Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4/bc7f3211-42ff-3179-be1f-6d97d9aa9ab6.roa
File:                     bc7f3211-42ff-3179-be1f-6d97d9aa9ab6.roa (raw, json)
Hash identifier:          ihBfS4upargtU7tZCKNAj+rGCvy6s81lyeYsbtVobEg=
Subject key identifier:   AE:0D:4C:B1:61:ED:53:21:A2:3D:3F:8D:3D:59:34:20:0F:69:D8:BE
Certificate issuer:       /CN=d986e6c8-51ac-405e-9e0d-388a9f423fb4
Certificate serial:       010D0C9F4328584774FBAA6199AAA38BE1335B80
Authority key identifier: D1:8F:22:04:A7:12:5C:CF:45:E6:54:FE:06:80:3F:31:3B:B6:97:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4/bc7f3211-42ff-3179-be1f-6d97d9aa9ab6.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     63023
IP address blocks:        23.166.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4/d986e6c8-51ac-405e-9e0d-388a9f423fb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4/d986e6c8-51ac-405e-9e0d-388a9f423fb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:aa:61:99:aa:a3:8b:e1:33:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d986e6c8-51ac-405e-9e0d-388a9f423fb4
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=b336fb2a-072a-4c7f-9b68-1e95c1bae7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fb:84:49:e0:bf:dd:e4:b2:79:57:5d:ce:f7:
                    52:6e:30:89:79:46:78:3b:16:05:b0:75:d2:93:08:
                    35:1f:c9:49:b1:49:61:f7:95:d8:4b:49:f4:fd:7b:
                    71:dd:4d:85:38:98:c4:b3:b9:8f:c8:e9:e9:bf:d7:
                    0c:3b:81:41:1e:6e:5b:1d:d5:d0:7e:eb:40:5b:0e:
                    c4:9a:53:3f:e1:ed:af:24:2a:07:3f:c1:79:02:f4:
                    fb:57:06:ed:cd:2f:94:fe:2e:bd:b9:89:4c:7b:d9:
                    43:ac:61:b0:71:6e:3d:b2:a8:61:3d:24:9b:cf:cd:
                    e1:bd:1d:39:70:e4:47:c8:6f:ad:b8:3c:7b:ba:35:
                    a4:6c:5c:49:be:89:0e:7f:69:ba:49:88:8a:d4:75:
                    1e:98:0c:f5:06:ba:84:5b:65:ce:e5:ff:8f:cd:42:
                    a7:c8:a8:16:98:c3:fc:01:37:c8:8f:75:16:a6:18:
                    74:61:f7:ff:52:5b:bb:80:7e:8e:44:68:ed:5a:4f:
                    30:d5:17:75:cc:26:8b:1f:f5:79:fa:6b:d3:e4:89:
                    cb:8c:26:9a:f7:9f:5f:e5:9e:35:cd:d2:1a:92:d1:
                    b1:cc:f9:e1:48:cf:6f:6b:d7:08:65:d3:7d:68:74:
                    02:c3:4a:51:9d:de:f5:a8:3d:61:3b:3b:4c:37:46:
                    fc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0D:4C:B1:61:ED:53:21:A2:3D:3F:8D:3D:59:34:20:0F:69:D8:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4/bc7f3211-42ff-3179-be1f-6d97d9aa9ab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4/d986e6c8-51ac-405e-9e0d-388a9f423fb4.crl

            X509v3 Authority Key Identifier:
                keyid:D1:8F:22:04:A7:12:5C:CF:45:E6:54:FE:06:80:3F:31:3B:B6:97:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d986e6c8-51ac-405e-9e0d-388a9f423fb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:e4:84:b2:5c:82:cc:51:99:c7:12:b9:95:52:7b:91:07:bc:
         8a:af:26:41:11:2d:b9:ab:fe:75:ca:4d:bf:b8:06:23:60:ab:
         cf:70:31:6e:05:db:ec:75:44:d9:1b:b7:ae:3f:90:13:75:9e:
         0d:c2:00:27:ad:4f:15:01:07:4d:10:63:7d:74:21:7a:15:2c:
         46:6a:b4:8c:2a:83:cf:d6:49:5c:ec:74:6f:0d:93:e3:8e:d0:
         9b:a9:1f:53:48:77:3b:7b:83:c5:66:37:3f:f2:9d:16:91:d4:
         af:8d:ab:68:f7:7e:fe:a7:54:c1:76:d1:90:2b:11:fc:6a:b5:
         de:7b:f8:6c:12:d3:04:87:1d:3e:cf:fe:2e:2f:de:1f:ac:65:
         8f:b7:04:a3:d8:41:de:bd:2c:bc:e3:3d:81:cb:a5:98:4f:10:
         cb:b6:a7:65:68:d4:81:b4:e5:02:55:03:09:4e:3c:db:ed:78:
         0c:19:45:cb:9b:15:04:6b:5a:19:1c:a8:4c:ff:fd:c8:28:3d:
         60:b9:ca:11:46:b7:06:12:83:bc:5b:c8:12:72:cc:6d:60:cd:
         db:5a:3e:83:2e:fc:dd:43:74:6f:e4:cd:16:6e:32:7a:0b:d8:
         ec:f3:c3:b9:e4:02:41:b2:99:3a:e3:0b:bb:e4:b8:b3:cc:15:
         6e:bc:f1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 21:29:42 2024 by rpki-client on console-fra.rpki-client.org