Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/776c6b42-1b83-3469-abb9-1f2983fac076.roa
File:                     776c6b42-1b83-3469-abb9-1f2983fac076.roa (raw, json)
Hash identifier:          rgI2PrWoGDvD4eoup0uBRfJkmcXEi2dd8U9GzElpgAE=
Subject key identifier:   11:FC:37:1F:A3:45:A6:63:9E:5C:4D:F1:E9:C8:E9:02:D7:A2:7D:34
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F43285847AE36BA984705075385D8E1C0
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/776c6b42-1b83-3469-abb9-1f2983fac076.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     36103
IP address blocks:        23.88.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:ba:98:47:05:07:53:85:d8:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=8412be01-397b-486c-a3a1-9c8e6c97ad3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2e:51:25:ba:f4:ab:c9:9d:b7:89:cf:1d:e7:
                    33:fb:2b:df:91:bc:3d:09:51:0f:84:6d:6f:53:55:
                    e8:e2:0b:86:60:bf:88:48:1e:b6:a9:61:0a:71:66:
                    2a:16:c3:2e:31:9b:87:49:7b:1a:5b:27:e0:1f:02:
                    f1:1c:6f:37:05:8f:2d:86:25:f6:e4:35:39:8a:ac:
                    fe:a1:22:53:2b:46:ef:98:fc:d7:f5:c6:f4:1a:f1:
                    ae:33:f5:5c:70:09:e8:7e:54:af:11:36:53:36:40:
                    13:f1:d3:18:11:a4:7c:7b:96:11:c4:de:2c:8c:a2:
                    68:ec:ba:eb:b0:96:98:65:6b:90:2b:4a:0c:d7:87:
                    3b:35:1f:81:6c:7f:da:16:51:c8:45:4f:19:88:47:
                    7f:64:89:1b:f2:fb:d4:1e:f5:6b:c4:ce:92:c2:7a:
                    00:d7:95:11:ca:9c:95:98:7c:21:ee:60:9f:36:80:
                    c2:4b:e9:7b:ee:f4:0e:b3:28:ae:17:4a:09:48:63:
                    99:f7:65:0e:05:c9:e1:61:fc:60:03:c9:b9:cd:74:
                    8b:78:61:61:31:ce:ed:80:93:da:d1:39:54:ae:71:
                    8e:52:4d:94:61:c8:69:c9:91:88:0a:5e:65:36:35:
                    bc:ba:77:08:53:d8:ff:0f:9d:a6:0f:fa:2a:6b:0c:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FC:37:1F:A3:45:A6:63:9E:5C:4D:F1:E9:C8:E9:02:D7:A2:7D:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/776c6b42-1b83-3469-abb9-1f2983fac076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a1:f4:ad:18:61:e4:05:03:ef:79:b4:04:85:cf:a0:4b:77:
         ed:41:3a:62:37:f1:86:39:f8:2d:00:3a:a8:8e:ad:4f:43:b4:
         a1:6b:83:cd:f7:e3:f7:f2:77:a9:68:e2:35:5b:7d:af:4f:80:
         6e:fa:a2:46:ec:fb:bc:9f:7c:fe:79:9b:88:12:35:08:e1:74:
         14:dd:1f:f6:99:b0:3c:9f:ef:d9:66:30:2d:77:3a:09:08:7c:
         f5:57:cd:e8:4d:86:f2:b4:13:c4:80:5a:19:cb:f0:ac:be:6b:
         2a:e1:2b:ac:0a:24:8d:56:4d:bb:01:5a:29:8a:f8:54:9c:ff:
         29:15:fb:b2:86:c0:fb:aa:ac:fe:15:e0:82:83:d9:e3:15:3d:
         1d:81:a3:83:e5:c1:ff:3a:6b:58:95:5c:b8:fd:11:e0:44:11:
         2d:9a:e5:f0:42:16:ff:d7:6b:49:ad:e6:44:f2:69:a4:82:db:
         98:78:8c:f7:d5:e1:e0:f6:3e:30:78:9d:8e:84:6a:cc:ee:9b:
         0c:5a:26:2d:61:4b:2c:e6:ca:d0:60:13:c0:0c:bf:0d:40:8a:
         7f:9e:1e:d9:04:98:93:6e:41:9a:e7:93:33:98:09:2c:96:3e:
         55:6e:b4:c3:87:3b:54:98:00:a4:57:e9:42:35:bd:c9:2d:ad:
         92:1d:cd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:56 2024 by rpki-client on console-ams.rpki-client.org