Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28774239-8893-3365-a97a-f1ad9824f6e1.roa
File:                     28774239-8893-3365-a97a-f1ad9824f6e1.roa (raw, json)
Hash identifier:          dU7lMlTqTKVRQ+LK0qY2A/eLR2f19/i51x32YAaUwrA=
Subject key identifier:   1B:0B:64:8A:08:21:7E:1D:AE:99:75:82:E4:55:17:73:16:1C:A2:28
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847A04159BFFF704F92B5321C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28774239-8893-3365-a97a-f1ad9824f6e1.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        23.48.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:59:bf:ff:70:4f:92:b5:32:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=c1202c36-2f37-4b6e-b13c-7b35755f0f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:dc:0c:94:9c:e0:b6:69:de:9e:1b:43:a6:
                    85:7f:30:00:12:de:29:3c:50:ce:7f:66:3f:08:5e:
                    63:30:1e:37:5f:88:2f:c7:75:a3:14:96:74:a5:cb:
                    48:fa:76:4d:a4:84:41:67:6b:2d:c2:2d:18:8e:42:
                    d1:34:59:69:83:95:8b:30:be:f4:ed:f4:8a:15:d4:
                    79:b4:65:54:62:04:98:e2:13:8f:d1:1f:74:da:a2:
                    56:f9:3c:16:6e:fd:2d:75:40:7e:5f:ca:41:a5:a2:
                    45:7f:07:a2:88:e7:c6:e9:a5:35:c2:6b:c2:17:8b:
                    d6:9c:3c:82:99:9e:1d:59:b1:2b:d9:0d:5b:8b:65:
                    4d:7e:92:4d:53:44:b3:7a:54:ec:20:4f:e6:39:a7:
                    5e:c3:36:99:31:ba:ae:fc:f3:c3:e9:f4:da:2e:5e:
                    8f:55:c3:94:03:ed:61:0c:64:74:55:01:1f:c0:af:
                    36:32:e0:5b:f0:d4:5b:22:f8:fc:0d:31:7a:dd:cc:
                    79:1b:71:e3:2f:c1:33:45:21:e5:c9:1d:06:48:73:
                    d9:51:46:5f:89:c7:6d:38:a9:74:a5:65:1a:73:4e:
                    3a:3a:6a:0b:c6:32:08:81:99:dc:39:1d:92:17:e2:
                    bd:42:e7:ac:b9:00:c4:ab:78:b2:cc:a6:c6:84:93:
                    1a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0B:64:8A:08:21:7E:1D:AE:99:75:82:E4:55:17:73:16:1C:A2:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28774239-8893-3365-a97a-f1ad9824f6e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:2d:f5:fe:d1:28:62:0b:e0:76:0a:37:2d:a9:c1:51:13:82:
         0f:b8:44:bf:be:50:ef:02:2b:13:92:d1:6e:a3:1c:85:76:98:
         11:4a:5b:2a:ad:a9:24:68:8e:95:33:f3:e7:3f:fd:fe:d9:2b:
         47:c6:ee:6f:23:fc:dc:41:be:7c:23:b2:b1:02:b9:ad:6f:d8:
         6d:05:d6:94:dc:9f:df:9e:fe:9b:d2:89:e7:11:3f:4e:b6:6a:
         73:76:b0:75:42:d8:5c:63:fc:22:b4:33:20:bc:32:70:b8:d4:
         9f:40:b6:fa:ea:e4:03:49:ef:a2:0f:0a:d4:36:ae:38:81:3e:
         77:3a:ae:c6:6a:d3:e4:db:74:cd:d7:b2:b0:d5:bf:68:ba:12:
         01:e4:62:f6:9d:ac:d8:95:49:25:92:34:63:d5:9d:ba:52:72:
         36:83:59:8f:5a:08:74:76:1e:42:15:33:19:29:3d:83:ce:c9:
         ad:a9:cc:4e:b4:e0:99:0b:91:64:a0:17:33:b8:1b:ec:65:cb:
         9d:ee:64:86:1e:9f:da:06:7c:19:33:6b:a9:6f:e2:0a:70:7b:
         c3:62:78:6e:90:e3:22:e8:44:b7:b4:c2:15:07:0d:cf:02:7a:
         e7:4f:6b:d0:72:69:4b:1a:98:10:8d:35:4f:b2:f1:50:3b:1a:
         e9:fa:4f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:09 2024 by rpki-client on console-ams.rpki-client.org