Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/39af8921-60ee-3a49-9b43-975f800d7921.roa
File:                     39af8921-60ee-3a49-9b43-975f800d7921.roa (raw, json)
Hash identifier:          lBerWyQ8hS1VRM/H+FJYWyK01rRrXvtXuhUFWwEmJBI=
Subject key identifier:   7A:9E:D9:D5:22:F6:E5:A1:56:0A:5C:01:34:2F:D6:CC:DA:BE:C5:EB
Certificate issuer:       /CN=f070d399-4921-4247-a612-64e6e53f9f2b
Certificate serial:       010D0C9F43285847D139E1B192F577B384BEB380
Authority key identifier: 61:7C:EB:83:28:62:01:5E:92:49:7B:33:A2:DB:13:67:E0:32:59:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/39af8921-60ee-3a49-9b43-975f800d7921.roa
Signing time:             Sat 09 Nov 2024 02:00:28 +0000
ROA not before:           Sat 09 Nov 2024 02:00:28 +0000
ROA not after:            Fri 07 Feb 2025 02:00:28 +0000
asID:                     401274
IP address blocks:        23.186.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/f070d399-4921-4247-a612-64e6e53f9f2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/f070d399-4921-4247-a612-64e6e53f9f2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d1:39:e1:b1:92:f5:77:b3:84:be:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f070d399-4921-4247-a612-64e6e53f9f2b
        Validity
            Not Before: Nov  9 02:00:28 2024 GMT
            Not After : Feb  7 02:00:28 2025 GMT
        Subject: CN=40ca865f-978e-41cc-b385-6f5d31c8f9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:76:70:a3:31:ba:fa:95:d8:47:8b:b8:79:d6:
                    6a:27:95:c6:cd:4c:4f:29:8a:10:56:fa:71:33:f5:
                    0f:96:16:c5:06:af:aa:c0:4a:07:87:87:3b:1a:98:
                    7a:ef:d8:87:eb:f9:4e:d4:af:ec:ba:59:5c:fb:45:
                    36:f4:98:09:39:86:d0:03:e5:87:0f:bf:44:ca:94:
                    5c:f2:10:83:d7:ea:08:d8:8e:5e:8b:39:55:9b:94:
                    14:47:32:b9:bd:58:47:03:d7:7d:d3:0d:61:d6:12:
                    0c:7e:65:61:1e:c8:be:e7:62:b3:df:2e:a4:be:03:
                    42:c4:12:a9:2f:b6:bd:44:55:01:45:83:d7:87:b7:
                    98:4e:d2:3b:95:73:10:dd:e2:0e:9c:9a:51:32:e4:
                    98:b1:2d:f5:96:3e:03:a3:4d:47:1e:cc:bb:93:b4:
                    33:8a:1e:29:f5:d9:2d:40:f7:ae:cf:fe:4f:32:ea:
                    d6:01:34:e2:12:16:cd:07:85:a4:16:a2:43:fc:2b:
                    7e:6b:bf:7e:89:4e:3f:22:9b:13:27:1a:d4:28:a7:
                    05:5c:9f:f3:1d:07:eb:ca:73:0a:e4:b7:22:61:82:
                    bd:12:a4:ea:ee:8e:81:15:17:a0:25:d6:12:cd:03:
                    7c:3d:93:82:57:c2:ed:4d:14:23:b8:e0:10:59:ec:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9E:D9:D5:22:F6:E5:A1:56:0A:5C:01:34:2F:D6:CC:DA:BE:C5:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/39af8921-60ee-3a49-9b43-975f800d7921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/f070d399-4921-4247-a612-64e6e53f9f2b.crl

            X509v3 Authority Key Identifier:
                keyid:61:7C:EB:83:28:62:01:5E:92:49:7B:33:A2:DB:13:67:E0:32:59:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9e:71:1d:de:22:97:b3:97:50:f3:4e:99:20:c9:5a:59:91:
         0e:f6:51:ad:a9:41:f3:f6:f0:2d:05:50:5f:00:4c:21:54:7e:
         72:c2:79:9e:5a:27:00:4e:ec:f5:1f:07:cd:02:53:0e:62:77:
         24:9d:b7:6f:86:cd:87:3b:a7:b8:87:fd:3c:f8:86:20:77:69:
         4c:62:69:4a:14:3c:79:da:aa:e9:28:35:5f:ae:02:fd:44:db:
         26:99:e2:37:24:9b:f8:be:ff:64:3c:7f:4a:c7:39:80:4a:ee:
         8c:31:27:20:87:f7:0b:0c:3c:ca:35:8c:22:18:91:37:c4:f1:
         d1:08:10:fb:c9:1c:25:5f:78:1f:70:3f:90:90:6f:de:26:ee:
         07:a4:7f:be:e9:a4:19:1d:31:38:44:ed:3d:6f:5f:1b:32:70:
         80:18:a0:37:40:01:b3:0f:fd:c3:68:52:a4:fc:bc:40:03:b2:
         4c:21:63:ab:d2:32:0a:4d:46:6c:4c:86:e7:af:c8:4b:50:03:
         c0:36:d6:68:c5:ef:85:e4:27:5f:b1:c3:82:2b:98:dc:26:a7:
         95:80:ea:55:06:70:51:53:7a:8c:27:26:10:a9:2b:44:58:ba:
         b8:2e:a7:a7:af:da:8a:33:24:3b:cf:35:3f:2e:f6:0e:51:05:
         3e:c0:d5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:33 2024 by rpki-client on console-fra.rpki-client.org