Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f95c153a-ffa8-3b75-b0a0-97514874b1b8.roa
File:                     f95c153a-ffa8-3b75-b0a0-97514874b1b8.roa (raw, json)
Hash identifier:          PU/G1yhaKfRiKrkcE7IvgQjVDVus2y0g5ARfGRmR3Ho=
Subject key identifier:   F9:03:00:84:B1:93:5F:12:A9:D4:19:58:8B:DF:3D:16:A6:75:0E:F4
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B137359A9A2CD0165C3980
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f95c153a-ffa8-3b75-b0a0-97514874b1b8.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        23.235.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:37:35:9a:9a:2c:d0:16:5c:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=5c6b552e-6033-43f4-b2df-a54ea0e7247a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b3:58:29:e4:0b:0c:cc:d7:74:02:4d:ce:2f:
                    41:a6:8e:6d:c7:88:6c:44:f5:ae:4b:46:13:56:bd:
                    b8:cd:b4:d5:f3:3f:67:5d:87:b9:47:3d:76:d0:1e:
                    d8:fe:6a:e6:8f:46:75:bc:35:70:7f:27:c8:9c:e3:
                    3d:18:f6:39:81:a4:93:2e:44:6e:96:3e:11:1c:b5:
                    f8:6f:e0:f4:bd:72:d1:e8:c1:40:be:30:3a:b9:04:
                    c2:c9:cf:53:de:ca:5b:2f:cd:54:81:e9:6c:ce:05:
                    f3:48:69:c1:4d:3c:b7:e1:8d:70:45:3c:0e:12:c3:
                    a7:85:41:7c:b6:c1:20:7e:04:ab:23:2c:60:81:1f:
                    38:7c:ed:78:a4:e7:6a:35:5a:f7:1b:1c:7f:09:ba:
                    ef:ff:7a:02:e6:5b:7d:22:f5:dc:78:31:7d:20:38:
                    f9:50:e5:04:34:4c:d9:40:53:61:18:d0:9c:18:c1:
                    d4:49:90:00:0e:37:17:d2:bb:11:c1:22:93:c1:ae:
                    d8:da:1d:4b:9a:d8:8d:75:0f:2b:c2:e4:e3:8c:28:
                    25:7f:f9:b6:4d:18:53:d9:c9:da:e4:6e:04:5a:d9:
                    56:ce:f4:fd:a4:43:2e:d9:e9:d1:6e:93:c3:85:34:
                    73:35:10:1d:44:e4:a4:81:2d:22:79:90:ee:57:a8:
                    92:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:03:00:84:B1:93:5F:12:A9:D4:19:58:8B:DF:3D:16:A6:75:0E:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f95c153a-ffa8-3b75-b0a0-97514874b1b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:9f:8a:32:48:80:ee:1b:4d:e6:df:ef:05:7d:84:be:d1:2b:
         9c:b1:b5:b9:92:70:44:6f:e4:a5:ff:4c:b0:20:00:54:8c:df:
         26:74:e8:c8:a3:9c:d4:b7:39:1c:4b:9a:c4:78:41:f6:1b:6a:
         14:19:9c:f0:3d:88:ef:4a:70:cf:ac:3f:53:d9:9b:83:35:c6:
         75:39:a0:94:24:2a:5d:5b:fb:60:f7:af:fb:4d:b9:30:07:d4:
         88:48:88:5a:f6:44:c2:da:3a:d2:2d:b5:aa:41:fc:66:75:ec:
         07:a3:67:3f:e3:a8:13:0a:7d:dd:de:b7:a7:79:6d:d7:66:6b:
         9a:5d:4a:b7:30:b5:b7:13:c4:97:32:80:03:8c:27:5b:8f:9b:
         26:7f:a2:a6:5a:28:1e:a8:8c:ff:9a:54:04:1a:52:63:27:d9:
         d9:e0:ff:ee:8e:3b:36:ff:da:0c:e5:94:f1:f5:4a:6f:34:e6:
         52:ac:fb:3e:e2:d4:54:90:25:53:89:4a:19:4a:60:84:fd:ba:
         f8:d7:74:b0:36:67:66:d1:08:4c:b8:55:ba:31:ab:eb:f9:75:
         25:8b:3e:3b:86:0b:6b:6d:d5:b4:ce:11:60:cd:d3:da:66:4a:
         ab:60:f3:6a:e5:a8:b8:d3:c9:11:3d:68:24:7e:9a:01:16:03:
         b5:8b:15:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:34 2024 by rpki-client on console-fra.rpki-client.org