:ba:63:e8:
                    fd:35:ae:3a:ff:88:5e:f2:28:ab:e8:1f:71:61:22:
                    14:f3:45:b9:65:1b:fa:4f:c3:48:0e:d8:f4:0d:72:
                    11:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:13:55:6C:1A:B9:06:48:0F:DC:D4:9E:96:4D:51:EC:99:B0:BF:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl

            X509v3 Authority Key Identifier:
                keyid:F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.24.0/24
                IPv6:
                  2602:fa53::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:69:29:f7:95:3e:52:cf:22:fe:fc:8f:fb:08:d4:69:98:c3:
         ef:f4:a6:26:99:43:2d:ce:ad:f5:8b:72:2b:8a:82:6b:f2:88:
         f6:b0:20:9f:62:c4:c3:3d:5e:ec:5c:ad:38:16:b8:f2:f6:0f:
         61:37:e3:c5:cb:82:f9:6b:7f:fe:01:14:5a:08:ab:02:dd:37:
         81:64:97:28:62:bd:62:f2:78:1f:a8:8f:56:37:c4:71:8a:5a:
         0c:e8:b9:40:cb:78:70:d8:5c:76:db:46:12:db:2e:10:62:6a:
         02:7f:bc:63:ef:37:cf:5e:9e:2c:01:e3:a8:f7:11:58:af:4a:
         d0:a5:c7:78:e0:a6:71:cc:46:9d:6f:17:9f:37:e2:19:ff:19:
         21:7f:23:45:b2:ee:c3:9a:7a:43:38:2b:ed:7f:6c:bf:03:cf:
         d6:c3:b1:c2:37:41:5b:94:75:1d:fd:42:e2:2a:ab:f7:42:27:
         e1:b4:c3:ec:7a:28:bb:b0:70:4b:63:cf:95:56:22:6e:d2:07:
         ab:13:75:b2:0f:54:a0:cf:19:c6:fd:34:83:87:c4:2b:0f:f7:
         7a:34:48:0f:7b:76:f5:0e:e7:db:74:69:5a:5f:fa:ae:e8:77:
         93:ca:b1:f6:b9:c3:d7:f6:96:b0:cc:59:85:70:74:0e:16:a7:
         b7:a9:17:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:58 2024 by rpki-client on console-fra.rpki-client.org