Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b364f3ee-b91f-393c-a42d-2eef050ce61e.roa
File:                     b364f3ee-b91f-393c-a42d-2eef050ce61e.roa (raw, json)
Hash identifier:          ZXhQvfkAuaQejBLe0JrMkimugOysmubtfLVTypEZbD0=
Subject key identifier:   9D:9D:41:4F:43:04:3C:0C:90:A1:54:1B:9F:BF:63:81:E0:B3:0A:9A
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285847AE36C2A77D1464D9E959B018
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b364f3ee-b91f-393c-a42d-2eef050ce61e.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     271
IP address blocks:        207.23.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c2:a7:7d:14:64:d9:e9:59:b0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=d3f9b7d7-e808-41be-a60b-6471554a9893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b1:d8:48:ce:b1:f5:9b:7b:5b:7c:23:dd:89:
                    d6:45:1b:ca:78:be:04:bb:99:e6:58:87:0b:10:78:
                    42:64:2a:50:10:d5:d9:f3:38:c6:dd:4a:82:14:0a:
                    e0:3e:bf:12:34:18:fe:41:28:06:e1:ee:6b:d4:b4:
                    a0:3f:63:7d:7e:7c:2b:1c:33:6b:c5:0a:84:b7:f2:
                    71:83:3e:a3:69:04:a8:ed:5a:90:c7:79:70:3e:e1:
                    a4:ec:ff:df:86:cd:d6:a9:a9:93:97:0e:73:a8:32:
                    5e:27:1f:8d:a4:f5:29:bd:26:74:de:da:c3:5f:b5:
                    1e:c5:b6:ec:89:ac:df:7b:91:25:91:71:81:f7:2b:
                    f3:fc:83:4e:ba:5f:95:76:c2:1c:e0:de:9c:33:a5:
                    0f:9b:33:39:ed:4a:e6:51:3f:79:91:d7:6a:49:08:
                    85:b6:13:e7:95:3e:d2:52:bc:23:dd:18:f3:74:ab:
                    09:ee:03:b4:16:30:97:a9:a0:2b:ca:03:0a:50:d2:
                    47:85:95:c0:93:55:15:f6:40:2e:a5:5c:5c:80:1f:
                    72:80:3c:8c:df:06:cd:a6:79:df:5d:b5:fe:cb:a6:
                    5f:b7:4c:dd:1c:25:4b:7a:d9:a1:86:7f:39:5b:c6:
                    74:ca:56:9b:ce:01:97:94:5d:69:39:6a:0d:0e:64:
                    cb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9D:41:4F:43:04:3C:0C:90:A1:54:1B:9F:BF:63:81:E0:B3:0A:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b364f3ee-b91f-393c-a42d-2eef050ce61e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:36:f4:27:84:ce:4c:a4:73:10:98:a2:92:81:d3:3c:f3:38:
         ba:1c:e1:c7:07:d6:d7:b7:a2:de:3d:68:77:63:c2:3f:8a:46:
         55:52:5a:77:d3:d1:39:01:dd:16:6a:3f:65:b8:a7:bd:6a:fd:
         f8:3d:6d:36:f7:5e:55:52:0b:2f:21:8f:e1:f8:4c:54:6d:a0:
         64:b2:25:f6:6b:58:3b:55:e1:f3:68:58:f3:d9:28:25:a1:d0:
         71:7a:bd:7a:ef:d6:c3:bf:10:ce:8f:5b:69:48:46:9b:e0:33:
         74:40:8c:b2:1c:12:c9:4a:7d:0e:e7:7e:a1:4d:0b:6e:8b:97:
         12:b7:bf:48:32:67:3e:1d:1a:41:95:3c:09:7b:8d:0c:2c:fb:
         6b:7f:f9:e9:b7:1f:bb:6a:b3:c5:d9:16:c3:4e:d0:6a:e5:90:
         71:b3:23:da:fd:b2:b6:e9:da:bb:ef:b4:c6:89:f8:e0:b3:b8:
         8f:78:37:69:d6:d5:d0:91:92:a4:fa:d9:e0:dc:e5:cc:ae:95:
         69:9f:ad:ab:79:a2:df:02:fc:73:60:ad:3a:55:66:e9:aa:93:
         15:09:69:f9:76:d6:55:08:bc:11:3a:ae:48:73:cb:9e:a8:88:
         95:e1:ec:59:95:13:76:d6:8c:f7:2a:74:2b:be:85:92:76:dd:
         49:05:77:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org