Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86cf6b8d-588c-3655-91c4-daa30a58f113.roa
File:                     86cf6b8d-588c-3655-91c4-daa30a58f113.roa (raw, json)
Hash identifier:          MGuUl/ZACin5O/WcMezrQFnSAy+BUwzhbvhUPCjplL0=
Subject key identifier:   F1:DD:69:DE:A2:A9:90:EC:9C:33:D5:F2:00:3D:E4:A8:83:75:11:C3
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285847362B632A21B2D9BBB0655160
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86cf6b8d-588c-3655-91c4-daa30a58f113.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     394380
IP address blocks:        23.19.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:63:2a:21:b2:d9:bb:b0:65:51:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=3ec8653a-8aac-446e-9811-346213ecd92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9b:11:56:88:7e:a2:58:89:5f:53:25:db:4b:
                    15:60:84:2f:d1:7d:6d:f1:cd:56:92:8d:51:54:ee:
                    6e:e8:0c:5c:65:9f:a3:c6:1c:0a:71:c9:3f:84:a7:
                    92:84:e7:2e:14:13:7d:be:05:d5:f7:3f:35:9b:71:
                    b9:f6:46:51:51:3e:90:5c:0c:b5:aa:38:f0:2d:0d:
                    4b:95:a1:f0:ce:e5:ba:ff:c0:e5:13:0b:13:9a:04:
                    dc:59:2c:13:6f:71:d2:98:81:47:88:6c:7d:98:6f:
                    29:2d:a7:bd:58:e4:b3:2e:ca:0b:a1:57:38:47:a5:
                    d7:19:10:c5:54:c2:76:23:28:1a:9a:18:a1:00:9d:
                    89:ad:19:91:a2:08:c9:21:54:64:97:fc:df:63:fe:
                    c3:35:b0:e9:91:ee:b9:fa:08:c7:84:bd:29:ee:6e:
                    1e:9a:8d:ae:c8:e0:b8:57:ff:65:91:cb:fc:73:15:
                    b8:2e:08:42:42:89:5f:cc:9e:66:26:22:fd:76:65:
                    bb:1d:e0:28:e3:af:36:39:ec:e6:6a:5a:b3:c5:c9:
                    b9:e7:ed:e8:d8:5f:a1:81:94:1c:cb:42:6d:d8:3d:
                    5c:16:bd:3e:5c:f2:65:5b:f8:02:01:9b:83:77:44:
                    54:9d:ad:6f:02:af:85:d8:67:a8:2a:30:de:08:d3:
                    82:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DD:69:DE:A2:A9:90:EC:9C:33:D5:F2:00:3D:E4:A8:83:75:11:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86cf6b8d-588c-3655-91c4-daa30a58f113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:5c:b3:8f:62:d9:db:bf:72:7d:da:54:a0:fa:a5:94:e1:0c:
         d7:96:7a:6d:4e:bf:3b:41:65:21:cc:f3:64:c2:79:b0:48:e2:
         b3:a1:3d:57:a1:5b:3c:16:86:fb:4c:02:4f:6b:be:fa:cd:64:
         63:8c:24:1d:91:ac:bc:75:12:75:72:8f:07:66:3f:53:f7:32:
         ea:aa:a4:1d:95:5b:ec:47:73:c7:98:b7:c9:75:68:22:17:91:
         48:72:fb:fb:ae:64:23:51:61:d9:59:2e:11:2b:37:a2:06:d6:
         cb:f3:ec:fc:90:e1:08:8b:0b:ba:69:c8:0f:05:f1:10:ac:c7:
         05:65:df:9d:d8:9a:f3:f5:7d:3c:0c:c2:39:0f:69:3f:df:ea:
         b6:9c:ab:96:76:8a:3e:38:b3:cf:89:f0:f9:c6:f5:92:6e:e8:
         dd:4b:ba:40:f3:de:d9:46:20:07:f2:ef:fc:38:66:dc:97:0f:
         21:3a:55:f0:6f:78:ea:3a:5d:f7:43:e7:bc:ea:36:53:66:02:
         cd:8d:6a:5c:41:1d:b9:24:5d:54:fe:84:19:74:bf:3b:85:9a:
         e9:fe:03:77:90:c9:5e:99:2d:c7:6f:c3:2e:a9:9e:a3:e1:2a:
         7a:09:6b:e4:1d:85:4f:fd:65:b3:c1:8c:47:5a:51:11:8f:8d:
         77:7f:07:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org