Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/451941a1-b7b1-376c-9d7e-0e07264a87bb.roa
File:                     451941a1-b7b1-376c-9d7e-0e07264a87bb.roa (raw, json)
Hash identifier:          /5cT7fhKMwDQe8r7oVnJHV/2v+TT0Ieg0PWmaESleNU=
Subject key identifier:   C8:B8:4E:A6:64:F5:B1:72:2C:67:98:90:48:EB:20:25:C4:10:6C:EF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858474420B6F799247BE029E31300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/451941a1-b7b1-376c-9d7e-0e07264a87bb.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     35994
IP address blocks:        23.32.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b6:f7:99:24:7b:e0:29:e3:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=b8e10215-22cc-4940-a3cb-3897ad587f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:4d:b1:44:a1:ef:4d:b5:fd:b1:a2:ed:04:
                    39:71:53:06:74:c0:30:26:70:2b:43:80:e9:ce:27:
                    22:56:3d:26:14:37:d6:0f:0b:1a:62:c5:43:ed:f1:
                    b2:cc:61:dd:77:57:54:3e:3b:9d:57:c6:56:ee:53:
                    75:2f:91:9a:9f:9b:8a:34:69:00:15:12:db:08:b2:
                    85:8a:35:cb:51:44:ac:e0:a0:17:d0:bc:76:fa:75:
                    c0:b3:2f:0d:1a:36:7c:92:2c:b1:51:5c:ba:74:49:
                    ae:b2:1d:11:86:12:6d:60:68:1b:2b:5e:71:fd:65:
                    bd:1a:4d:b0:df:70:c0:73:38:43:16:8c:84:e0:54:
                    30:55:e5:83:a9:13:36:bc:c2:87:e9:e7:8c:37:d3:
                    ef:79:e2:91:d8:8d:29:63:41:d4:79:97:fb:fa:35:
                    1c:14:a4:bd:15:09:ac:2f:9c:e4:d2:53:b5:c6:29:
                    00:b7:8f:5a:9e:23:20:f5:12:eb:6d:56:ce:fb:2b:
                    e5:b5:60:de:8a:09:36:6a:7d:85:43:36:23:91:f0:
                    b2:a5:e7:ce:6f:79:fb:8e:35:99:e2:4a:4d:c2:ed:
                    c8:d7:38:85:73:08:0a:19:1c:0d:e4:74:56:a8:60:
                    b6:03:07:b8:40:c5:23:6f:ce:00:bb:5a:ca:69:d6:
                    30:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B8:4E:A6:64:F5:B1:72:2C:67:98:90:48:EB:20:25:C4:10:6C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/451941a1-b7b1-376c-9d7e-0e07264a87bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.32.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:06:f3:f4:1e:ff:e1:8c:b4:97:35:7e:96:0d:52:eb:c7:2b:
         81:43:5c:44:91:0d:d1:dc:df:11:75:5f:43:8b:94:e8:7d:c2:
         aa:24:96:fa:23:c5:13:5f:2b:14:42:13:52:27:15:12:9f:f4:
         ba:c6:f2:a3:5e:59:a8:a2:bd:f0:b8:c9:5b:01:6a:d1:13:fc:
         ba:87:3f:a7:f8:0d:39:d7:34:96:83:98:51:c0:60:cc:e6:11:
         ea:3e:4f:5a:06:5f:ca:d3:f9:ce:94:22:db:e0:b0:33:1e:64:
         58:dc:49:7b:45:be:d1:bd:bc:5d:bb:dd:6c:46:03:5b:67:e9:
         bf:a6:ac:02:17:19:3b:2a:d6:df:c5:e4:d1:89:63:c8:db:1d:
         8a:5e:7e:3a:a5:e0:9b:fe:56:8c:fe:2d:97:ca:04:1d:62:ca:
         3a:31:d0:d0:54:38:84:59:c9:ca:ab:91:84:26:20:0c:92:29:
         48:0a:41:05:76:c8:5b:a2:f3:fa:a1:96:ea:61:4c:4d:12:91:
         28:89:6e:73:09:48:ea:10:99:e4:d7:15:79:fa:15:77:19:41:
         2c:39:e6:68:77:2d:97:71:8d:e9:b8:c6:1e:95:7b:78:e3:53:
         5b:1e:8c:b6:23:6e:fe:50:f5:da:23:3a:a5:99:0e:55:7d:c0:
         bd:2c:a7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:35 2024 by rpki-client on console-fra.rpki-client.org