Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/21f399c4-9b55-39ef-bed5-884b07932f9f.roa
File:                     21f399c4-9b55-39ef-bed5-884b07932f9f.roa (raw, json)
Hash identifier:          Bujs3Ocb4gCb6LUHc5XIWrm5oypJAd3HJlK9kjU571Q=
Subject key identifier:   2F:B1:82:00:0E:FB:0C:68:7D:71:CD:CC:4B:F7:09:A1:EC:77:24:24
Certificate issuer:       /CN=2cb23841-08c5-41c8-81c9-076b288743e8
Certificate serial:       010D0C9F4328584789EBF4D6BE5BA6D183227A10
Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/21f399c4-9b55-39ef-bed5-884b07932f9f.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     26918
IP address blocks:        204.77.168.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f4:d6:be:5b:a6:d1:83:22:7a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=f64aeffd-313c-42bc-97d1-8e393618f485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:22:b9:c1:32:d4:30:04:5c:9b:8f:fe:5b:32:
                    7b:d1:ca:43:22:37:e2:d3:6b:13:db:b1:8e:01:fd:
                    53:38:c5:a8:bb:02:68:01:4f:14:4a:2b:e0:83:9f:
                    56:3b:7c:4c:cf:1a:d2:41:7b:37:02:71:3e:47:94:
                    be:c3:12:33:d7:a1:7a:48:31:b3:03:39:06:47:9d:
                    e4:7a:82:b5:52:12:d7:a8:45:f4:c0:96:7f:55:bf:
                    2e:74:d6:10:51:a2:cb:63:ca:4e:f3:87:45:96:74:
                    19:85:79:23:dd:48:5e:4e:e8:d0:20:cc:61:0a:c1:
                    e1:c4:ae:be:8a:53:a8:73:e6:87:16:b6:1f:6a:1a:
                    81:49:c7:82:e6:e5:26:1b:d0:66:44:1c:09:09:4c:
                    58:fa:8c:eb:0c:35:6d:68:26:9b:3f:2d:d4:29:9c:
                    21:fa:6b:8d:45:19:fb:34:45:22:b0:76:ee:ea:2d:
                    98:16:99:46:44:9b:03:08:53:03:23:c5:d9:a0:58:
                    83:17:2a:f1:05:e7:1a:d1:80:c8:9b:4e:50:82:f1:
                    90:34:de:98:95:2f:06:7e:2d:1c:9e:e8:9d:8d:bc:
                    96:f8:5c:e3:0e:08:22:64:8e:d5:e9:78:84:d8:ac:
                    73:67:1a:44:aa:22:c5:94:38:c2:c2:38:f6:22:d6:
                    8a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B1:82:00:0E:FB:0C:68:7D:71:CD:CC:4B:F7:09:A1:EC:77:24:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/21f399c4-9b55-39ef-bed5-884b07932f9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl

            X509v3 Authority Key Identifier:
                keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.77.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f6:2c:7e:44:5b:21:2a:f8:ec:34:2c:db:0b:4e:7a:76:6b:
         3a:0e:5c:53:70:8e:35:48:66:4f:62:e3:b2:db:9f:6b:41:33:
         e3:08:a5:af:1a:91:4d:1e:29:60:fe:f3:9e:e8:19:c3:62:98:
         1e:ac:9b:1e:36:f6:8b:0e:3a:6d:df:3c:b5:0e:f8:77:41:5d:
         9b:50:98:69:ca:b1:24:e7:43:1f:1c:45:4f:86:74:9c:d1:73:
         d4:f0:f6:a4:a3:28:c3:66:18:08:f0:8a:43:a4:59:fa:e0:19:
         c6:8e:d2:60:82:6b:7a:a4:08:8e:f2:32:8f:8c:74:4f:88:ff:
         d7:b3:f1:22:7f:6e:c8:fe:27:96:f6:b9:95:8a:7f:30:46:65:
         78:c3:77:04:c4:4b:92:18:4d:56:53:36:80:6f:50:b1:84:21:
         75:ea:9d:da:71:e2:13:e5:c9:e1:4b:f1:22:d0:30:03:c0:77:
         16:a5:ac:ff:21:8c:f9:7b:8f:b7:88:1c:81:08:c1:63:2a:ff:
         9f:0f:bb:ba:1e:63:1a:25:ce:53:58:25:83:11:0c:60:d7:e4:
         47:2e:82:3c:af:27:9b:de:36:fa:d6:67:80:72:6b:0f:e4:ef:
         25:7e:3b:86:cb:90:d7:5f:3d:b3:b2:b9:50:58:3f:a8:db:f1:
         98:93:26:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org