Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/cbf55cfc-c97e-3e0d-b5ec-6eed26242585.roa
File:                     cbf55cfc-c97e-3e0d-b5ec-6eed26242585.roa (raw, json)
Hash identifier:          kMhAxKGkEBXjtDyJHjOViDfEymQVRDJxfgKMHmD5GDQ=
Subject key identifier:   AF:EC:83:D5:A7:49:AF:32:1B:0D:3B:8D:FC:2B:07:5F:5B:0F:B3:C3
Certificate issuer:       /CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
Certificate serial:       010D0C9F43285847BAC6B0582BDF93DE3E22A160
Authority key identifier: 67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/cbf55cfc-c97e-3e0d-b5ec-6eed26242585.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     216440
IP address blocks:        23.159.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:b0:58:2b:df:93:de:3e:22:a1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=4cc33597-72d8-477f-86a9-529a447ee8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:4e:52:ef:80:cb:50:99:37:8f:4a:59:bf:
                    55:73:0a:79:36:07:d3:bb:3a:dd:4a:b2:bc:ba:ca:
                    02:9f:50:f8:33:b2:69:67:ee:db:be:77:e0:6e:95:
                    e8:fb:49:b9:5a:bd:71:e3:76:b1:7a:2b:3f:89:d7:
                    8f:4b:4e:aa:98:32:1b:b4:b8:0d:8e:c0:b5:fe:b0:
                    b0:d8:50:38:02:b0:7b:db:d1:23:d6:09:ef:22:f3:
                    5f:70:fb:8d:1a:c4:e4:54:8b:52:36:21:25:5e:5d:
                    97:6e:14:a0:c1:f0:5c:48:87:81:b6:03:b1:97:14:
                    44:97:39:6e:11:0a:b3:d6:d0:bd:99:cd:c3:84:4f:
                    58:b9:6c:6c:a4:7b:3d:1e:e6:d4:23:4d:c1:00:e5:
                    15:56:b9:0b:56:fc:cd:51:3e:6f:33:0d:f9:15:7a:
                    11:af:62:83:2e:b1:a4:98:9a:af:bc:a8:2c:ae:ec:
                    bb:84:3b:da:f9:f4:e4:11:b9:8d:83:f0:a0:8a:fe:
                    2b:b2:9d:c9:5e:98:e6:e6:4d:ee:cd:78:25:ee:7b:
                    c8:72:14:f7:dd:1f:81:e2:34:e6:7f:5b:9f:95:5f:
                    58:b5:8f:46:28:75:8f:6e:fc:27:2b:9c:dc:de:59:
                    27:ce:59:76:24:5a:20:6c:23:e1:87:3c:3b:d8:b6:
                    d3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EC:83:D5:A7:49:AF:32:1B:0D:3B:8D:FC:2B:07:5F:5B:0F:B3:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/cbf55cfc-c97e-3e0d-b5ec-6eed26242585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.crl

            X509v3 Authority Key Identifier:
                keyid:67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:f9:c4:0e:70:21:00:b3:b7:7a:90:87:ef:5b:5f:76:6e:67:
         71:2b:28:39:32:53:58:7a:6b:9a:d8:f2:db:4e:ad:55:d7:81:
         c1:b6:be:85:d8:a3:23:3a:c1:21:e7:1f:56:d9:dc:28:59:b5:
         8d:71:34:bb:e5:4d:8f:d0:95:58:9a:71:ce:00:da:ae:10:c0:
         96:a8:89:1f:45:b6:92:29:91:fd:6f:90:db:24:ec:f7:74:a5:
         ff:21:a6:2f:8e:48:37:3a:43:82:8e:5d:c5:c8:1d:c9:c1:b6:
         05:41:c4:5c:07:e2:2e:6b:02:6c:b7:dc:db:36:2f:76:35:04:
         19:c6:38:e3:67:9b:6f:a2:c4:ac:33:63:2c:50:bf:6c:c7:47:
         78:ee:52:19:e0:85:e0:b7:20:09:61:df:8b:d0:bd:d8:86:a8:
         f7:38:2d:d3:40:c8:ec:a5:45:21:68:28:81:48:8f:e3:6d:02:
         d5:e3:34:e0:c0:c2:b8:b6:4f:32:92:4a:7b:56:1c:d9:97:ce:
         9a:70:82:fe:10:d8:e7:b4:2c:fe:24:32:bd:9c:5e:2a:3d:3d:
         95:bd:96:9a:5f:28:f2:e7:89:fd:2a:41:dd:1d:fb:91:e4:b3:
         88:98:4a:7f:56:93:b5:54:1b:cb:6c:13:74:25:fc:b8:0d:39:
         f0:0b:e2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:03:15 2024 by rpki-client on console-ams.rpki-client.org