Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/f47b0165-5fc6-39b6-976e-01dc0e6eef2b.roa
File:                     f47b0165-5fc6-39b6-976e-01dc0e6eef2b.roa (raw, json)
Hash identifier:          bC8u1prGvAJnwPejsXdCfDn742dMl7oqn5EZewlf8VA=
Subject key identifier:   58:C8:39:D6:DD:CA:53:36:74:0E:22:72:F5:BF:B9:9E:BC:F6:95:95
Certificate issuer:       /CN=987bdf9f-7000-4d71-b90f-a12e26fdce76
Certificate serial:       010D0C9F43285846D049402CD7404314B1B5F420
Authority key identifier: B5:BF:B6:1F:E4:C5:06:AA:37:BB:61:06:74:6F:A7:9E:F0:62:0F:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/f47b0165-5fc6-39b6-976e-01dc0e6eef2b.roa
Signing time:             Fri 09 Aug 2024 01:08:44 +0000
ROA not before:           Fri 09 Aug 2024 01:08:44 +0000
ROA not after:            Thu 07 Nov 2024 02:08:44 +0000
asID:                     395886
IP address blocks:        23.185.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/987bdf9f-7000-4d71-b90f-a12e26fdce76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/987bdf9f-7000-4d71-b90f-a12e26fdce76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d0:49:40:2c:d7:40:43:14:b1:b5:f4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987bdf9f-7000-4d71-b90f-a12e26fdce76
        Validity
            Not Before: Aug  9 01:08:44 2024 GMT
            Not After : Nov  7 02:08:44 2024 GMT
        Subject: CN=ee32563f-6e56-4c9e-9400-5e29c224508f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b3:f2:9a:61:5f:72:5b:33:7d:27:f4:ae:86:
                    15:62:29:79:1c:ed:71:25:8f:f8:47:2e:22:a2:5b:
                    99:3b:e9:21:57:4f:3f:fa:70:c7:ce:06:59:0e:64:
                    8d:36:ce:26:96:54:6d:19:55:2d:b0:b1:92:6f:93:
                    8f:9c:94:f6:b0:81:d7:62:20:39:ff:3a:0f:59:41:
                    13:ec:e8:71:37:b7:38:47:b7:79:31:29:bd:20:12:
                    15:64:69:25:87:87:11:ef:a2:3d:71:b9:ac:b5:90:
                    6b:11:bf:14:d7:73:35:6e:c7:dd:47:92:5c:f2:b3:
                    63:a1:f0:d0:70:dc:82:87:a2:a4:27:d0:83:b8:66:
                    b4:0b:e4:ec:3c:05:44:d7:0c:f1:53:a2:f8:f0:2e:
                    96:45:f9:d1:bd:1d:96:a4:2f:35:94:05:82:b3:54:
                    41:ca:88:6b:10:cd:22:38:a1:d8:9f:cb:a9:c7:37:
                    74:73:26:71:2f:ba:83:c4:ce:6c:e6:25:fe:7d:17:
                    13:56:15:73:03:6a:2f:e7:90:e3:77:0c:7f:80:a1:
                    b6:cd:9c:bf:fc:c7:1a:a9:e2:69:bb:b8:08:ad:2c:
                    5e:53:79:72:94:49:62:74:f2:87:7b:92:ee:73:27:
                    d8:4f:e3:8e:0d:ad:33:6f:c2:b5:24:1e:8e:f0:3b:
                    7e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C8:39:D6:DD:CA:53:36:74:0E:22:72:F5:BF:B9:9E:BC:F6:95:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/f47b0165-5fc6-39b6-976e-01dc0e6eef2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/987bdf9f-7000-4d71-b90f-a12e26fdce76.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BF:B6:1F:E4:C5:06:AA:37:BB:61:06:74:6F:A7:9E:F0:62:0F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:05:a9:ce:d8:12:66:0c:5d:79:8a:08:6a:10:d7:76:79:14:
         48:a9:9e:7c:b7:90:47:0d:fe:5b:3b:32:08:a2:03:55:b8:f5:
         95:6a:04:83:3e:a5:6a:7d:ac:14:f0:2a:f4:2f:96:6c:1d:a1:
         75:e8:0b:7b:12:ba:d6:67:dc:30:b6:e9:a3:a4:3a:df:d3:99:
         a1:67:4d:bc:5a:bb:b2:41:aa:9b:a6:89:50:00:b5:4f:bc:28:
         be:0d:b9:fc:20:ab:3d:74:a3:ee:77:78:26:30:f1:6e:ad:5d:
         99:34:3c:1d:ec:46:98:a0:e7:80:ec:16:f5:d0:0a:8e:5f:f0:
         04:49:d5:c8:e9:a7:fa:71:a1:1e:1c:d6:d1:0d:bb:f4:f8:78:
         a1:63:9c:a5:1d:3b:d5:44:66:85:95:df:8f:34:80:a8:14:42:
         98:ce:b4:fd:b7:b7:af:b2:c3:80:75:80:99:5d:d4:0d:ba:63:
         40:d6:2a:7c:1b:3c:33:a3:e9:a1:28:f2:a9:3f:a2:cb:99:a4:
         0c:66:d9:5b:62:67:aa:9e:5a:c2:82:59:a7:32:be:95:74:97:
         83:98:6d:fe:39:3c:0b:b6:3a:a1:08:a3:b3:11:e3:f8:5e:72:
         ea:87:4c:d9:5b:ad:0b:4c:49:d2:76:e9:89:6c:b7:4b:4c:63:
         74:44:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:28 2024 by rpki-client on console-ams.rpki-client.org