Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/472bc3f4-23c3-3e51-ab94-1cadebdf4079.roa
File:                     472bc3f4-23c3-3e51-ab94-1cadebdf4079.roa (raw, json)
Hash identifier:          M8mkTs54eieD4k/Dh4qWyMc4Q9pgXocV39Yc5J+C7MU=
Subject key identifier:   A3:5C:6A:6B:4B:B6:3B:72:1A:A5:8D:50:7F:D5:D0:6E:97:4E:A7:CA
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285847841558A62947AE307F507700
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/472bc3f4-23c3-3e51-ab94-1cadebdf4079.roa
Signing time:             Sat 12 Oct 2024 10:49:40 +0000
ROA not before:           Sat 12 Oct 2024 10:49:40 +0000
ROA not after:            Fri 10 Jan 2025 11:49:40 +0000
asID:                     30058
IP address blocks:        23.237.47.0/24 maxlen: 24
                          23.237.62.0/24 maxlen: 24
                          23.237.78.0/23 maxlen: 24
                          23.237.88.0/23 maxlen: 24
                          23.237.144.0/24 maxlen: 24
                          23.237.145.0/24 maxlen: 24
                          23.237.146.0/24 maxlen: 24
                          23.237.160.0/23 maxlen: 24
                          23.237.202.0/23 maxlen: 24
                          23.237.251.0/24 maxlen: 24
                          23.237.252.0/24 maxlen: 24
                          50.7.64.0/22 maxlen: 24
                          192.240.98.0/23 maxlen: 24
                          192.240.112.0/22 maxlen: 24
                          192.240.118.0/23 maxlen: 24
                          198.255.22.0/23 maxlen: 24
                          198.255.124.0/24 maxlen: 24
                          216.227.138.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:15:58:a6:29:47:ae:30:7f:50:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Oct 12 10:49:40 2024 GMT
            Not After : Jan 10 11:49:40 2025 GMT
        Subject: CN=d558c6f1-336d-4b5f-8bbf-c8eee35e8472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:1c:8c:06:31:a0:15:cc:d3:49:c1:cf:51:
                    de:aa:2c:12:90:b3:57:08:e6:b1:01:9d:10:dd:9a:
                    d4:7a:dd:a7:12:db:d8:a8:c5:e5:0d:20:35:96:89:
                    11:8b:ed:6d:41:f8:ce:3c:79:3d:27:79:84:2e:41:
                    9d:98:87:fb:03:72:ff:85:ae:0c:aa:48:46:7e:bd:
                    79:e0:dd:7d:c5:73:b3:04:29:4b:32:6b:ca:83:0f:
                    66:7e:4c:32:d4:b2:14:ea:f0:b8:ec:fd:59:45:51:
                    3f:8d:cc:b4:a6:1f:73:bc:15:6a:6e:8c:3b:54:0a:
                    b2:38:30:f1:9e:08:3c:4f:da:b2:a5:09:62:8d:f8:
                    87:32:06:7d:15:67:07:b7:46:79:a4:ad:fc:98:6c:
                    87:3d:3b:e0:12:a5:d5:94:65:f1:97:19:e1:80:a6:
                    cc:43:1c:38:aa:c1:0b:77:fc:16:66:37:85:ac:83:
                    1b:21:01:d4:0d:8b:4b:fe:31:6c:af:41:21:3a:05:
                    95:f9:3e:55:ed:fb:14:b4:d3:61:1d:6a:e3:77:ca:
                    a3:69:f6:34:7e:2c:09:b0:be:b8:99:6c:77:01:a9:
                    8c:8f:99:66:f8:2a:6c:ca:65:ab:50:1a:45:10:b3:
                    78:a0:6b:64:06:b9:cb:11:3e:2c:32:3c:a5:c7:2e:
                    c0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5C:6A:6B:4B:B6:3B:72:1A:A5:8D:50:7F:D5:D0:6E:97:4E:A7:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/472bc3f4-23c3-3e51-ab94-1cadebdf4079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.47.0/24
                  23.237.62.0/24
                  23.237.78.0/23
                  23.237.88.0/23
                  23.237.144.0-23.237.146.255
                  23.237.160.0/23
                  23.237.202.0/23
                  23.237.251.0-23.237.252.255
                  50.7.64.0/22
                  192.240.98.0/23
                  192.240.112.0/22
                  192.240.118.0/23
                  198.255.22.0/23
                  198.255.124.0/24
                  216.227.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:30:e7:c5:6c:fc:e3:dc:8a:77:27:75:9f:e5:90:43:f4:a0:
         e4:33:57:0c:04:29:5f:a9:b2:f3:fc:6a:e2:70:af:03:9f:e9:
         ae:c7:dd:81:b6:df:f5:82:0f:67:a3:53:6b:79:59:73:9f:e7:
         93:21:93:6d:e1:b6:53:3f:bb:c2:91:8c:36:a7:4b:22:57:4d:
         f1:6d:7b:5e:4a:9c:a3:e6:b0:07:50:02:79:e7:46:2f:67:1a:
         dd:0f:94:13:49:28:0d:c7:6f:36:e5:f4:7e:d6:ee:d6:53:32:
         5b:99:40:46:f5:30:bb:49:e6:5f:eb:8a:f8:40:fe:01:2c:42:
         d9:bb:19:6d:ba:8c:8b:6a:41:71:7c:52:ef:c0:bf:1e:ad:65:
         50:ba:ce:1e:16:e1:53:03:65:8b:3b:81:a2:7c:7a:93:db:9c:
         3f:3c:70:5a:d7:b3:51:ec:4b:25:9b:88:d0:a6:20:41:f7:3d:
         1e:8b:25:a9:53:b4:5e:b8:44:2c:7c:a7:c4:77:82:3c:0d:ad:
         8c:0b:e6:a8:4f:dc:e9:80:d1:d9:10:9f:7f:20:e4:57:a7:85:
         f8:f7:d4:09:b2:8e:76:a4:30:20:1b:1d:28:bf:b9:fb:6d:e0:
         b9:9f:22:e9:27:4a:45:13:b4:57:87:31:2c:b0:70:de:bf:c6:
         66:ee:a1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:17 2024 by rpki-client on console-ams.rpki-client.org