Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/7f1e737c-bbf4-354b-8249-4f3d124c9b30.roa
File:                     7f1e737c-bbf4-354b-8249-4f3d124c9b30.roa (raw, json)
Hash identifier:          oKocjIysNfnRsKwDJQAIiL1laOzEIw7qmA1CE6naV1E=
Subject key identifier:   DF:9A:8F:94:6D:3D:8D:B5:4F:5B:B9:28:93:DB:04:2D:2B:B8:16:CB
Certificate issuer:       /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
Certificate serial:       010D0C9F43285847E303E438B7AAB88761C16B80
Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/7f1e737c-bbf4-354b-8249-4f3d124c9b30.roa
Signing time:             Fri 15 Nov 2024 10:56:17 +0000
ROA not before:           Fri 15 Nov 2024 10:56:17 +0000
ROA not after:            Thu 13 Feb 2025 10:56:17 +0000
asID:                     213856
IP address blocks:        23.151.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:03:e4:38:b7:aa:b8:87:61:c1:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
        Validity
            Not Before: Nov 15 10:56:17 2024 GMT
            Not After : Feb 13 10:56:17 2025 GMT
        Subject: CN=40cf7aa3-f25b-4ec0-871d-da3ff1fc5709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:49:ca:70:23:0a:7c:1d:5f:86:2a:35:d5:7d:
                    89:0f:d1:9c:55:6d:79:7b:02:cd:0d:cc:48:1f:71:
                    88:2c:68:71:bc:19:6e:d5:31:55:45:db:ee:cf:15:
                    62:65:37:96:cb:7c:fd:e7:87:08:7e:07:46:ff:fe:
                    22:f1:55:ed:d6:cc:1a:f9:a6:e6:5b:2a:5a:75:07:
                    40:80:e0:a5:6f:4f:26:07:a5:12:2a:fc:38:06:35:
                    ca:27:a6:69:43:8c:dd:96:60:b0:af:01:51:d6:03:
                    17:1b:28:cc:f1:bc:d5:89:23:03:be:84:cd:e6:8e:
                    aa:fb:5a:36:82:30:7e:6e:b9:08:7a:c2:44:c2:1f:
                    53:cb:9e:5e:f4:56:b5:16:4d:c7:63:66:3b:f2:22:
                    dd:4d:f2:11:90:ce:ae:ca:0b:e7:64:0f:ac:21:17:
                    9e:b0:11:a7:5f:21:cb:95:88:5b:14:07:0f:01:d2:
                    6b:43:9c:c3:b7:43:a8:5e:f2:e4:8b:cd:c7:0b:57:
                    ce:88:52:2e:cb:c5:ad:6d:e1:b5:c4:0d:93:a9:f4:
                    2c:08:64:6c:35:d0:fa:8a:30:5d:a5:39:e6:e7:34:
                    52:2c:2c:c4:23:d4:b5:92:1b:a0:0a:e0:d9:b5:3a:
                    a7:03:35:0b:f2:cf:67:9f:ef:75:49:2f:d9:2b:3d:
                    a6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9A:8F:94:6D:3D:8D:B5:4F:5B:B9:28:93:DB:04:2D:2B:B8:16:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/7f1e737c-bbf4-354b-8249-4f3d124c9b30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl

            X509v3 Authority Key Identifier:
                keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:21:2e:83:26:d3:50:28:bf:9c:4c:16:18:a9:7d:ba:e8:b8:
         50:b6:7f:c6:c4:bb:87:8e:29:e1:37:92:11:8a:1a:78:03:39:
         af:80:14:27:fe:d3:fe:ed:05:bb:37:88:14:b4:86:a7:ef:a0:
         a3:0c:36:ea:84:5f:2b:7d:4e:96:57:44:02:59:d8:6c:65:1f:
         c2:ac:a1:87:c0:fe:b0:e7:b3:21:9b:b1:88:55:db:18:c7:bc:
         c5:de:b5:4c:dc:e0:91:00:02:88:37:82:5a:a6:1d:c0:fa:8f:
         82:63:90:9c:69:cb:66:e8:2a:e1:15:9d:9e:5e:e0:93:84:ed:
         53:92:73:3f:5d:5c:a6:09:e0:90:c9:ef:b7:14:2a:d2:70:dd:
         58:5f:db:13:21:ee:64:a5:ce:5a:10:3c:e4:6b:83:09:17:1e:
         ac:cb:c0:fe:7d:6c:0c:38:7b:3d:be:d5:43:a4:3b:eb:79:f8:
         a3:0d:19:c5:11:ff:da:32:c1:ab:81:ab:c5:39:9f:be:6f:85:
         92:55:d6:d2:f1:44:af:d0:90:c6:90:89:1d:87:92:d8:a4:05:
         da:d9:2c:19:ed:aa:a9:f4:21:6d:59:8d:be:ab:29:40:28:91:
         f5:10:ab:12:99:55:bf:36:62:b3:b7:3c:be:bb:be:4c:97:28:
         e0:ce:af:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:07:05 2024 by rpki-client on console-ams.rpki-client.org