Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/817a7de8-0b60-3ec9-824f-449112c81345.roa
File:                     817a7de8-0b60-3ec9-824f-449112c81345.roa (raw, json)
Hash identifier:          ZQooM/hH4UUcHT35HvpmEKtU4ieWawMGXWUiqiZtutY=
Subject key identifier:   E8:0E:BA:A8:12:E7:F7:4E:8B:25:18:C1:5C:32:CF:B1:B0:DA:1E:FA
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285847362B62E77284F987ECDAF2E0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/817a7de8-0b60-3ec9-824f-449112c81345.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     7203
IP address blocks:        23.19.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:62:e7:72:84:f9:87:ec:da:f2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=bfac4e11-f817-4b9e-8f73-3b22a1a35229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e2:26:27:eb:ba:8c:bd:f0:9a:70:5e:4b:2f:
                    82:c5:82:91:c1:ac:d9:ce:2c:c1:33:d7:47:ef:d7:
                    10:95:19:1c:71:00:ce:23:b2:77:0c:b2:20:ef:35:
                    1a:f2:c4:92:5c:cc:07:68:0e:61:f3:86:b3:da:42:
                    78:c3:76:6d:7e:d6:aa:c9:12:ae:f5:0c:cf:52:56:
                    ce:15:c9:5d:31:03:96:02:8e:b7:64:2c:c2:9d:70:
                    e8:12:86:07:b1:6e:0a:ed:59:2a:58:e0:8a:a1:a2:
                    34:f1:22:5c:c5:d1:df:6e:bd:c2:ba:9b:5c:05:03:
                    ed:72:ac:b8:6a:1c:6b:83:9e:86:5e:a7:a7:c9:f1:
                    36:75:87:77:8c:f2:42:d1:f5:8c:48:46:4d:bc:db:
                    e2:06:71:b1:41:0a:6f:e2:04:9c:7f:82:4d:a3:72:
                    12:e8:8d:db:33:ed:a7:d9:f2:d1:f5:b2:24:ac:85:
                    fb:61:cd:9b:1a:09:f4:2b:29:f1:f8:31:01:0c:ce:
                    77:a6:3e:01:71:17:a4:4f:bb:91:d8:80:28:a6:ad:
                    d3:39:b4:e7:5a:a0:56:99:f7:61:bd:f0:86:17:5a:
                    52:22:39:d9:d2:93:25:f2:93:b8:46:2e:37:f8:26:
                    8f:de:7a:15:56:a4:0f:0b:6f:c2:63:74:ed:20:1c:
                    51:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0E:BA:A8:12:E7:F7:4E:8B:25:18:C1:5C:32:CF:B1:B0:DA:1E:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/817a7de8-0b60-3ec9-824f-449112c81345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:48:ad:96:39:dc:e4:0c:99:f5:76:58:8d:86:96:09:8f:85:
         91:55:a5:e5:77:d5:a2:03:a1:d7:e4:a2:e1:01:d4:e7:84:53:
         65:76:7e:b9:89:df:ac:d2:f6:c0:9f:8e:73:70:dd:a4:45:9f:
         8e:8b:f7:7a:9f:cb:aa:fa:15:a4:b3:d2:1d:10:9b:5e:20:71:
         af:8f:0f:41:ac:c3:03:55:f2:92:a9:22:c0:2c:86:38:00:34:
         4b:26:44:4e:08:02:da:eb:4d:ed:43:bf:5e:1f:8c:09:ec:f0:
         28:d0:9d:79:d6:ad:2d:3d:b1:df:d9:54:39:d6:cd:25:35:b3:
         b4:f9:15:e3:e6:ff:b8:97:09:5c:ea:83:2f:af:97:61:42:66:
         f5:c1:3d:9c:aa:98:f2:f3:af:2b:22:f3:2d:2f:97:e4:af:9f:
         1d:a3:f8:0e:84:78:49:ff:25:20:2c:a4:c9:85:88:c8:d6:14:
         08:76:8d:aa:d0:dd:f5:31:9f:e2:f3:d1:1f:6a:dd:4b:ac:0a:
         9d:41:20:a9:72:6a:34:52:41:a3:5f:f8:21:2f:c2:74:81:e1:
         5c:e8:4e:77:22:b6:c7:9b:cb:91:32:c4:90:fd:ca:43:42:09:
         4e:ec:3a:43:74:45:c0:50:35:32:80:bf:ba:b5:32:80:eb:8a:
         c8:a6:b3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org