Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2f64399-183a-3ce1-8f6d-55aa64d82c6c.roa
File:                     d2f64399-183a-3ce1-8f6d-55aa64d82c6c.roa (raw, json)
Hash identifier:          7ilssbOwXzUZjwzYAl/kditrWLEWViOOEUTwkiKXXss=
Subject key identifier:   A0:30:42:CA:D7:35:AC:DB:DD:63:82:8E:B6:99:5F:9D:0A:E1:56:A7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845CE183E223471FB41B8E670C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2f64399-183a-3ce1-8f6d-55aa64d82c6c.roa
Signing time:             Wed 08 May 2024 13:31:26 +0000
ROA not before:           Wed 08 May 2024 13:31:26 +0000
ROA not after:            Tue 06 Aug 2024 13:31:26 +0000
asID:                     20940
IP address blocks:        23.32.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:18:3e:22:34:71:fb:41:b8:e6:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  8 13:31:26 2024 GMT
            Not After : Aug  6 13:31:26 2024 GMT
        Subject: CN=f9bf6ea2-1fc1-4402-bccb-1e4f970d7cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ba:be:c7:62:a7:05:5f:cc:22:11:be:ab:97:
                    a3:32:48:49:91:75:47:75:bc:fb:ee:12:fb:b3:0a:
                    cb:d7:fd:31:e5:5f:0c:51:a9:89:b7:10:5c:04:4f:
                    0b:ed:1f:86:77:c2:65:73:a9:48:e4:5f:5c:60:70:
                    ec:c8:a1:15:ae:4d:3a:67:c3:45:84:e4:0f:3b:8e:
                    25:fd:6e:fb:08:16:ec:62:6a:ec:e5:65:ae:50:a2:
                    2b:8f:28:74:58:94:3f:18:50:91:a0:d1:14:a5:79:
                    02:4c:66:b3:26:26:bb:2f:3e:17:c9:e2:2f:23:fc:
                    65:29:d5:bc:3f:e6:27:12:e8:83:52:46:c7:02:b0:
                    e7:8b:f9:2a:58:f3:a2:21:22:d7:20:96:84:c7:f5:
                    61:bb:ec:b3:21:17:ff:74:4e:93:82:a9:ca:c3:9e:
                    46:23:02:f9:00:db:ab:33:25:22:95:28:19:f1:7f:
                    31:b6:d0:c5:f3:e0:74:c1:bf:1b:6b:4f:6a:26:11:
                    f2:33:9d:16:37:9b:eb:83:ac:93:a6:01:17:86:83:
                    1d:f9:70:31:ee:04:30:2b:a8:bf:37:15:a1:fb:3a:
                    d0:a0:4e:c1:c3:1d:4a:da:f0:ed:a0:9c:df:da:25:
                    56:8d:93:1e:17:d2:3f:af:d6:f0:10:a3:9b:dd:a4:
                    39:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:30:42:CA:D7:35:AC:DB:DD:63:82:8E:B6:99:5F:9D:0A:E1:56:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2f64399-183a-3ce1-8f6d-55aa64d82c6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.32.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:00:9a:1e:27:78:c1:28:23:44:6d:1f:cf:92:ed:10:06:86:
         fc:20:ac:29:c9:6e:77:dd:4b:03:07:a1:dc:f7:d0:22:2a:78:
         98:bd:92:b6:c8:aa:ed:e3:1c:17:99:e9:5d:d4:56:cf:2a:c7:
         83:33:b0:f4:83:69:42:59:1d:37:36:c9:ed:94:3e:da:25:48:
         40:64:0d:4d:59:18:94:37:81:30:b5:f9:32:5f:ea:61:94:7d:
         93:84:ee:ee:fa:ee:b8:01:63:a1:b0:f6:43:86:8e:9e:aa:3d:
         6a:a5:4d:37:2e:92:32:ab:78:6a:f2:59:68:f6:9f:49:d0:85:
         22:97:db:15:96:c7:dc:86:1b:30:e5:cf:9b:74:d0:fd:78:97:
         c8:d6:16:1c:4a:32:ab:46:44:fd:f2:36:96:7f:74:e4:b4:3e:
         a5:8d:05:13:1f:c8:cd:04:b6:6a:4b:91:98:8e:25:77:33:3e:
         82:26:e4:28:51:09:48:f2:9b:39:dc:1a:1d:ad:ad:08:e7:59:
         32:bd:72:af:18:1a:2a:e6:3a:a7:7d:ab:e0:cc:0a:de:3c:bd:
         ab:13:b5:6f:85:d0:d3:dd:b3:23:9e:06:7b:e2:bd:42:b1:b8:
         88:c4:98:04:04:11:a4:7f:1e:73:57:77:9b:96:1c:38:ee:8a:
         ab:a7:e5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:07:47 2024 by rpki-client on console-ams.rpki-client.org