Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370/d5703d72-6825-3763-a8ee-6ec90a3df4bd.roa
File:                     d5703d72-6825-3763-a8ee-6ec90a3df4bd.roa (raw, json)
Hash identifier:          K5Vhdlb3SGVA78QT1jZi3vsCtuETbXc39ijwANJ+wmI=
Subject key identifier:   51:22:E6:91:0D:90:87:B7:6C:88:A4:89:FE:89:09:CE:EE:FB:E5:D2
Certificate issuer:       /CN=6ea4077d-c1f0-46d2-b575-7da368923370
Certificate serial:       010D0C9F43285846DA0ABFB555DDB055F6D816C0
Authority key identifier: 69:ED:46:13:6B:C9:9E:A9:F8:F1:2E:36:8C:B6:D8:0C:F1:AA:52:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370/d5703d72-6825-3763-a8ee-6ec90a3df4bd.roa
Signing time:             Mon 12 Aug 2024 13:00:39 +0000
ROA not before:           Mon 12 Aug 2024 13:00:39 +0000
ROA not after:            Sun 10 Nov 2024 14:00:39 +0000
asID:                     397427
IP address blocks:        23.145.224.0/24 maxlen: 24
                          23.145.225.0/24 maxlen: 24
                          66.245.160.0/22 maxlen: 24
                          142.202.206.0/23 maxlen: 24
                          2602:fe4c::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370/6ea4077d-c1f0-46d2-b575-7da368923370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370/6ea4077d-c1f0-46d2-b575-7da368923370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:da:0a:bf:b5:55:dd:b0:55:f6:d8:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ea4077d-c1f0-46d2-b575-7da368923370
        Validity
            Not Before: Aug 12 13:00:39 2024 GMT
            Not After : Nov 10 14:00:39 2024 GMT
        Subject: CN=bc2d96b5-1827-429c-879c-d3e718631551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:3d:87:56:9b:b4:e7:c1:e7:1a:37:cc:64:
                    96:f0:87:0f:b4:25:02:a7:da:25:ec:33:8d:34:eb:
                    1a:8a:15:2e:97:e4:f7:35:71:0b:a1:54:f5:d0:f3:
                    59:4f:7f:e4:9a:81:f9:f9:d1:de:2d:08:fd:83:c7:
                    38:83:94:5b:52:df:ed:68:49:57:a5:51:97:b1:63:
                    a4:9a:2a:fc:4b:c0:3d:02:3a:cd:60:92:5d:96:c1:
                    6e:aa:1a:56:3a:0d:f3:cd:35:c1:6b:92:54:8a:00:
                    d6:85:21:1a:f6:9b:a4:43:fa:f2:56:7f:b9:df:49:
                    d4:08:40:7d:2a:6f:d6:81:67:63:b0:b4:98:73:83:
                    eb:37:23:de:4b:8b:a5:78:c3:57:72:ab:8c:08:a8:
                    30:ce:32:18:11:16:ba:e2:bc:20:11:e9:3a:5d:eb:
                    71:b3:9d:03:61:bc:63:b2:d5:15:2e:86:a1:fc:50:
                    20:67:f0:df:5b:f7:3d:96:ab:41:68:23:da:39:ad:
                    bd:08:db:f7:dc:84:b3:90:e6:7c:8c:54:18:c3:34:
                    93:42:30:58:c8:fe:2b:7e:1c:fc:31:f1:92:fe:f3:
                    31:88:ae:5b:d1:00:17:bd:9a:d8:5e:1f:b9:0c:91:
                    f4:8f:ca:6d:1c:ac:57:44:48:ba:be:f6:75:70:70:
                    62:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:22:E6:91:0D:90:87:B7:6C:88:A4:89:FE:89:09:CE:EE:FB:E5:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370/d5703d72-6825-3763-a8ee-6ec90a3df4bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370/6ea4077d-c1f0-46d2-b575-7da368923370.crl

            X509v3 Authority Key Identifier:
                keyid:69:ED:46:13:6B:C9:9E:A9:F8:F1:2E:36:8C:B6:D8:0C:F1:AA:52:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.224.0/23
                  66.245.160.0/22
                  142.202.206.0/23
                IPv6:
                  2602:fe4c::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:d3:43:3c:c6:cd:57:fc:3b:bc:3b:14:1e:81:c6:2d:36:40:
         4d:16:fe:fa:f1:8a:65:1c:3e:51:8b:53:9c:df:79:28:98:41:
         f6:26:b5:78:88:c6:bf:33:00:2f:ab:a4:69:03:7d:3a:d6:7b:
         8c:d9:a3:da:c7:56:32:a4:91:68:b9:38:f7:a1:57:95:cd:e5:
         2d:f3:29:90:01:58:11:8d:ad:5d:00:b4:cf:96:cb:4a:06:0c:
         7f:1f:60:e5:11:11:d8:62:c2:bf:19:57:24:44:9b:0b:e9:2a:
         06:bb:e2:bb:00:c9:0c:11:bc:73:3e:68:10:a9:a7:ea:23:eb:
         83:cc:eb:b1:ca:b5:f4:06:4a:5b:e5:a8:ec:70:6b:32:dd:0c:
         35:32:52:a0:51:5d:02:8f:c2:50:12:98:cb:f6:8b:f1:13:57:
         62:77:d0:e5:12:cd:a8:90:04:5e:eb:56:33:0f:21:50:4e:cf:
         9d:1c:18:11:30:6f:9b:91:d9:69:ec:ce:01:ff:21:69:f2:65:
         36:84:47:44:87:bd:3d:96:7e:2a:2f:1c:6e:29:87:d3:2f:c2:
         5c:8d:34:bf:8b:68:9f:bf:03:98:fe:7a:77:ad:0b:c2:65:1f:
         fc:b6:21:3f:51:a4:d1:8f:d1:9b:d5:fc:2c:26:3b:dd:ca:82:
         a1:6c:96:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 17:13:08 2024 by rpki-client on console-fra.rpki-client.org