Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/16ea430d-5377-3810-a412-dca5c4682907.roa
File:                     16ea430d-5377-3810-a412-dca5c4682907.roa (raw, json)
Hash identifier:          VPzbti1LffpUc8Ye0PvTDWtoq/5wodZPgh9B0zpM+0U=
Subject key identifier:   92:F0:F7:85:E7:04:50:17:86:77:F0:55:A1:05:59:0C:AD:04:39:E9
Certificate issuer:       /CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
Certificate serial:       010D0C9F43285847299B268542126D03B222E200
Authority key identifier: D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/16ea430d-5377-3810-a412-dca5c4682907.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     46539
IP address blocks:        23.159.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:26:85:42:12:6d:03:b2:22:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=ab4297af-1a90-44e1-a059-6bac87082ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:e3:0c:6b:0b:38:e5:fd:49:6b:45:8c:94:
                    54:87:e8:0e:16:d3:d1:7f:b4:36:b0:8f:d6:b6:e8:
                    45:f8:61:e6:74:9e:1c:5f:1e:a8:fb:08:f6:68:8b:
                    44:f5:91:4d:24:85:ca:cb:dd:e1:8d:43:19:93:85:
                    85:59:32:36:21:e4:a4:bc:21:9a:83:c8:92:c0:26:
                    1f:58:94:65:bf:b0:33:e2:53:09:32:03:40:8b:5e:
                    8e:14:04:bf:7e:ec:4b:b8:29:ab:c7:f0:8f:e9:a1:
                    bf:da:08:b2:a3:3b:52:ba:89:d2:10:5b:07:58:40:
                    6b:4a:5e:c5:b3:52:f8:24:4d:2e:00:f8:fe:5d:a7:
                    cf:d9:ad:83:29:53:19:8d:70:39:9d:df:7c:12:8b:
                    25:65:24:eb:7b:b9:85:ad:8c:62:90:f7:50:a0:80:
                    24:20:65:ac:cb:b9:ef:9a:d0:fa:5d:55:b5:2f:32:
                    74:fc:68:a6:9a:aa:67:fc:8b:bb:76:91:96:3b:7d:
                    29:4d:cd:19:2b:1d:06:a7:a3:36:ec:66:43:fa:1c:
                    35:f6:a1:e9:44:c4:9e:f3:47:dc:4a:d6:38:91:2f:
                    33:8f:58:d2:00:56:ee:75:46:ba:00:97:eb:e4:c9:
                    7b:73:ab:a2:72:8c:2e:37:f9:7d:93:51:f7:8d:e3:
                    30:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F0:F7:85:E7:04:50:17:86:77:F0:55:A1:05:59:0C:AD:04:39:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/16ea430d-5377-3810-a412-dca5c4682907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl

            X509v3 Authority Key Identifier:
                keyid:D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:e8:cc:93:d4:31:03:2a:59:83:c2:3f:65:df:d9:59:b8:38:
         49:13:1b:d4:b8:bb:94:1c:96:02:7c:d6:c1:e6:9f:a3:76:68:
         d7:ac:37:71:59:19:5d:98:f5:d7:f0:d9:b2:b8:51:61:b3:94:
         a3:eb:2e:f0:d1:6d:c3:e6:c3:a2:23:63:ba:40:9b:53:60:47:
         cd:eb:f3:49:3c:c0:b7:d4:ad:14:75:6b:39:53:58:03:9c:0d:
         6d:54:e4:47:db:ec:da:de:d0:a5:87:42:61:51:f8:6a:86:ba:
         8a:d1:1b:67:4b:7e:84:c5:22:86:65:8b:2d:e0:78:53:85:a0:
         41:da:21:da:51:a6:fe:a7:93:65:d9:a1:c2:a3:bd:ed:ab:e2:
         40:21:27:1f:37:41:0f:0c:35:b4:88:62:61:14:54:89:f9:f3:
         5c:cd:5b:5a:0a:56:51:6f:af:3d:7b:2a:db:f4:81:6a:60:6c:
         05:0d:b1:2b:1d:fa:d0:1c:fe:70:60:6c:85:54:18:12:6c:3c:
         c6:fe:29:10:d9:70:59:b0:68:69:c1:f5:ab:d4:fe:f5:7f:aa:
         3b:27:bf:08:1c:2b:85:73:77:61:32:4b:34:88:66:9f:bf:ec:
         bd:04:71:80:2c:26:ef:0d:30:ce:cb:5c:f5:e1:30:e6:4d:ed:
         51:be:ae:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:36:43 2024 by rpki-client on console-ams.rpki-client.org