Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2eda26d5-ef04-322e-b001-0448b7c7760d.roa
File:                     2eda26d5-ef04-322e-b001-0448b7c7760d.roa (raw, json)
Hash identifier:          DFJs6V6+COmUSNUO/c2SInNMP5qkHFSo1jjqclwdSag=
Subject key identifier:   1D:6A:62:74:A5:E7:3D:E5:67:AC:82:45:70:49:60:A6:2D:9C:19:85
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847D99A01E34860424B7E7BB980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2eda26d5-ef04-322e-b001-0448b7c7760d.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     20940
IP address blocks:        23.207.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:9a:01:e3:48:60:42:4b:7e:7b:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=d0495db6-cff6-442c-bd06-26cd4738a8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:ac:6e:ee:20:54:9f:96:a4:f5:90:9f:c5:
                    0a:3b:4b:c4:8e:9e:77:08:0f:30:7e:f1:d4:8d:3e:
                    64:43:f7:cc:96:d1:91:b6:81:ce:8f:8d:5a:91:4a:
                    43:3e:29:5a:8f:9e:13:17:cf:4f:02:ce:d8:0c:0b:
                    a1:01:c8:3f:55:2c:97:2c:35:35:f7:83:b7:8a:97:
                    86:29:d2:9c:26:11:f2:d1:ed:5a:eb:63:fe:68:52:
                    b8:98:d2:a4:90:8c:a3:3b:49:2b:38:f9:74:46:fb:
                    9b:ca:bc:85:fc:30:90:1e:32:2d:26:16:9c:79:13:
                    33:bf:2b:e7:2e:c1:cf:56:bc:e7:ce:b6:00:57:c4:
                    9e:6c:a8:88:24:ee:a9:3f:e1:cd:29:e1:7f:be:7e:
                    cc:6b:84:64:e5:e9:43:54:55:41:f3:a8:93:2b:30:
                    02:7e:06:4e:f6:0a:be:fc:03:33:cb:b1:b4:73:99:
                    81:c2:75:f2:af:b2:0f:ef:39:da:fd:a6:c1:9d:b0:
                    cd:33:94:6a:cb:5c:78:5b:27:ae:0d:e4:a1:e4:89:
                    e4:6d:63:e7:c5:92:a6:8b:8c:15:b9:32:95:58:06:
                    fc:7b:ba:eb:0c:a7:cb:5a:57:3a:d8:96:54:d5:e4:
                    14:8f:6f:b1:33:23:ec:5a:9e:1d:7e:93:f4:bb:94:
                    13:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6A:62:74:A5:E7:3D:E5:67:AC:82:45:70:49:60:A6:2D:9C:19:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2eda26d5-ef04-322e-b001-0448b7c7760d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.207.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b6:87:5d:69:64:35:0a:5d:7d:eb:d3:d1:73:45:57:58:9d:
         67:a2:3d:95:df:46:8a:c0:8c:f1:ae:5c:6d:d7:6e:d2:64:9c:
         f2:31:78:ce:eb:d2:4f:24:6f:d7:57:79:f6:b7:0e:45:1f:d6:
         4a:50:1b:a9:5d:63:c9:2f:ad:64:c4:11:c8:45:8e:cb:36:d5:
         64:96:82:83:84:6f:f7:82:bb:44:f2:61:68:53:2f:dd:9e:ce:
         79:81:27:73:2b:7d:09:98:7d:26:fc:ad:27:34:d6:00:61:64:
         84:e5:c0:92:a7:bc:28:95:b9:2b:9a:f2:0b:d2:c6:aa:d1:16:
         ed:39:65:e7:cd:6d:46:ec:55:8d:ed:04:b9:f3:7f:07:90:bc:
         b8:21:96:b6:b6:1a:af:17:0b:d7:e5:f3:d6:56:20:79:49:e3:
         2a:ca:27:c8:89:ea:f1:00:0d:e2:c8:4e:d8:95:5c:65:d3:99:
         9e:d3:a4:b1:c1:c7:0d:6c:c0:e9:8b:9e:d2:0b:f0:6c:39:db:
         3d:01:d4:17:08:43:31:db:b0:ba:cc:78:0a:49:33:b3:7d:0f:
         b6:8b:91:b4:8c:92:eb:ac:89:ce:87:fd:2c:f8:bc:ce:02:b6:
         c7:be:22:11:8f:80:29:d5:98:fa:a5:a8:e2:53:89:2c:2f:fc:
         c1:be:bc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:32 2024 by rpki-client on console-fra.rpki-client.org