Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/569d1a29-a9c7-33f8-beae-2aece4ea2526.roa
File:                     569d1a29-a9c7-33f8-beae-2aece4ea2526.roa (raw, json)
Hash identifier:          SO8MNOkF94jJ9+neRJk/AGHdT2/z3ywbWZPR/r0Z/Hc=
Subject key identifier:   F4:9C:51:5E:64:BF:AA:8B:50:AC:C3:4A:06:B1:80:73:50:9A:10:86
Certificate issuer:       /CN=ed8de71a-67d9-43ce-bbb9-c7974f6f8b23
Certificate serial:       010D0C9F432858481C5FFC9CE38D739041861600
Authority key identifier: FE:BC:48:C5:C5:67:DF:6F:50:F2:F7:3B:5C:CD:4D:90:27:8B:E7:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/569d1a29-a9c7-33f8-beae-2aece4ea2526.roa
Signing time:             Fri 06 Dec 2024 00:02:55 +0000
ROA not before:           Fri 06 Dec 2024 00:02:55 +0000
ROA not after:            Thu 06 Mar 2025 00:02:55 +0000
asID:                     46664
IP address blocks:        23.172.112.0/24 maxlen: 24
                          23.172.113.0/24 maxlen: 24
                          23.172.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:5f:fc:9c:e3:8d:73:90:41:86:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8de71a-67d9-43ce-bbb9-c7974f6f8b23
        Validity
            Not Before: Dec  6 00:02:55 2024 GMT
            Not After : Mar  6 00:02:55 2025 GMT
        Subject: CN=2b254b6b-62ca-4aa7-a3a3-9369d6297b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b2:23:75:4d:6f:8c:e8:18:15:ed:31:3d:87:
                    20:c7:71:22:b0:c6:59:07:a4:c2:ce:00:67:19:73:
                    db:80:6a:58:93:38:af:0e:ec:68:63:2a:46:7f:45:
                    d3:71:83:9b:d8:12:ee:c9:8f:7c:47:ec:d9:d4:c3:
                    a6:7d:21:78:bb:14:9f:ef:d9:e5:ad:09:7a:5c:79:
                    3a:d2:cc:4d:70:7a:b9:8e:24:43:f3:ac:a4:14:0a:
                    18:5f:f8:e8:35:22:2e:90:6b:c6:8d:fc:d0:f0:f6:
                    ac:8d:f5:b3:70:55:b9:92:d4:18:1c:f5:03:8f:8b:
                    ea:ff:44:71:83:d2:4f:d1:fa:0c:35:7e:33:be:c0:
                    d7:0e:51:8a:b5:65:3c:cd:89:d5:d0:6f:a7:00:38:
                    ea:76:e4:81:f1:72:90:ca:6e:57:17:6d:52:a7:fa:
                    8d:49:2a:88:b5:7c:d8:ac:ef:b8:54:73:e1:db:1d:
                    4b:f2:38:49:94:21:30:61:3c:85:c7:ce:0b:fb:b0:
                    e6:dd:66:4d:be:53:b0:2c:2a:ce:9f:6b:36:71:c1:
                    93:e8:bd:ab:06:c6:bb:52:e9:28:96:fc:99:4f:61:
                    5a:9a:0b:f7:e9:7e:be:f4:c9:3c:1e:6c:c7:4e:51:
                    0e:1e:0f:df:f2:f7:85:59:25:96:91:f6:b1:2e:7e:
                    31:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9C:51:5E:64:BF:AA:8B:50:AC:C3:4A:06:B1:80:73:50:9A:10:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/569d1a29-a9c7-33f8-beae-2aece4ea2526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.crl

            X509v3 Authority Key Identifier:
                keyid:FE:BC:48:C5:C5:67:DF:6F:50:F2:F7:3B:5C:CD:4D:90:27:8B:E7:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.112.0-23.172.114.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:dc:fe:34:5a:b8:18:2e:8f:ac:28:6f:9b:2b:1d:25:00:6c:
         21:fc:0d:58:a2:fd:dd:98:ae:a1:c3:a9:39:d3:d2:c1:79:59:
         71:52:c2:bd:f7:55:57:56:7e:09:02:58:da:02:da:9f:f2:1c:
         bb:da:3a:07:79:23:bb:ed:cf:23:dc:8d:96:6e:c0:36:6c:70:
         22:98:72:c6:6a:0e:3d:3f:ca:53:e3:0f:51:4b:de:d0:1b:84:
         8a:34:8f:b0:99:c0:cb:44:7c:6a:2f:a4:2f:76:03:f9:b6:f9:
         b6:61:d5:8d:e6:e4:f1:ac:22:74:40:97:38:10:6d:99:bf:c2:
         99:ef:a2:ff:ce:30:11:84:a8:14:15:94:76:a5:18:82:12:a4:
         80:66:a4:32:67:bd:b9:23:02:63:26:9a:bc:41:c8:5d:d4:33:
         39:fb:d3:ed:2d:8e:5f:97:b3:70:cf:33:06:03:02:eb:12:e7:
         2f:8f:5d:81:8d:bb:cb:84:31:45:58:c7:ba:b7:3b:6f:b5:f1:
         68:30:b1:49:c2:0c:90:73:8a:33:a1:1b:2f:5b:d9:46:a5:f4:
         88:0e:38:17:8c:64:4f:1a:7a:45:95:9c:45:f6:6d:b5:01:5e:
         69:74:c3:78:9b:14:59:23:77:b9:0e:d5:30:fb:64:fb:59:e6:
         88:59:84:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 02:57:57 2024 by rpki-client on console-fra.rpki-client.org