Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f464d4a-50d1-3a5f-8c43-8ba2090ac256.roa
File:                     1f464d4a-50d1-3a5f-8c43-8ba2090ac256.roa (raw, json)
Hash identifier:          VU2by29FcgWPc7Ltxf7pwygB//wVNTgvnDmzPlqCC98=
Subject key identifier:   02:52:BB:43:9A:58:48:A3:BF:DF:B2:62:39:D7:D5:F0:6B:23:A6:A7
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5F68B19DFCAD925AC4B40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f464d4a-50d1-3a5f-8c43-8ba2090ac256.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     19157
IP address blocks:        23.86.20.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:f6:8b:19:df:ca:d9:25:ac:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=3f0e8076-63fb-4c54-8f9e-716eb73550a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:79:26:1a:8c:b8:19:dd:5d:5d:5b:fe:5a:
                    a1:38:66:93:d7:25:d2:56:cf:f2:0e:b1:81:80:8c:
                    3b:2c:bc:11:e3:54:50:40:3e:c8:3d:b2:16:7b:24:
                    6a:82:f2:3f:db:85:65:95:fa:20:06:b5:c5:e3:6e:
                    af:83:ba:0d:76:e8:eb:35:1f:f5:24:59:1f:63:b9:
                    ce:df:7d:f8:be:77:8e:c8:bf:fc:aa:f8:5a:b4:f1:
                    8d:44:91:a9:ba:f2:60:e7:dc:c6:c0:80:c2:10:1b:
                    2b:f8:d6:e9:70:db:b0:32:d0:c4:da:ce:19:28:31:
                    6c:91:d7:d6:d0:dc:a7:93:90:2b:24:d3:2b:61:a3:
                    03:39:4e:dd:26:58:16:a5:ac:5f:37:75:04:0e:f8:
                    b8:e0:38:4b:b4:25:78:f9:4d:52:3f:40:68:e5:7a:
                    86:41:58:9f:8d:6d:69:e8:f1:22:04:93:bd:0a:45:
                    73:c0:0b:88:6f:99:cb:fb:76:80:38:21:f4:3c:29:
                    df:b8:23:10:db:c5:0d:54:4c:75:dc:fc:a2:0c:86:
                    ba:ac:bd:c3:3a:dc:f0:3f:ef:3f:a8:87:12:fb:63:
                    1f:83:c9:24:8b:81:c7:8a:df:c7:e9:cb:aa:9c:00:
                    49:ee:86:af:6e:6a:2c:e3:1f:c4:00:76:2e:a9:40:
                    53:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:52:BB:43:9A:58:48:A3:BF:DF:B2:62:39:D7:D5:F0:6B:23:A6:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f464d4a-50d1-3a5f-8c43-8ba2090ac256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:8b:d9:e4:56:0c:d8:1b:58:41:80:45:e7:03:8c:31:65:f4:
         b3:66:bb:d9:ef:50:74:d1:e2:a7:24:02:77:fc:e3:aa:13:cb:
         07:8c:7a:d3:05:09:bf:66:01:d9:d6:33:63:f3:21:aa:19:9d:
         0a:ea:8e:22:f8:1f:0e:43:7c:10:44:2c:70:06:62:6c:a7:be:
         7f:e7:32:88:a3:05:e1:cd:24:47:50:c9:d1:dc:bd:bb:69:35:
         62:ed:c7:0e:8a:a3:ea:dd:10:63:3d:39:88:bc:4d:36:7e:cb:
         1a:9e:84:9d:b1:04:2b:e2:ab:ff:3f:7d:6d:a3:05:fa:20:e8:
         32:40:4d:70:a5:bd:7a:c7:34:00:b8:37:e0:39:27:65:29:53:
         b7:1e:64:a5:0d:9e:43:35:a6:6c:b4:8a:ba:6b:3e:5c:f8:73:
         6c:36:77:78:d6:9d:e2:3e:d5:09:0d:cf:e0:26:8e:67:f3:f3:
         66:2f:89:9e:01:5c:d4:63:bc:6c:0c:c0:cd:46:5d:76:05:a8:
         6c:66:a6:c9:05:25:9c:63:57:bc:1f:50:bd:9c:09:fa:d2:de:
         94:84:66:bc:91:3c:d5:aa:e4:9d:d1:96:9d:d3:34:ff:fd:60:
         0a:14:b0:e5:39:c7:dd:d5:a7:6e:92:86:48:44:d8:5f:4d:88:
         a3:d4:e9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:06 2024 by rpki-client on console-ams.rpki-client.org