Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c8fdb4e-39d5-3695-901e-1bc94cba2723.roa
File:                     4c8fdb4e-39d5-3695-901e-1bc94cba2723.roa (raw, json)
Hash identifier:          bRyw62bgIgmJ2V8EHD2QUC1PqcVxw7+zSgrL1mpoKE8=
Subject key identifier:   6D:01:EE:E1:E1:41:19:1F:63:65:BC:03:34:5E:B4:2F:64:87:E2:68
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847EFEF8EF005A7ADB309FA69FE
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c8fdb4e-39d5-3695-901e-1bc94cba2723.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     20940
IP address blocks:        23.213.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:8e:f0:05:a7:ad:b3:09:fa:69:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=12f348c2-790d-4a84-8a67-a86a6736f5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:42:5f:4b:60:f7:f5:ce:3e:be:3a:7c:57:d4:
                    d3:69:48:0a:15:d9:d5:53:c8:db:33:a1:2e:1f:63:
                    5e:d1:72:2b:f0:74:d8:5a:9b:eb:be:14:74:db:4e:
                    0b:4f:7a:af:e5:d8:8b:26:b7:d9:99:86:86:48:78:
                    48:bc:a7:3a:d1:09:ee:61:25:73:72:fa:70:76:1b:
                    8c:83:33:a1:f9:05:48:74:8f:34:35:d1:fe:17:66:
                    52:08:3b:0c:87:f0:ed:a1:a7:bb:dd:ef:37:8f:eb:
                    ad:0e:e6:da:43:73:72:a7:26:b4:50:5a:b7:0c:f7:
                    85:46:57:78:a4:b9:5c:34:c7:6c:81:34:68:f0:2b:
                    3b:4d:13:fb:e0:db:4a:e6:72:aa:12:11:c8:41:15:
                    2a:3d:b3:9b:9e:c6:b6:5e:95:f8:e5:cf:8f:db:7d:
                    f3:81:bb:c4:9a:b7:19:10:ca:f2:61:53:47:4b:90:
                    73:8c:80:36:bb:34:25:10:c7:c7:13:f8:78:c2:19:
                    d0:77:16:a0:51:a9:29:1c:ed:08:99:7c:fe:94:c4:
                    fd:10:6f:b8:22:2e:36:a2:a3:5c:6b:81:70:ed:35:
                    f0:ee:e2:8e:b2:ad:b5:ac:84:c8:32:a5:9f:7c:3d:
                    ee:2d:e3:4e:e7:49:4e:d7:76:31:dd:76:41:f4:d1:
                    85:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:01:EE:E1:E1:41:19:1F:63:65:BC:03:34:5E:B4:2F:64:87:E2:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c8fdb4e-39d5-3695-901e-1bc94cba2723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.213.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:3d:da:06:47:39:97:ec:fc:17:f2:27:47:d7:ff:b3:5b:e4:
         ee:a9:ff:ba:5b:9a:a1:8b:6a:e7:1e:22:4b:0f:2c:f1:ff:1e:
         17:28:56:0c:05:10:80:43:86:7b:fa:05:71:be:e6:15:f6:9c:
         12:5c:e0:15:52:01:a4:7d:70:5a:d3:b4:fc:d7:16:64:cf:3c:
         50:bb:3b:58:76:77:da:ff:86:74:b6:1b:50:92:61:06:f7:01:
         9b:bf:7a:56:b0:22:0a:7a:9c:b8:05:ff:47:c5:31:75:ce:66:
         92:4d:6e:30:fd:05:29:cd:90:24:75:98:5d:54:f2:f2:e6:87:
         16:b6:a4:22:84:ef:c6:0b:99:e1:da:86:e9:7d:8d:e1:e7:85:
         69:18:a7:9c:4d:99:b1:fa:18:c1:e4:c2:98:5b:54:98:f2:1c:
         bb:e2:23:5a:f9:05:44:4c:dd:4e:15:dc:09:0e:ee:e2:10:49:
         75:b0:6d:13:90:2c:6e:f9:6a:63:ac:24:92:8f:51:16:8f:9e:
         1a:16:ab:e0:31:7c:6a:b9:f6:82:13:30:ea:28:13:04:8f:79:
         8f:35:78:f0:3e:ad:f4:2b:dd:6e:d0:57:f1:60:5e:67:62:30:
         d2:76:1f:62:52:c7:a4:56:cd:c1:c3:4e:8c:97:39:38:de:98:
         7d:5d:65:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:26 2024 by rpki-client on console-ams.rpki-client.org