Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50242d17-a642-3b49-8af6-fd8f701bfc5d.roa
File:                     50242d17-a642-3b49-8af6-fd8f701bfc5d.roa (raw, json)
Hash identifier:          DpqIUBNTkgnVmUn8AIH8RBaAwbRPSdIm6ZuOlJD3zTU=
Subject key identifier:   A1:4A:D3:AF:C0:0F:1F:0E:50:34:02:4C:F1:A3:50:10:6F:38:FA:12
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C8D9FF938A3065322AA9A700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50242d17-a642-3b49-8af6-fd8f701bfc5d.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     20940
IP address blocks:        23.201.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:ff:93:8a:30:65:32:2a:a9:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=65620ebb-f710-4932-8638-5bd7050d0445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c3:a3:b6:ff:b6:de:8a:3a:ee:cd:92:36:62:
                    85:4a:3d:68:50:b7:5c:41:69:0a:af:ff:ab:1e:55:
                    40:51:36:1b:16:3a:89:c5:34:8c:19:54:05:64:cc:
                    3b:09:cf:cd:4f:a9:e0:9a:1c:34:22:54:84:16:56:
                    d3:ba:d2:49:ba:95:21:da:e7:26:c3:78:dd:2a:b0:
                    f2:bc:7d:d0:21:b5:22:91:d0:3e:5c:26:57:5d:81:
                    db:33:26:a2:4b:3c:62:d2:ff:c1:0c:60:61:bc:9b:
                    03:ee:96:8e:af:fd:73:d9:a7:5d:a3:e1:7c:32:f6:
                    7e:68:88:79:56:e2:e7:00:8b:d1:90:e9:aa:b5:63:
                    b8:3b:08:8f:e9:fb:5c:7b:5b:10:41:6d:47:7f:74:
                    84:a5:a6:82:ce:27:13:79:f1:47:98:84:f9:9c:cc:
                    9f:b6:a2:47:a5:55:b5:6a:5e:19:ea:04:b8:bb:20:
                    38:af:70:4e:50:b8:ec:24:c9:d0:75:57:41:0f:14:
                    82:c7:fb:06:64:b3:da:ac:70:e2:35:bd:b1:e7:7d:
                    68:a4:4b:bd:2a:48:88:80:8e:fe:96:05:12:e0:f1:
                    7e:36:38:8c:a8:4d:51:f3:8f:29:18:ad:40:eb:61:
                    6a:c9:7d:62:b9:ff:e4:d2:bd:d6:16:78:94:68:b1:
                    b3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4A:D3:AF:C0:0F:1F:0E:50:34:02:4C:F1:A3:50:10:6F:38:FA:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50242d17-a642-3b49-8af6-fd8f701bfc5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.201.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:d5:3b:8e:26:75:4c:d3:fc:f8:14:cd:27:03:d1:04:24:05:
         e1:15:c0:62:37:2e:19:cf:7e:d1:ad:9b:3c:9c:ad:3c:b1:c8:
         d3:6e:1d:45:61:10:b2:95:8a:57:5e:b8:ce:87:d2:44:8f:07:
         69:3a:d4:23:d5:54:52:33:48:47:ff:24:27:25:1a:c9:fb:14:
         a4:25:d8:2d:1e:ba:7f:53:f2:81:31:ed:de:1d:31:5c:ba:95:
         cc:e1:f3:dc:a7:66:5a:1d:1a:d1:ea:3a:2f:26:19:e2:4d:63:
         15:35:9f:25:76:5d:c1:cd:7c:e8:9c:65:11:a8:f1:9a:1c:9e:
         7f:ae:83:12:2e:c0:95:57:e3:e4:00:d6:49:2b:06:87:6d:04:
         3e:08:a7:08:f8:fa:35:df:80:d1:83:88:1b:0e:54:ad:7c:79:
         d3:af:1a:fc:9f:ad:61:69:63:b6:20:62:33:72:84:22:c4:57:
         8a:dd:00:c4:4b:ce:95:a6:83:f8:a4:c4:f3:bd:9d:d0:8b:a8:
         b0:c7:ce:b7:98:90:be:f8:47:e5:aa:4d:9b:0e:a1:1a:f8:11:
         29:0f:33:57:d3:e4:54:08:a2:bb:d0:c8:8e:b7:11:70:e0:9f:
         67:4e:89:b0:7a:07:bf:38:02:a4:2f:27:0e:c3:2f:7e:e4:73:
         1f:27:ac:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:29 2024 by rpki-client on console-ams.rpki-client.org