Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/366e3f3f-8693-38e5-870d-ca6fe2cacaaf.roa
File:                     366e3f3f-8693-38e5-870d-ca6fe2cacaaf.roa (raw, json)
Hash identifier:          oJfQdrzY1D/2Wl1yfueGP27A+IXZHb5oUbiSTT3jkhA=
Subject key identifier:   01:85:E9:FC:95:DA:88:01:44:F1:5A:CA:B3:79:5E:70:A6:1F:6A:8C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AF9BF0D6DB1CF4DCDF14C620
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/366e3f3f-8693-38e5-870d-ca6fe2cacaaf.roa
Signing time:             Mon 28 Oct 2024 01:00:32 +0000
ROA not before:           Mon 28 Oct 2024 01:00:32 +0000
ROA not after:            Sun 26 Jan 2025 02:00:32 +0000
asID:                     24319
IP address blocks:        23.62.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:af:9b:f0:d6:db:1c:f4:dc:df:14:c6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 28 01:00:32 2024 GMT
            Not After : Jan 26 02:00:32 2025 GMT
        Subject: CN=7b1d2a30-635c-4a6d-b85a-891ca8e6a8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8c:b6:03:32:0b:69:07:8f:74:7d:d9:e6:fd:
                    50:1d:99:2a:0f:7a:03:6c:27:d9:16:dc:9b:7a:25:
                    cf:5a:35:78:59:ae:15:8e:e8:3b:ae:8b:c9:eb:00:
                    ba:b7:14:59:50:d1:d4:65:84:95:62:12:3c:87:13:
                    f4:2c:9e:96:54:4e:14:a4:6b:d1:6c:da:69:4b:e9:
                    3e:9a:f2:dd:21:70:26:f8:4b:3a:19:70:65:fe:92:
                    d4:66:f7:8e:77:61:9d:b1:ef:4b:de:c6:67:87:88:
                    44:a3:27:1d:4c:ec:9b:c2:8a:0b:19:69:cc:97:d9:
                    f3:47:ce:3f:6b:fa:99:d8:62:10:b6:cc:dd:22:9c:
                    9d:c8:e0:20:4d:e0:be:b9:f1:12:c7:bc:65:e9:8a:
                    5f:6a:80:bf:27:27:23:d9:04:9c:a9:ed:ec:ba:69:
                    b6:12:96:e4:55:0b:5a:ea:5b:f8:0f:b7:b9:fd:bf:
                    34:e2:72:c7:de:8b:8e:53:7c:db:10:20:e4:06:dd:
                    3e:3b:a7:ec:4d:d1:4e:18:7e:d9:dc:e5:e6:12:2b:
                    39:3b:ba:2e:7f:8b:37:45:76:21:4f:8e:99:4d:af:
                    43:8b:76:b0:8f:98:d6:64:14:61:83:5d:d1:25:42:
                    98:be:28:d9:88:81:a1:aa:11:bd:17:77:d7:b0:57:
                    27:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:85:E9:FC:95:DA:88:01:44:F1:5A:CA:B3:79:5E:70:A6:1F:6A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/366e3f3f-8693-38e5-870d-ca6fe2cacaaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:bb:4d:97:ef:4a:66:dd:de:0f:95:9c:18:31:40:b0:0f:5d:
         c3:eb:e0:fd:86:81:04:89:22:a1:26:81:00:5d:57:2a:4c:19:
         92:c0:ed:9e:a8:63:89:ac:ce:1a:f7:c0:9d:0d:5c:d1:11:22:
         e5:7d:3a:4c:68:91:3c:26:1c:1e:d4:c3:69:ec:99:bb:77:65:
         20:7a:88:e7:02:99:80:4e:0f:c4:79:99:87:de:97:0d:0a:46:
         3f:6e:57:53:cf:a2:85:33:d0:ce:95:ea:eb:4f:8e:60:f2:d9:
         8c:d9:9b:97:63:82:15:10:5b:be:83:02:9d:bf:a2:18:af:dc:
         3a:e0:e4:af:4d:2b:b1:50:32:88:b6:42:e7:15:ec:c6:3a:8a:
         2e:92:2b:cf:bc:f7:e5:f1:4f:19:24:43:53:57:2f:cb:97:bf:
         01:83:c6:d7:5f:e7:7c:47:ae:57:44:cb:ad:2a:55:ef:40:c3:
         a4:01:94:2e:a5:20:35:d3:40:e0:e2:01:f6:19:dc:30:13:d3:
         66:00:5e:21:9d:53:2f:64:c2:04:bd:17:01:48:80:46:3a:1d:
         66:95:83:6e:a2:81:87:3a:43:7e:eb:bd:28:2b:37:29:c8:6b:
         33:2e:a9:1b:f5:df:26:9b:20:e1:a1:4b:33:6b:b4:f2:b9:d7:
         72:ff:c5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:23:57 2024 by rpki-client on console-ams.rpki-client.org