Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0648ac62-496b-3180-994a-f52503b16231.roa
File:                     0648ac62-496b-3180-994a-f52503b16231.roa (raw, json)
Hash identifier:          BRgzcrDGj0PFQupIgTnkqdR+1vv9keNs3JvqlQVEyD8=
Subject key identifier:   43:9C:88:4B:73:EE:DB:12:F2:B1:1D:58:C3:92:32:35:89:B2:48:57
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858384FE681BFB896E278B70BCB80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0648ac62-496b-3180-994a-f52503b16231.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     19157
IP address blocks:        23.86.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:e6:81:bf:b8:96:e2:78:b7:0b:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=edebf6ef-9dd7-4296-b1bc-effa2be1a65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:78:78:6f:2d:2f:92:dd:b1:81:f5:1b:b5:f2:
                    f0:e6:7d:9c:a4:29:21:89:fc:16:c8:41:6c:3a:12:
                    4e:a4:ac:42:e7:cd:c6:8d:96:78:8f:f2:ef:18:a4:
                    4c:a1:67:18:d6:98:c6:ab:dd:41:c3:56:1e:bb:ec:
                    0b:c0:e5:ce:8f:c2:18:91:36:db:38:20:9f:26:e5:
                    8e:8d:a4:e0:fb:5a:62:71:0a:f9:5c:29:6c:7d:cd:
                    83:94:d9:b2:46:42:fc:83:f2:da:30:3b:05:f1:fa:
                    32:e4:42:dc:32:e8:4b:7f:be:40:45:5d:53:55:53:
                    d3:7b:e5:77:bc:58:d0:6a:ba:3f:fc:82:b5:ce:d5:
                    35:4c:b9:d1:5c:56:62:8c:ad:71:dd:99:a6:f8:e4:
                    a9:e1:cb:e0:73:75:f5:47:8f:d0:ab:32:04:7d:d5:
                    cb:13:83:d7:35:2d:bf:62:00:9f:ee:af:95:37:0d:
                    75:24:6b:41:6f:54:f2:cd:ee:be:13:9d:ff:6b:b8:
                    0b:c4:07:13:24:d4:5b:de:82:e0:95:99:bf:6e:80:
                    6e:e6:18:a8:af:df:f1:18:7b:55:28:f2:f0:78:09:
                    a5:eb:79:65:96:ba:4f:4e:87:75:ee:e3:8c:32:53:
                    47:50:c1:6c:e0:b9:e7:6d:9b:bd:30:8b:69:5c:a0:
                    b4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9C:88:4B:73:EE:DB:12:F2:B1:1D:58:C3:92:32:35:89:B2:48:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0648ac62-496b-3180-994a-f52503b16231.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6e:7a:f1:06:63:36:98:ba:73:b2:8b:ee:83:d3:8a:bd:43:
         45:ec:b4:b6:5c:ed:75:b4:82:bb:74:6a:cc:71:9a:ca:90:35:
         35:1e:b0:e4:a0:dd:09:90:66:a2:c5:0d:da:2b:2a:1c:87:98:
         70:8c:f9:d7:7c:a9:5d:15:2c:0d:ff:7f:8c:b5:e0:fb:0f:70:
         a1:6e:57:ef:81:79:2d:f0:52:50:d9:2f:98:ae:42:5a:46:c1:
         a5:07:1c:cd:20:35:1d:a2:46:58:8e:5f:f1:a7:bd:59:22:bc:
         73:b5:29:1e:86:b7:31:a2:86:cb:6f:1b:7c:ef:61:d4:4c:dd:
         40:bf:ab:3d:66:b6:cf:6a:db:77:7c:8e:71:d4:66:6c:c6:f8:
         4b:bf:98:f4:bf:91:f9:1a:93:df:18:3c:1a:fd:fb:cc:1f:0a:
         80:62:70:9a:70:8e:d1:91:93:36:c8:ef:90:15:94:a6:7d:1f:
         77:9b:67:16:5e:41:2a:ec:4f:58:58:54:ab:3f:77:85:32:fd:
         b0:18:bc:57:09:13:e5:d6:2f:46:22:c8:96:d9:62:70:85:65:
         6d:47:32:18:f7:a1:84:7f:c0:02:43:9d:ac:e0:4a:c5:ca:30:
         e9:ba:83:b7:cf:82:f5:e5:7a:24:fc:23:ba:7d:87:ef:f2:65:
         c0:18:da:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:06 2024 by rpki-client on console-ams.rpki-client.org