Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/79ca36de-3a9d-3830-a33d-b0ac646a1da0.roa
File:                     79ca36de-3a9d-3830-a33d-b0ac646a1da0.roa (raw, json)
Hash identifier:          s8e6DL4uZJT+zYCzz5AP2c7WpCADF3m24vd5sj1mGzk=
Subject key identifier:   BF:40:A3:1A:F9:23:A1:A9:87:8C:00:4A:3A:7E:E6:36:4F:32:F2:40
Certificate issuer:       /CN=5b411b8e-3c6b-4743-ad39-50a32a716ad4
Certificate serial:       010D0C9F43285847BAC6B19807A57ED760DB49C0
Authority key identifier: D4:30:90:3D:0D:8B:97:AF:18:3F:98:C4:51:DB:CF:8F:7D:1A:84:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/79ca36de-3a9d-3830-a33d-b0ac646a1da0.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     399032
IP address blocks:        23.185.64.0/24 maxlen: 24
                          2602:fe76::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/5b411b8e-3c6b-4743-ad39-50a32a716ad4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/5b411b8e-3c6b-4743-ad39-50a32a716ad4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:b1:98:07:a5:7e:d7:60:db:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b411b8e-3c6b-4743-ad39-50a32a716ad4
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=3039bd2a-6e50-4905-8238-044a6c37568f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:0b:47:60:d4:f9:49:a7:0f:a2:25:c9:78:
                    42:6f:eb:14:3b:ae:c0:4b:42:5d:ec:35:b4:d9:b7:
                    e5:93:38:d8:54:23:5d:9e:f0:e5:f2:f9:8a:cd:cd:
                    c2:ac:ab:9f:30:4e:5f:e6:79:af:38:42:18:39:31:
                    31:44:5a:ea:ad:d7:47:0c:59:4e:e0:9e:b8:e1:40:
                    d0:af:04:64:6d:68:35:3d:3c:40:90:b9:4e:b9:f7:
                    4d:b6:b1:96:a0:c1:67:33:2e:ee:ea:7a:a5:88:a0:
                    60:2d:00:5e:c9:2c:6d:ca:f0:4c:42:01:9a:4e:6c:
                    61:14:8b:ab:92:fa:a3:d1:1d:7b:07:b4:76:9d:19:
                    8b:9f:b3:fd:5f:b4:ce:5c:6c:5e:83:23:56:d1:3e:
                    9d:fd:fd:48:c0:41:8a:19:09:1b:51:22:64:2f:a7:
                    cd:da:9e:95:46:1b:dd:a5:f2:a4:8c:fa:80:e3:08:
                    19:fd:02:0a:db:a6:0a:63:9e:1b:03:ae:cf:8c:ac:
                    f7:d9:b2:84:b9:fd:00:a1:f9:0e:a5:78:1e:e3:2e:
                    28:15:1e:d5:15:50:75:c8:35:6b:8d:3c:54:b0:e7:
                    5d:b8:7e:6a:aa:78:41:26:b9:c8:05:bc:c3:c1:9f:
                    c6:48:10:bd:76:1e:1c:5d:82:24:8e:26:cc:32:b8:
                    54:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:40:A3:1A:F9:23:A1:A9:87:8C:00:4A:3A:7E:E6:36:4F:32:F2:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/79ca36de-3a9d-3830-a33d-b0ac646a1da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/5b411b8e-3c6b-4743-ad39-50a32a716ad4.crl

            X509v3 Authority Key Identifier:
                keyid:D4:30:90:3D:0D:8B:97:AF:18:3F:98:C4:51:DB:CF:8F:7D:1A:84:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.64.0/24
                IPv6:
                  2602:fe76::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:83:bf:81:99:f5:d0:50:72:fa:9f:0c:61:ac:f4:68:91:5b:
         58:b8:31:0a:09:d6:0e:ba:50:37:4f:0d:d2:1d:dd:b6:73:1c:
         a8:ea:35:34:b8:8e:3b:0b:31:ab:0e:77:2f:3a:7d:c1:97:84:
         83:f6:aa:df:6d:13:ed:8e:e6:53:e3:eb:31:d8:0d:d9:09:ff:
         b1:e3:b9:cc:b4:d7:ac:12:d8:bd:bc:f0:d5:40:da:a1:3f:60:
         58:e4:b9:d8:13:d8:93:e1:8b:3a:9a:db:58:ff:54:43:12:dd:
         1c:fa:3e:8d:64:8b:9e:c6:db:cf:4e:42:ce:38:ce:18:fb:e5:
         1c:ea:43:1d:2c:bc:95:ac:eb:fe:ef:4c:b4:4c:80:ff:f9:ee:
         fe:7c:40:c9:10:81:5f:91:9a:65:ca:44:7b:a5:5f:df:13:24:
         99:09:11:b5:84:40:d5:fb:28:a8:81:db:2d:5b:14:49:7d:49:
         64:8e:75:ec:4b:19:ec:e0:fc:cd:07:7b:21:d3:bb:f6:98:46:
         22:e4:f9:bc:a1:5d:fd:ad:ab:3c:d8:d7:3a:3a:99:86:5c:d2:
         f4:ae:cc:69:71:1b:01:14:a1:cf:68:61:5b:91:d0:0b:97:1b:
         ca:3a:ff:43:8f:6d:04:19:60:93:cc:97:66:d4:f4:0e:df:22:
         4e:a0:b0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:21:49 2024 by rpki-client on console-ams.rpki-client.org