Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/dacc71d3-a94a-3e01-8efc-0551dfc89451.roa
File:                     dacc71d3-a94a-3e01-8efc-0551dfc89451.roa (raw, json)
Hash identifier:          dMMYcOLUWLVdFvR/NsQIEPMxKk8SWmposYYeidbIUxc=
Subject key identifier:   8E:4F:4E:D1:8E:A4:EF:88:57:51:10:69:DF:37:29:A7:20:04:73:1D
Certificate issuer:       /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
Certificate serial:       010D0C9F43285845734DAE84E937569738D72200
Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/dacc71d3-a94a-3e01-8efc-0551dfc89451.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        23.29.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:ae:84:e9:37:56:97:38:d7:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=70df4fb0-9a35-42ab-8091-73949011d1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:d5:de:64:e5:5c:c6:c3:a5:0e:51:de:71:
                    66:73:05:63:76:4e:9e:62:6b:a4:d2:c5:a1:a4:45:
                    33:00:cf:d6:c6:d8:c1:e1:08:99:19:01:ad:5d:e1:
                    e4:d0:43:7d:c4:de:f8:13:04:8d:e5:51:21:a9:41:
                    49:dd:55:07:f7:d1:0a:cf:6b:6c:ab:19:18:8b:75:
                    6b:d8:b3:46:4b:52:a6:5e:2c:f3:78:6d:f4:07:6c:
                    46:f6:0b:58:6f:48:ba:ac:d4:3b:5c:9a:fb:f2:37:
                    1d:5f:4f:25:10:47:37:b6:8c:ef:87:cf:8a:d0:8b:
                    76:8f:35:b4:82:9a:f5:1c:79:cb:b6:90:e4:4a:dc:
                    75:b9:dc:82:64:d5:69:c8:2f:03:e7:2f:cf:e8:40:
                    c5:86:1a:5b:08:72:a0:1f:b8:df:8a:9c:eb:d3:63:
                    19:79:2b:38:13:2c:be:71:b0:9f:38:6f:0e:f2:96:
                    ea:0b:95:a7:85:b8:b0:00:1c:bc:04:91:89:6a:df:
                    41:12:8a:da:a9:87:22:e4:15:7a:8a:aa:d9:20:7d:
                    c8:cd:f2:31:34:c6:ff:23:ae:e4:e6:53:a3:88:74:
                    97:19:52:3f:e8:4f:c8:c8:d7:bb:7f:f8:02:1e:50:
                    3a:a3:51:42:33:36:b8:6e:42:63:fc:dd:7c:06:20:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4F:4E:D1:8E:A4:EF:88:57:51:10:69:DF:37:29:A7:20:04:73:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/dacc71d3-a94a-3e01-8efc-0551dfc89451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl

            X509v3 Authority Key Identifier:
                keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.29.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c0:92:03:26:2c:84:74:b4:06:07:43:67:d7:58:36:ec:b1:
         ef:de:3e:c2:db:10:93:6e:1d:90:64:11:f9:54:32:15:cd:c0:
         bc:ff:cd:b3:9e:f3:9a:12:d8:b4:45:0f:a2:a4:48:31:cc:7c:
         00:fc:62:0c:96:f5:09:ea:22:1b:3b:1d:4d:d5:d8:fa:af:29:
         5b:e3:27:92:f5:a4:91:e0:e6:10:d9:d3:ad:dc:1e:28:0e:7a:
         73:2e:c7:21:89:48:12:51:04:8b:86:d3:a2:ea:91:0f:50:9d:
         bc:1d:f3:38:9c:80:55:c9:40:c9:a4:62:bb:10:4e:0f:06:00:
         7d:59:f9:a2:b7:b3:d0:d9:95:54:a9:84:a3:69:59:40:fd:0b:
         69:a9:36:ac:5e:be:d0:f5:c9:8a:7c:b5:4c:5e:a9:cb:e7:ea:
         17:35:46:1e:18:89:fe:ea:d5:5a:1f:2e:97:b4:0d:7a:a9:f1:
         49:5d:fb:1a:d1:4c:6e:b9:7b:5b:21:fa:80:40:1f:a2:4a:13:
         41:16:b4:6d:54:0b:ce:42:f1:58:00:9f:3b:eb:1e:10:66:76:
         f4:98:4f:cd:58:18:2a:f3:7d:49:94:44:e0:9e:4e:99:2e:3a:
         1f:ed:26:0c:54:ae:42:81:61:07:2a:14:ed:15:92:b7:08:ea:
         ce:37:4d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 06:51:47 2024 by rpki-client on console-fra.rpki-client.org