Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/33989c52-a42f-3bd1-9235-3c4ff7255c3f.roa
File:                     33989c52-a42f-3bd1-9235-3c4ff7255c3f.roa (raw, json)
Hash identifier:          CMGOvfYPiwSht8IUQSmoEQLxAfxYlEljSRKrUGpsrVg=
Subject key identifier:   40:FB:B8:3D:25:2F:3C:61:DE:B4:AC:C6:A4:A9:4C:51:CF:85:A1:78
Certificate issuer:       /CN=90084646-f74e-42c1-9557-3764d36b8bb6
Certificate serial:       010D0C9F43285847F84F878EFAA1872D914B9A40
Authority key identifier: 31:62:95:A9:A8:FD:F7:CA:B2:C2:89:BC:47:64:7D:FC:1E:A0:7D:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/33989c52-a42f-3bd1-9235-3c4ff7255c3f.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     396238
IP address blocks:        23.187.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:87:8e:fa:a1:87:2d:91:4b:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90084646-f74e-42c1-9557-3764d36b8bb6
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=17a256c6-0e6c-4fbc-bf87-355d85222ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3f:96:99:7d:82:2a:c2:19:e7:0d:83:ca:ca:
                    23:3c:27:c5:b5:c5:48:f6:38:5c:57:4a:4f:e3:e8:
                    36:45:6a:30:b6:ff:db:59:65:e9:be:ac:29:3c:2a:
                    d9:d8:da:f3:91:e2:bc:7a:ac:81:99:97:1e:b7:d3:
                    70:9d:d9:88:5f:f2:bb:57:75:45:77:7f:45:19:52:
                    1c:71:f6:31:f5:f3:72:bf:8c:23:be:f9:3d:2d:42:
                    e7:9f:5d:12:66:bc:bd:fd:b9:2f:c6:0e:76:45:7f:
                    37:73:d8:89:22:2a:65:f6:8a:f4:3f:d0:60:9f:1b:
                    8b:ba:01:48:2b:73:fe:12:6c:8d:e9:03:40:95:91:
                    2b:b0:c9:e0:e8:8f:3c:4f:ab:d5:8e:06:6f:e0:c7:
                    9e:36:9e:87:7a:f2:25:3c:46:ae:7f:d6:8b:d7:30:
                    76:cb:1b:25:6a:30:b8:fc:e0:5f:5e:d1:f2:06:81:
                    ff:da:4d:8c:83:09:f5:96:39:74:23:5c:eb:a6:de:
                    f9:92:fb:92:dc:55:e3:55:02:7d:0d:ce:5a:ed:46:
                    f1:26:f8:71:9a:f9:10:f5:2a:79:ec:9b:01:54:a5:
                    ed:7a:f9:98:53:e3:17:3f:ec:e2:fb:91:cc:b3:24:
                    7d:5e:76:0b:83:0d:b4:c2:a1:a0:4f:cd:60:70:39:
                    d1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FB:B8:3D:25:2F:3C:61:DE:B4:AC:C6:A4:A9:4C:51:CF:85:A1:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/33989c52-a42f-3bd1-9235-3c4ff7255c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.crl

            X509v3 Authority Key Identifier:
                keyid:31:62:95:A9:A8:FD:F7:CA:B2:C2:89:BC:47:64:7D:FC:1E:A0:7D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:40:0c:a0:91:59:38:25:60:98:c3:d6:a0:fd:96:88:7d:89:
         08:68:b7:9d:52:b6:0b:c6:77:22:f0:98:46:f6:2c:bc:59:e2:
         6a:44:b4:7e:9e:87:60:de:dc:a5:12:eb:e8:be:d4:f3:bb:75:
         03:68:22:16:80:c8:a4:ab:9d:06:33:e0:ec:1f:26:60:b5:bd:
         a4:41:a7:80:29:5b:da:14:d7:8d:c4:36:4b:2c:9e:67:f9:3c:
         cc:c3:70:dd:32:49:1c:71:11:bd:81:d3:51:ff:e8:6b:88:22:
         b9:45:43:3e:32:24:3d:fb:53:4c:9c:82:bf:2c:17:4d:c5:af:
         c2:48:77:a3:ba:a3:0e:2e:c8:d2:8f:32:cc:8c:fc:06:58:64:
         d1:39:b4:52:eb:5b:82:0d:55:a8:b0:d9:59:d0:39:dd:3f:30:
         06:e1:8e:45:9c:82:ff:44:55:da:12:44:02:c7:fe:37:9b:42:
         24:73:40:d0:50:f1:54:a9:06:80:31:28:19:61:5e:4a:f8:eb:
         65:b1:72:5c:f9:34:92:72:56:55:34:69:9b:9a:77:19:24:c6:
         30:cd:51:7d:64:6a:e5:e3:89:ba:4b:8d:63:8c:ed:f1:84:af:
         df:9a:8e:0e:ea:9c:3f:91:03:d7:32:1c:05:f9:fc:4f:dc:57:
         d5:7c:6f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:44 2024 by rpki-client on console-fra.rpki-client.org