Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5b665c2e-c2d1-394f-a379-8b42a79c90ee.roa
File:                     5b665c2e-c2d1-394f-a379-8b42a79c90ee.roa (raw, json)
Hash identifier:          9pF6eaFHIF76/YVpr6mEm5KrMjSUb7hi/chJuAKMrOw=
Subject key identifier:   94:6C:B7:A3:29:51:75:C9:6B:E6:FD:20:2B:F0:D8:58:D6:7C:34:DF
Certificate issuer:       /CN=eeff816f-42ef-47a6-ba61-7075adb85329
Certificate serial:       010D0C9F432858471D0B1B5D3EBAB5F6CE44FB80
Authority key identifier: EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5b665c2e-c2d1-394f-a379-8b42a79c90ee.roa
Signing time:             Thu 05 Sep 2024 13:00:41 +0000
ROA not before:           Thu 05 Sep 2024 13:00:41 +0000
ROA not after:            Wed 04 Dec 2024 14:00:41 +0000
asID:                     393457
IP address blocks:        23.128.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:0b:1b:5d:3e:ba:b5:f6:ce:44:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeff816f-42ef-47a6-ba61-7075adb85329
        Validity
            Not Before: Sep  5 13:00:41 2024 GMT
            Not After : Dec  4 14:00:41 2024 GMT
        Subject: CN=6b51ac5d-eda8-451e-bf8b-cb0375385d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4d:a6:1c:be:34:a9:a2:a6:49:66:cb:61:0b:
                    c4:9f:a2:bd:a6:81:9f:e7:fc:07:50:83:33:2a:ac:
                    30:70:cc:3e:86:89:64:43:d2:81:87:ea:02:9a:a8:
                    bf:fd:59:c1:3f:1e:e5:7d:e9:3e:c2:59:e2:67:58:
                    0e:8c:f6:db:c2:95:43:b9:d4:9f:9b:a6:2f:ac:56:
                    a8:83:0c:25:80:90:a7:85:c0:e6:dc:56:a2:bb:1a:
                    c7:3e:e0:bc:48:cc:14:33:74:e5:ac:9d:81:43:f8:
                    4d:e3:60:1d:b9:e2:49:8d:85:be:82:88:f6:c7:68:
                    61:29:80:6b:d0:ac:b4:fc:4e:77:80:c1:30:0c:32:
                    b8:ad:bf:77:a2:15:64:ed:46:26:58:e9:9e:9e:39:
                    19:27:99:c3:b9:1f:e6:85:37:1e:6d:7c:12:0c:76:
                    22:de:d8:ff:72:70:ba:57:48:db:de:12:f4:fc:67:
                    bb:9e:2e:c2:c8:4b:3b:93:d6:5b:25:e5:c0:7d:5a:
                    99:87:5f:66:67:d9:9f:13:45:4d:95:74:5e:48:0c:
                    56:5d:c3:9a:b6:6c:4c:20:a6:8f:73:d9:b4:81:58:
                    3d:67:2e:66:2d:89:4c:a4:5e:5e:3f:fa:45:55:f6:
                    c7:84:b5:d3:28:92:7d:e1:3e:5b:83:70:af:b8:fd:
                    9e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6C:B7:A3:29:51:75:C9:6B:E6:FD:20:2B:F0:D8:58:D6:7C:34:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5b665c2e-c2d1-394f-a379-8b42a79c90ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl

            X509v3 Authority Key Identifier:
                keyid:EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:4e:26:c7:e7:4f:2b:92:b3:24:f1:36:f7:a9:e7:c3:5c:fa:
         f3:f3:ef:cc:bd:47:30:4f:ff:c8:ec:55:ae:64:8e:27:9f:a2:
         91:24:15:9c:f3:6c:62:ab:2e:b2:34:d8:a3:25:62:b8:ed:30:
         d8:c4:e7:b5:0c:36:33:70:a0:86:7c:6b:96:f4:8d:3c:74:92:
         03:13:1f:05:e7:4e:85:bb:ff:cf:3b:29:66:58:65:cf:04:7a:
         85:63:51:9a:c5:17:e2:f1:4e:1a:ee:5b:e8:79:f0:73:7c:ef:
         9f:00:5d:5c:04:a7:2e:a1:ca:a6:f5:bc:b4:58:c3:0d:e4:24:
         46:b5:63:78:56:06:f3:e4:04:f8:4d:d2:fb:92:9c:25:20:4c:
         fd:94:41:bd:88:e6:5d:6d:fa:b8:71:05:5b:d9:03:48:b1:10:
         0f:38:a1:d7:6d:a1:e4:73:4b:21:24:b7:2f:e8:7c:ec:a4:9a:
         b6:e8:5d:a6:f2:4b:ca:39:21:79:50:5a:d1:4b:57:67:72:34:
         d7:38:db:c8:76:17:91:23:9f:53:af:ea:ef:6a:87:3e:03:f5:
         b4:ca:a7:45:9e:49:e7:ad:66:c2:2d:3d:cd:ef:63:eb:0e:83:
         60:77:5d:21:3d:e9:41:15:d9:8d:c8:26:be:d6:77:a1:90:37:
         8a:57:03:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:22 2024 by rpki-client on console-ams.rpki-client.org