Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/87fb2e12-fbed-3501-9e6f-d3bffcc7d7fc.roa
File:                     87fb2e12-fbed-3501-9e6f-d3bffcc7d7fc.roa (raw, json)
Hash identifier:          BLaV+iWv9k0pav0NnXOUL9/kBfZ4oIaBPRRWC9E85tA=
Subject key identifier:   1D:9B:2B:11:DB:03:E4:0B:34:87:21:3B:90:04:CE:A6:25:5F:5A:4C
Certificate issuer:       /CN=47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f
Certificate serial:       010D0C9F432858478E1BC7278A6625FF7665B4A0
Authority key identifier: 2B:81:44:23:12:6E:F4:2C:6F:52:A8:3D:66:1C:06:CE:9D:1F:0E:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/87fb2e12-fbed-3501-9e6f-d3bffcc7d7fc.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     11775
IP address blocks:        23.164.104.0/24 maxlen: 24
                          2607:7340::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:c7:27:8a:66:25:ff:76:65:b4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=3f0ca751-599c-4aef-bdf3-1344a91c5aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:16:dd:ae:60:3b:07:cc:d4:26:94:89:33:5a:
                    2e:82:3d:a4:96:55:5d:07:60:1c:68:8b:9a:8e:a4:
                    de:ce:7c:91:70:03:38:64:ba:d7:95:a8:e8:63:77:
                    27:29:2f:d4:f8:20:15:4a:a1:ff:63:1d:a4:57:35:
                    6d:a7:14:ed:06:d6:74:4e:0f:8b:d4:bb:d4:08:56:
                    99:e4:ea:42:e3:10:d2:7a:31:fc:6c:28:f4:2a:7d:
                    1f:61:4b:f9:21:66:7d:0c:60:68:34:13:50:84:6f:
                    6f:a5:71:f1:8d:fc:4d:77:3b:53:d4:69:c5:d0:48:
                    be:b6:c0:87:62:77:fe:8b:57:09:6b:f2:59:a4:ac:
                    41:20:5e:ed:34:d9:56:b6:28:d0:5f:2e:e4:90:f3:
                    f3:7c:db:9d:b0:e1:dd:08:07:ed:77:9b:70:83:cd:
                    6e:51:16:85:41:87:8f:86:b8:8d:af:29:e0:9f:39:
                    23:d4:1e:d3:30:40:69:de:e3:cb:a0:1a:ec:00:ff:
                    e6:7f:d4:78:7d:62:25:ca:fa:15:2b:5b:e4:d4:2b:
                    20:c4:20:5b:d7:f9:07:79:43:67:0f:b4:36:67:82:
                    7e:26:74:e0:e2:6d:93:1d:68:7e:d8:64:df:41:cf:
                    54:9b:51:f5:f6:08:70:96:32:63:5c:c1:04:d2:c1:
                    80:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9B:2B:11:DB:03:E4:0B:34:87:21:3B:90:04:CE:A6:25:5F:5A:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/87fb2e12-fbed-3501-9e6f-d3bffcc7d7fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.crl

            X509v3 Authority Key Identifier:
                keyid:2B:81:44:23:12:6E:F4:2C:6F:52:A8:3D:66:1C:06:CE:9D:1F:0E:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.104.0/24
                IPv6:
                  2607:7340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b2:54:7c:e3:fd:56:db:55:39:3b:6f:7b:08:2e:d4:30:37:
         a0:6a:77:64:e3:d3:5a:8a:d3:ae:a3:c7:ec:58:6a:72:ec:ee:
         ae:9a:03:24:72:e2:f7:14:95:dd:05:93:cd:08:2c:69:61:c3:
         44:b8:b1:fb:8c:cc:c9:11:08:ad:f7:67:71:2b:5a:f6:10:ef:
         ed:06:4e:43:b6:e1:ce:64:3e:e7:2f:e0:d0:1f:bf:41:3e:74:
         eb:fa:9e:d1:3d:94:4b:e0:56:61:57:55:03:8c:32:b1:f3:65:
         6c:88:33:3e:db:43:4f:14:1d:cc:7d:f8:af:18:5b:31:de:3e:
         78:ed:d6:3e:57:4e:df:43:ef:7c:cc:c9:a9:04:cc:1c:4a:74:
         2d:0f:b6:c1:b1:05:9e:55:88:ae:52:b0:87:91:e5:1b:ad:af:
         88:dd:df:d8:bc:cb:8a:1c:f7:fa:93:61:b3:37:6e:3a:43:9f:
         49:d2:31:8e:93:35:d9:9b:e9:ab:ef:70:52:02:ca:ad:d0:a8:
         75:76:04:ee:66:24:5e:14:4f:6d:91:70:f5:fe:00:37:52:ca:
         f1:e5:0a:72:cb:e1:12:64:9f:dd:7a:43:96:b0:fe:71:9b:50:
         f7:f1:f9:40:b2:f3:bc:ae:df:51:23:4b:60:65:77:24:68:2d:
         0c:c7:8a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org