Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/b2c8219a-3f13-3fb9-b005-012508a27db0.roa
File:                     b2c8219a-3f13-3fb9-b005-012508a27db0.roa (raw, json)
Hash identifier:          pC5T/59QO3zfE/KabNXQNk9tp9brJ2sAAigtWYKVm7Q=
Subject key identifier:   21:D4:72:05:65:5E:84:2F:1C:21:F8:71:EF:10:17:48:79:57:1B:D5
Certificate issuer:       /CN=987bdf9f-7000-4d71-b90f-a12e26fdce76
Certificate serial:       010D0C9F43285846D048B0B1BD48C77EB35E3100
Authority key identifier: B5:BF:B6:1F:E4:C5:06:AA:37:BB:61:06:74:6F:A7:9E:F0:62:0F:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/b2c8219a-3f13-3fb9-b005-012508a27db0.roa
Signing time:             Fri 09 Aug 2024 01:07:37 +0000
ROA not before:           Fri 09 Aug 2024 01:07:37 +0000
ROA not after:            Thu 07 Nov 2024 02:07:37 +0000
asID:                     8796
IP address blocks:        23.185.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/987bdf9f-7000-4d71-b90f-a12e26fdce76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/987bdf9f-7000-4d71-b90f-a12e26fdce76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d0:48:b0:b1:bd:48:c7:7e:b3:5e:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987bdf9f-7000-4d71-b90f-a12e26fdce76
        Validity
            Not Before: Aug  9 01:07:37 2024 GMT
            Not After : Nov  7 02:07:37 2024 GMT
        Subject: CN=67623d09-5916-4798-bcee-b34707b31c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:06:81:af:ad:9c:38:df:3a:4d:96:fa:76:69:
                    b6:09:b2:ed:54:87:ad:29:96:ee:b4:8d:4c:4e:9a:
                    c5:a5:f9:24:81:34:3f:77:75:4c:b2:e5:d7:39:0f:
                    6a:4c:75:d7:9f:ca:71:60:d0:6a:e4:02:68:65:5a:
                    de:4f:75:ed:61:b8:86:f6:ae:66:8b:46:fb:58:3d:
                    10:f5:13:8a:37:6b:4c:fc:fc:47:7b:de:fc:ef:8e:
                    d0:43:3d:ab:e0:dc:23:41:36:a6:21:52:99:c2:a9:
                    da:db:ea:6b:62:d1:cd:fe:be:98:f2:73:b7:f6:4e:
                    37:2d:79:86:c6:8a:84:4d:2d:49:e3:e6:78:78:40:
                    5a:bb:58:a1:02:29:09:1f:02:fb:2a:c4:63:e0:55:
                    b5:3e:86:f4:8f:75:2a:2f:8c:fc:f8:dc:f9:e5:0a:
                    bc:fb:3c:86:f6:38:5e:a1:25:e7:bf:84:16:99:fb:
                    c3:f9:9c:2f:0e:ba:ce:78:1c:2f:e3:00:09:0d:19:
                    f9:fa:68:b6:34:fb:19:72:c7:c5:a5:cb:03:2b:9b:
                    02:a4:d2:ef:11:9f:f6:50:a6:6a:69:ee:3e:3c:c0:
                    14:40:e4:22:c6:3f:af:b6:ab:de:f1:fc:c7:93:98:
                    38:87:fb:7e:b8:77:61:e9:a0:9c:86:30:73:2c:58:
                    72:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D4:72:05:65:5E:84:2F:1C:21:F8:71:EF:10:17:48:79:57:1B:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/b2c8219a-3f13-3fb9-b005-012508a27db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/987bdf9f-7000-4d71-b90f-a12e26fdce76.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BF:B6:1F:E4:C5:06:AA:37:BB:61:06:74:6F:A7:9E:F0:62:0F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c8:ed:90:15:72:e8:9b:06:7e:cd:a7:e0:51:36:36:46:d6:
         77:d5:72:ac:bc:30:86:8e:25:7f:eb:c7:82:e8:53:98:29:38:
         a1:ef:c8:f9:28:15:33:90:c3:f1:9a:d1:3c:f9:52:c6:4f:72:
         ea:54:29:d4:1b:20:28:7d:68:42:ff:67:65:f9:5b:49:28:bf:
         df:1f:c1:1e:76:0c:b1:1a:a6:f1:08:8e:8d:34:b6:41:af:0e:
         51:b3:57:67:00:4c:af:f1:3b:f4:63:ad:de:bf:40:36:0a:65:
         14:8d:e3:45:74:10:c9:f9:d5:73:7b:6a:74:fc:c8:77:13:a7:
         01:a4:7b:f3:d7:ef:e0:60:5c:ac:03:91:75:4b:6e:72:be:63:
         d6:24:b0:8d:f4:2d:15:b2:ed:3e:6a:d1:07:2d:25:43:0a:e9:
         10:cd:85:77:d2:9e:1d:3d:52:00:75:bb:0b:00:28:4e:f2:6c:
         2b:41:a0:fd:27:44:7e:ec:c8:69:53:8f:55:9a:2b:2b:86:f5:
         53:7a:17:a5:f2:48:5d:00:de:b6:d3:46:7a:00:80:8f:a8:9d:
         59:7e:66:e3:d6:79:65:e0:8a:f9:c0:20:63:f5:0e:24:87:8b:
         25:0d:6b:27:88:68:55:07:4f:67:11:00:e6:63:60:b5:ca:e7:
         d4:97:50:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:28 2024 by rpki-client on console-ams.rpki-client.org