Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa
File:                     288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa (raw, json)
Hash identifier:          Yv7Tcu8/u0WwNd/naUyxntrjtcrDhPl6oQKiAhpXrH4=
Subject key identifier:   FD:F5:4B:F8:E2:C0:CA:EB:AC:E8:D6:E9:C9:80:B7:E5:62:9E:F5:1B
Certificate issuer:       /CN=194b4d95-965d-467f-835c-6cdeececce61
Certificate serial:       010D0C9F432858478E1BC78781348483421D8F80
Authority key identifier: 2F:A3:C7:92:60:1D:0F:77:6B:A7:06:EE:E1:9E:D2:34:E7:F8:90:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     1062
IP address blocks:        23.166.216.0/24 maxlen: 24
                          104.166.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:c7:87:81:34:84:83:42:1d:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194b4d95-965d-467f-835c-6cdeececce61
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=1ecdb54d-6e84-4936-b913-063b75ddaa86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:99:56:14:16:03:d2:46:11:25:a3:5f:84:
                    55:97:22:39:b9:c8:3f:b0:c6:e3:a2:1b:08:65:4b:
                    cb:ef:a2:ab:cd:35:3c:14:d8:73:4c:5b:a7:4f:e4:
                    71:58:bc:f6:cc:b6:0c:db:4b:76:32:e3:fa:6c:c7:
                    41:34:31:7e:6e:c5:82:ef:32:4c:41:d6:4a:60:fd:
                    5d:41:3a:7b:20:63:e3:14:3c:2e:41:67:21:4b:41:
                    2e:54:0a:3d:6b:43:6d:9c:d0:ff:01:c3:88:6a:4a:
                    0f:c5:12:d0:c8:d0:84:ee:1d:7b:7b:ca:dd:e5:c3:
                    5b:aa:49:41:a9:e6:d4:b6:c1:3d:20:32:3d:66:99:
                    07:b2:fa:c6:30:b6:9a:2d:34:48:67:40:7b:63:3c:
                    22:f5:c7:70:71:62:bd:e1:b3:f4:d6:46:c6:da:73:
                    ba:3d:49:77:4f:02:5e:13:2e:5c:5a:f9:d8:c7:36:
                    b3:14:5c:db:ad:e5:83:8a:ec:a3:c5:f6:01:e2:ca:
                    d5:8d:0e:7c:50:29:e6:bb:a3:4c:26:45:c5:ca:e2:
                    fe:96:a6:3a:d2:1f:c9:1e:59:d5:e6:e4:57:a0:57:
                    d7:52:e1:a5:ed:76:96:17:6f:79:b3:8a:21:a6:f8:
                    12:c5:d4:75:17:b5:c8:23:35:5d:73:86:24:69:aa:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F5:4B:F8:E2:C0:CA:EB:AC:E8:D6:E9:C9:80:B7:E5:62:9E:F5:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.crl

            X509v3 Authority Key Identifier:
                keyid:2F:A3:C7:92:60:1D:0F:77:6B:A7:06:EE:E1:9E:D2:34:E7:F8:90:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.216.0/24
                  104.166.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:63:97:7a:25:7a:3a:ef:61:5e:31:6b:6d:d4:89:05:d4:61:
         1e:8e:27:44:66:c8:ed:bc:2e:46:cb:19:ed:6e:76:1b:1c:f7:
         5c:74:8d:a8:4d:f2:70:c3:9b:36:e7:0a:e4:50:e7:6c:a3:c1:
         ce:a7:39:6d:5a:1d:1b:e5:6f:dd:34:79:ee:05:d7:82:42:6a:
         e0:93:d5:c9:ca:0b:88:40:85:bf:f6:24:63:56:3e:d2:5a:7e:
         78:c5:02:49:48:eb:26:9b:77:c3:ad:6b:71:c8:4f:0d:ae:31:
         3a:0d:1a:86:be:36:5e:14:b1:c8:1c:df:e4:17:7b:a4:ac:a3:
         30:0f:33:1f:69:a8:d7:f6:7b:09:cb:02:bb:85:1d:55:94:8e:
         8f:f0:9e:8b:f0:16:3c:93:91:31:21:80:3d:1b:bd:04:11:7c:
         8f:c1:69:8a:2b:de:5d:86:45:fe:25:67:f6:a9:7f:af:66:65:
         19:1d:1c:ac:39:4e:c3:53:70:d0:e2:62:8a:98:29:55:26:ab:
         00:6d:40:21:ab:6e:8b:21:50:d3:9e:dd:85:0b:8d:9b:8b:c0:
         b4:ef:de:06:6c:8c:10:db:24:b9:e9:b5:46:09:16:c9:8e:5e:
         12:86:53:ea:c6:32:bf:23:75:8a:eb:a5:5d:42:58:e2:2c:a7:
         5a:05:a2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org