Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f5d4f10-7410-3f40-9a67-9ab76fe1885f.roa
File:                     3f5d4f10-7410-3f40-9a67-9ab76fe1885f.roa (raw, json)
Hash identifier:          vLtV9SMp4iyPXj3R1qFXGubfUsns8djZnIpCA6rEols=
Subject key identifier:   38:DF:57:25:57:FD:8D:94:CE:81:06:97:75:5D:86:3D:C3:A5:70:AF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847A5D6CDDFF9C46B21A36A5E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f5d4f10-7410-3f40-9a67-9ab76fe1885f.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     24319
IP address blocks:        23.53.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:cd:df:f9:c4:6b:21:a3:6a:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=67171db5-e8d6-4494-8be5-53b401b1335f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:1c:81:3a:e6:8f:db:7e:cb:7d:a6:6c:31:
                    69:2b:ef:16:f5:0c:06:1b:a8:5c:ee:32:4e:41:f3:
                    c8:f0:0f:4e:f6:37:51:79:4d:1a:3d:76:7d:55:40:
                    b5:e2:bd:fb:9f:26:f6:f0:ad:c9:fc:67:a1:6b:e7:
                    09:a7:84:17:cc:70:c1:f9:56:f0:db:0e:20:80:a4:
                    cc:14:af:99:ce:64:dc:39:b7:4c:cb:53:10:45:33:
                    d2:31:b3:b8:24:69:e7:d2:21:dd:7f:b5:ba:ad:da:
                    d2:f6:57:68:83:30:2d:de:47:af:e8:ba:8d:dc:ac:
                    23:73:88:33:81:cb:0f:08:1a:65:04:5c:e2:03:93:
                    12:e4:b0:1e:b5:2b:57:cf:84:92:c8:9b:e6:d6:a7:
                    b0:f5:6f:36:cf:6b:19:48:1c:57:7f:f8:85:38:57:
                    a9:b5:f4:4e:03:80:e0:b2:a2:86:3b:a6:ef:27:83:
                    7d:90:d1:b0:75:e4:83:d9:97:19:5e:15:0d:c9:d2:
                    00:43:74:c7:0c:9a:cc:c7:d0:bd:b6:0b:10:e8:0f:
                    db:d0:06:ca:fa:8c:cf:3f:07:99:2a:fd:e5:fb:9e:
                    8f:56:71:a9:c7:69:f4:31:12:ef:55:11:db:a5:20:
                    88:e9:3a:39:c1:fb:6c:a6:21:96:f6:0f:2c:f1:ca:
                    9c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DF:57:25:57:FD:8D:94:CE:81:06:97:75:5D:86:3D:C3:A5:70:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f5d4f10-7410-3f40-9a67-9ab76fe1885f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.53.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:39:ac:78:49:5c:5a:bc:a8:c4:80:f9:8c:23:30:7b:1f:72:
         83:57:8a:5f:52:d2:6b:de:fe:1f:7f:0e:ec:39:25:b1:34:9f:
         38:6e:2a:1a:6b:5a:0f:60:35:98:2e:e3:94:97:bf:c4:b4:cf:
         57:bf:1f:34:af:b5:ce:6e:b2:63:db:9e:2b:19:23:11:aa:c6:
         36:de:0d:16:73:89:80:7e:eb:da:e0:6c:c9:97:e0:ea:18:06:
         8d:66:cd:c4:45:2c:2e:01:07:56:8a:a6:09:8f:37:55:61:da:
         c1:a5:e4:c5:22:7a:4a:62:de:3a:10:c5:8c:7d:9a:6d:41:fb:
         a4:c3:f8:02:76:07:08:03:b3:36:7f:73:06:a8:c8:cd:96:2b:
         fe:7c:a8:a6:3e:4a:8c:57:37:47:c1:99:3d:34:29:45:a9:fd:
         55:c5:b8:7d:b2:fa:86:0e:be:aa:87:23:c9:58:44:29:f8:85:
         34:18:ff:a1:16:ae:0f:16:97:06:22:7f:b3:b7:b5:18:f7:68:
         83:ed:3a:32:7f:23:b4:cf:a4:40:43:94:3d:99:6b:4d:2e:2c:
         a0:90:f6:8f:1c:9f:85:6a:a2:a8:42:eb:e5:53:f6:ee:23:b7:
         3e:2c:44:ad:78:62:22:cd:82:f4:2b:67:cd:f3:c5:e4:41:35:
         38:e3:2d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:02 2024 by rpki-client on console-ams.rpki-client.org