Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/051a3e28-2cc4-362b-bccd-c164deaf53a8.roa
File:                     051a3e28-2cc4-362b-bccd-c164deaf53a8.roa (raw, json)
Hash identifier:          SnW42/spmFKQ0AvOOB/BlwSuGrsAcgiNM8RcDOJ4s7U=
Subject key identifier:   AE:85:4C:54:83:D3:07:7A:FB:9C:56:4C:0D:D7:9A:7C:3C:B1:10:F8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858478E1BD72010CE55A82BB2CD20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/051a3e28-2cc4-362b-bccd-c164deaf53a8.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     20940
IP address blocks:        23.32.238.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:d7:20:10:ce:55:a8:2b:b2:cd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=608faaad-acba-493f-939f-6a17aa7f6bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:60:e0:52:e8:83:37:e2:28:e4:16:7a:69:68:
                    df:19:41:f6:76:28:97:73:02:25:42:c4:29:63:4d:
                    12:8f:84:6b:ce:7f:7f:85:82:6d:3e:6f:28:25:80:
                    f3:bd:b2:7a:77:23:db:e6:4f:58:dc:6d:56:59:2a:
                    bd:3e:49:cc:22:31:89:b6:9e:7d:a2:bd:56:f4:1e:
                    05:62:c0:74:a5:92:78:7b:87:24:03:f6:60:82:3b:
                    6d:7a:86:b7:d7:29:17:d3:fe:f5:8d:f1:f9:fb:2b:
                    20:8f:cc:69:d7:11:ca:9b:b4:ef:54:5a:58:4c:48:
                    cc:08:f5:eb:09:21:33:0c:06:ce:09:9d:30:af:61:
                    15:ad:c6:33:81:97:e0:d9:cd:ba:5d:76:fe:bd:d9:
                    6b:9d:cd:fc:fc:b2:9a:33:df:84:92:f8:0e:40:02:
                    1d:2d:20:42:1b:2a:e1:38:c9:b7:d5:b3:91:5f:60:
                    16:cb:61:7e:66:39:99:ff:a6:d2:14:05:68:2b:4a:
                    de:cc:f6:ae:35:16:83:b7:46:f8:12:8c:7d:d0:6c:
                    ef:ac:11:eb:c8:8a:58:38:fb:1e:9e:d4:f8:fb:fb:
                    c1:0b:22:4b:7c:bd:8f:29:8c:5a:da:3a:fd:54:ae:
                    8f:61:39:f9:4f:03:b0:a6:de:a3:56:5e:20:f2:d3:
                    e4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:85:4C:54:83:D3:07:7A:FB:9C:56:4C:0D:D7:9A:7C:3C:B1:10:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/051a3e28-2cc4-362b-bccd-c164deaf53a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.32.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:a5:2a:1f:87:2f:94:70:c8:88:a2:64:be:a9:01:83:74:25:
         ad:93:1d:76:eb:ac:fd:ca:af:7c:33:06:04:8a:66:0a:34:28:
         31:8c:33:3b:63:68:ca:eb:53:6d:58:4b:ba:cd:c3:bc:29:51:
         21:7b:aa:6a:3f:99:09:e6:40:e7:db:ce:13:43:e3:22:72:e6:
         43:f3:74:2c:dc:89:28:88:bf:9f:92:e0:e7:b6:73:c0:c3:32:
         b5:56:e8:52:00:8a:5f:ce:1f:54:05:ae:b4:a3:e8:d2:ff:7a:
         f8:8d:25:9b:b4:17:81:7d:a0:4a:69:ab:ac:1b:4f:b0:34:ee:
         1d:1e:45:2a:f8:5e:59:18:f7:6d:8b:a5:0a:25:2a:b8:29:d7:
         b7:2f:4d:1d:f9:d5:38:c7:d8:55:07:d2:87:05:fe:12:f4:21:
         41:f6:93:81:d6:ad:0f:cb:ad:48:ae:d3:e8:84:6b:e2:92:a5:
         f7:26:0a:9d:1e:c8:ae:14:95:af:52:93:b5:f2:3c:dc:70:7b:
         5c:06:e0:92:59:1b:24:62:72:40:69:bf:d7:03:59:f2:3e:ea:
         97:05:12:3b:e7:d7:80:01:ef:97:a1:d1:67:f7:3d:31:fc:67:
         3b:7d:4b:d2:23:8c:ab:f1:79:24:b9:ce:c7:e5:3e:cc:5c:26:
         ab:3f:26:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:14 2024 by rpki-client on console-fra.rpki-client.org