Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/43870171-fec9-3adf-a047-9532779804f9.roa
File:                     43870171-fec9-3adf-a047-9532779804f9.roa (raw, json)
Hash identifier:          Q3AXC+6B7QJybuenlIEkn2/+CRFd75qos3A13exugcY=
Subject key identifier:   5F:DD:43:9A:F8:AD:7F:4C:63:83:42:8D:F7:E7:23:4D:AB:16:C6:1D
Certificate issuer:       /CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d
Certificate serial:       010D0C9F4328584789EC01E6FEBE96D0F88B3980
Authority key identifier: C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/43870171-fec9-3adf-a047-9532779804f9.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     40924
IP address blocks:        23.165.24.0/24 maxlen: 24
                          2602:816:7000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:ec:01:e6:fe:be:96:d0:f8:8b:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=5eb6d70e-8f25-4883-ba84-2f83efc2d261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:d2:6f:69:88:46:61:8e:b1:f5:f7:3e:68:
                    d9:83:b5:b4:7d:20:b5:b5:4b:aa:05:09:f8:1f:94:
                    e0:cb:79:76:91:71:13:c8:66:e7:e0:04:af:19:f0:
                    96:83:ea:36:19:0b:b0:ed:72:7e:95:a3:8b:17:e8:
                    f5:d5:4f:8b:d3:75:66:a4:f6:b4:eb:66:58:b8:c6:
                    12:52:e0:4c:fd:6c:39:3d:48:f1:f4:3e:f4:d6:69:
                    f4:57:8b:39:c0:9a:cb:a1:56:c0:c3:d1:78:66:ed:
                    4b:41:7b:c6:3d:77:88:c6:b6:71:41:0d:3f:96:e0:
                    fb:23:bb:e1:87:de:05:76:48:84:bc:8a:48:25:86:
                    a2:ab:4e:d3:0f:d0:5d:0c:f2:82:00:8d:68:5d:ba:
                    ed:dd:b5:6d:8c:96:ad:48:80:a8:e4:16:6d:90:69:
                    85:97:32:48:7a:0b:0f:74:2a:60:51:bf:07:c1:17:
                    fc:44:7d:f6:1c:cc:04:c2:3a:f7:da:40:40:bd:75:
                    fc:97:42:87:56:80:b5:96:fb:e4:55:7f:10:da:75:
                    f3:4d:d1:af:43:ba:14:88:b1:cc:c0:6e:8b:18:ac:
                    c8:de:11:ce:71:94:14:9c:9a:96:16:b9:35:22:3c:
                    dd:cc:bd:46:e0:25:fc:cb:09:87:c0:fd:ab:49:d7:
                    e4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DD:43:9A:F8:AD:7F:4C:63:83:42:8D:F7:E7:23:4D:AB:16:C6:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/43870171-fec9-3adf-a047-9532779804f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.crl

            X509v3 Authority Key Identifier:
                keyid:C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.24.0/24
                IPv6:
                  2602:816:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:99:7c:77:3e:38:cf:cb:5c:86:f7:51:2a:a4:a7:bd:c5:c8:
         de:f7:a2:81:c7:6a:3e:93:db:9e:ca:21:b8:80:35:90:f0:69:
         bb:07:1c:43:af:89:62:f2:98:0f:fa:22:0a:a4:56:23:f9:a0:
         ea:09:0c:fe:4a:45:40:bf:fe:2a:18:e7:98:61:8e:9f:e0:b4:
         42:f8:b4:38:ff:5c:bb:b9:5f:5d:d2:2f:2e:aa:68:4a:9f:dc:
         2f:1f:e9:d7:63:78:9c:de:f8:c9:b6:b9:3d:aa:28:eb:bb:d0:
         11:a1:bf:f5:ca:2f:0a:02:f3:a1:4d:0d:91:82:91:8b:e7:22:
         61:1f:e4:6a:96:34:f5:c7:b6:ef:53:ff:b0:d7:7b:12:3f:8b:
         d9:3b:7d:0d:2e:40:d2:63:84:12:4c:e7:f0:a1:f4:5b:13:5e:
         7d:9e:32:57:66:e9:0d:29:5c:d5:1e:a9:d4:0e:7e:ec:6b:0a:
         b4:8f:4c:a5:13:c0:dd:55:2e:f5:f5:b3:86:77:6a:4c:50:cc:
         97:7e:22:f5:ea:31:3b:53:11:c8:4e:9d:2e:5c:d5:69:e1:ef:
         30:fa:61:32:0f:f1:d2:50:76:80:ca:fa:72:de:01:55:05:cf:
         13:ac:77:35:a4:88:df:db:29:cc:de:57:8c:03:6d:21:32:c0:
         56:71:30:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:46 2024 by rpki-client on console-fra.rpki-client.org