Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f9372bc-857e-3e10-b659-8fdc7f93538a.roa
File:                     1f9372bc-857e-3e10-b659-8fdc7f93538a.roa (raw, json)
Hash identifier:          wcI46MSGhXt9lelzRWrx2/Y2Q/tH+Dat0va8GBJuSUw=
Subject key identifier:   C8:23:73:E6:9F:FE:8F:3F:D5:D4:5B:5E:18:25:40:F2:52:C1:3B:96
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847BC23CD87E5F0560EA01C3520
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f9372bc-857e-3e10-b659-8fdc7f93538a.roa
Signing time:             Fri 01 Nov 2024 12:44:03 +0000
ROA not before:           Fri 01 Nov 2024 12:44:03 +0000
ROA not after:            Thu 30 Jan 2025 13:44:03 +0000
asID:                     20940
IP address blocks:        23.223.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:23:cd:87:e5:f0:56:0e:a0:1c:35:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  1 12:44:03 2024 GMT
            Not After : Jan 30 13:44:03 2025 GMT
        Subject: CN=4b205a03-ef15-4cd1-9b94-15aeda99afba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6c:b6:a7:0a:a8:3e:46:d6:c1:88:ca:89:e6:
                    10:60:45:b6:ae:95:56:b4:02:59:d0:86:a6:ea:00:
                    38:53:93:03:31:e6:54:2a:e8:9f:ae:96:32:51:ca:
                    b2:6f:5e:f5:c2:2f:7c:a1:de:a1:24:59:e2:8d:a0:
                    4d:27:a0:9f:f7:be:d1:21:55:03:17:98:57:8b:db:
                    0c:45:57:25:04:40:f2:56:f7:78:0c:27:90:5d:9b:
                    1d:55:93:10:00:19:8d:23:70:15:f0:2c:d9:9f:d0:
                    59:09:54:04:73:c3:b9:10:fc:1d:c7:9f:b8:3c:fa:
                    5e:7b:c7:42:e3:c4:d9:14:e1:93:a4:a2:1e:3a:84:
                    08:18:f0:61:61:6b:1b:04:fe:fb:e9:6d:76:b8:07:
                    2f:46:1b:f4:29:8d:1d:60:cc:98:fd:66:50:56:2a:
                    4d:7b:ab:e0:e6:cf:1f:92:ea:a6:1e:40:e6:f8:fc:
                    21:5a:f5:89:01:b5:6f:35:6e:4d:a3:77:b2:f9:51:
                    b3:25:fb:02:c9:7f:22:cc:db:74:ae:53:22:3c:d7:
                    0b:35:08:d5:98:93:b2:b8:18:75:7d:22:cd:a6:20:
                    a3:94:75:b8:65:af:99:2d:4e:93:5a:c3:5f:41:92:
                    8e:e6:3e:1b:ca:91:5f:f8:78:47:19:a1:d4:ff:6c:
                    19:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:23:73:E6:9F:FE:8F:3F:D5:D4:5B:5E:18:25:40:F2:52:C1:3B:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f9372bc-857e-3e10-b659-8fdc7f93538a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.223.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a3:f6:8b:15:b5:d2:1a:c6:c2:d9:da:7d:18:6b:77:62:41:
         ff:82:53:a4:7f:05:81:72:a8:3c:cf:1f:2e:75:d4:e7:a1:81:
         3f:3e:e0:33:5b:4f:b1:08:4a:a7:56:60:9c:dc:86:62:3b:1e:
         ee:ec:69:7b:08:07:dc:58:c5:e8:d4:43:ac:32:b8:f5:ed:5b:
         c2:26:ff:85:1e:42:97:37:15:b7:2c:c0:8f:4d:68:54:68:24:
         7e:02:a7:72:49:9b:cf:04:a1:bf:85:08:87:51:33:70:d0:b7:
         62:a9:49:ad:f7:8a:aa:82:0b:93:e7:c9:23:a1:83:0c:cf:65:
         8a:df:7f:14:d8:8a:26:d3:d3:86:ba:3c:99:63:7b:25:0f:c1:
         fb:12:3a:d4:0f:31:af:b6:3d:5f:47:37:5d:1a:04:41:e0:f7:
         f5:c4:f5:5a:e8:db:04:56:68:53:48:fe:5c:27:2f:b4:61:d6:
         a5:c9:d9:9e:90:37:39:cc:f3:c0:41:2e:29:4b:56:52:b7:b0:
         0b:2c:89:af:7b:cf:fc:aa:2f:96:9f:ef:49:96:3c:c5:d4:55:
         7f:de:e3:1f:e9:20:28:de:b2:9c:ae:a2:58:09:78:04:3d:32:
         3c:aa:f6:ba:83:9c:3f:eb:47:09:ce:db:6e:f7:20:c2:28:1e:
         12:3a:44:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:25 2024 by rpki-client on console-fra.rpki-client.org