Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/7f0af303-ef66-3494-9c38-8f672671fb76.roa
File:                     7f0af303-ef66-3494-9c38-8f672671fb76.roa (raw, json)
Hash identifier:          1KJ0jenKCTVRHt0VNg+B1F2Xu3kzHny7PsrIZbTuj1o=
Subject key identifier:   29:68:4E:B5:DC:0A:26:D3:F6:A8:C6:50:44:86:3D:F1:4A:E1:F0:31
Certificate issuer:       /CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
Certificate serial:       010D0C9F4328584742BB4B37C3690940C9D47900
Authority key identifier: C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/7f0af303-ef66-3494-9c38-8f672671fb76.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     22799
IP address blocks:        24.207.0.0/17 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:4b:37:c3:69:09:40:c9:d4:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=b2a86c1c-1680-4586-aeff-3f91dd9f8e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:71:7d:7c:e2:52:54:b0:df:9c:98:13:8f:7c:
                    ee:50:e7:9e:eb:b0:42:aa:a2:1c:e9:d6:55:62:70:
                    81:15:5e:d1:08:12:08:c2:74:15:81:8d:27:51:82:
                    67:9e:9b:25:47:58:07:77:06:ff:b6:bb:40:11:db:
                    fe:a8:cd:bc:b0:c7:30:16:e1:3e:30:ea:4c:a1:2b:
                    80:2f:47:ca:be:33:24:dc:a8:3b:bc:6b:8b:e3:f9:
                    d0:8c:b1:82:da:52:5e:e9:4b:c9:6c:80:5b:c9:c2:
                    14:7d:ce:44:b1:25:03:70:94:c7:58:90:9a:b6:0c:
                    60:a8:9a:19:57:94:1e:c3:c3:29:ad:d4:ef:60:af:
                    28:46:1c:5c:d3:fd:cb:60:75:a2:05:2f:1e:33:db:
                    78:94:a1:22:41:4b:eb:1e:a9:23:24:25:ce:34:ea:
                    a9:dd:0f:79:2c:d0:e5:ea:79:ae:37:9f:ef:38:47:
                    11:07:0b:90:6b:29:d8:64:50:c9:dc:2a:8c:79:10:
                    5d:11:8b:82:31:2b:b7:fc:f1:9d:0a:6e:ad:cf:17:
                    be:1c:cb:51:9e:a0:6d:15:91:ea:bf:ea:85:c9:ef:
                    44:3c:8f:5f:b7:a8:7b:68:0c:aa:9e:5f:61:f5:b6:
                    75:e7:56:08:c1:c9:bb:ac:2c:81:48:d4:08:21:02:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:68:4E:B5:DC:0A:26:D3:F6:A8:C6:50:44:86:3D:F1:4A:E1:F0:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/7f0af303-ef66-3494-9c38-8f672671fb76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl

            X509v3 Authority Key Identifier:
                keyid:C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.207.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:70:f4:ce:48:6f:b5:a7:51:17:be:d9:3a:50:52:cc:73:d4:
         54:d9:6d:8a:56:cf:3b:08:2b:4e:18:f8:64:28:0c:40:d0:27:
         27:34:63:3f:9d:60:18:78:64:6a:d0:df:fb:c4:b2:bc:73:e1:
         43:a6:2b:52:4a:b1:86:af:17:40:c7:2b:6c:7d:e1:d9:2a:33:
         cf:ed:2d:cb:b2:ee:a5:eb:4d:92:3a:6e:46:47:5e:57:c7:33:
         57:af:1c:f4:f2:24:86:8a:da:6e:5b:5e:22:fe:2d:49:c7:4f:
         2b:4c:3a:ef:c2:8a:32:df:10:c7:58:45:d8:29:5e:30:27:50:
         f3:63:bf:ab:a5:46:53:e7:fd:27:a1:a8:fc:6c:d9:dc:e1:39:
         b8:d5:8b:c1:f1:a9:28:b8:93:ca:96:ae:ef:df:da:c9:71:fe:
         4c:0a:98:72:ee:d2:26:8e:af:4d:7c:43:73:66:f1:92:8a:94:
         bf:72:c9:66:94:f8:25:84:54:9c:c0:a2:d2:f3:af:c3:c7:a7:
         69:e9:a7:05:93:8d:66:2e:c5:0a:b1:73:4e:bd:62:1f:94:0b:
         f3:ec:47:c4:cc:05:6a:3e:a8:70:a9:b0:fd:61:3d:a4:ab:0d:
         68:2c:fd:14:15:cb:8b:8c:55:d3:10:b9:a3:54:7a:26:b4:b4:
         ca:5d:82:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:24 2024 by rpki-client on console-ams.rpki-client.org