Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa
File:                     59909e65-5a05-323c-879f-bcfb3a64d534.roa (raw, json)
Hash identifier:          dcSRj+DM/zgDdjZTOWTgOvtZ2ZRgdBvBoV0Vg5WHNqk=
Subject key identifier:   30:66:55:25:1B:0B:28:1E:F6:0D:FB:1E:57:08:9E:A3:78:91:8D:D4
Certificate issuer:       /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Certificate serial:       010D0C9F432858473095E51AA586B107FFB45520
Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     397131
IP address blocks:        23.170.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:e5:1a:a5:86:b1:07:ff:b4:55:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=790f37a2-2fbc-4d7f-8a43-79113f850989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b8:4d:cb:5e:a4:d6:39:fe:e6:c3:ee:74:89:
                    3c:51:4d:bb:14:38:0b:2f:3b:ca:0c:19:9a:f8:6d:
                    ae:5d:2f:40:77:36:10:7a:71:01:2e:4a:2e:9f:5a:
                    74:24:f6:cb:3b:19:22:98:7f:79:17:0b:be:94:ec:
                    e6:d3:c2:09:48:6c:ae:b0:95:78:eb:57:a4:06:3b:
                    78:44:75:04:2a:b3:7c:5a:00:49:25:4f:d8:74:e4:
                    89:dc:93:cd:42:a9:d9:fa:76:d8:87:7d:02:fc:fb:
                    cc:6b:9b:9a:b2:7b:e6:1b:a9:be:dd:65:9d:32:56:
                    ce:79:56:3c:4d:e1:2d:ce:1d:f5:85:c1:f0:83:96:
                    df:bc:a2:5f:b9:32:5a:45:53:3f:c5:0f:78:53:88:
                    63:56:01:47:95:b5:b2:84:ca:3e:a8:6d:ec:ce:e4:
                    ac:4b:b7:b8:7f:8e:5b:9c:d7:e6:e5:8a:ca:30:de:
                    9a:c7:e0:f8:b7:9e:7f:86:03:01:51:f0:71:43:cc:
                    ef:08:37:6b:0d:c7:aa:24:9b:35:d1:10:c2:9c:6f:
                    59:7b:df:32:b1:e0:c2:55:96:f7:be:b4:f0:61:81:
                    96:16:be:7d:b6:71:1f:29:0c:a8:88:26:2e:4c:3d:
                    a6:7a:44:21:68:63:4b:d7:a3:34:83:77:83:1a:65:
                    b2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:66:55:25:1B:0B:28:1E:F6:0D:FB:1E:57:08:9E:A3:78:91:8D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl

            X509v3 Authority Key Identifier:
                keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:28:8f:9d:a5:64:36:12:2f:f3:5e:3b:dc:65:72:a4:e1:63:
         ab:56:37:f7:0e:5c:1e:68:a5:4c:54:81:fd:ba:4c:e6:cf:3a:
         b6:70:0b:25:22:70:8b:b0:ff:21:7b:c5:3c:08:de:74:75:83:
         a5:b2:d6:49:bd:3d:cb:e3:14:a4:60:ec:5e:7f:b1:c4:a2:3e:
         33:9c:51:9d:3a:4d:34:0a:d5:0e:ce:87:5a:ed:f7:05:bc:a5:
         81:c9:c0:2d:57:f7:1a:7c:22:66:7c:97:d4:f3:cc:a6:12:3c:
         fa:e6:9d:74:65:50:85:6b:f4:22:1a:d5:17:9d:03:e1:73:f8:
         bb:ee:12:28:6e:05:8a:d0:52:c7:7d:79:80:8a:b0:a8:dc:3f:
         85:8b:2f:84:52:9d:04:c7:06:f4:b0:91:43:b6:34:e7:fe:cc:
         b6:b0:ca:79:06:a6:71:0f:46:38:f7:08:13:1e:5f:be:f2:a8:
         a9:1a:b1:70:54:31:17:ba:b5:86:e8:c5:ba:d7:aa:f9:8d:72:
         64:a0:b8:11:9e:1d:e3:05:1b:d2:a6:10:74:a2:40:80:e5:3c:
         57:7c:4e:7f:3f:97:5a:59:2e:75:be:42:f8:4a:5a:1b:41:9e:
         60:d9:0b:ea:60:53:60:20:52:a5:33:31:2b:17:b0:df:0f:ef:
         68:96:3e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:47 2024 by rpki-client on console-ams.rpki-client.org