Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/510a507e-b0cc-355b-a5af-6058aadce2fd.roa
File:                     510a507e-b0cc-355b-a5af-6058aadce2fd.roa (raw, json)
Hash identifier:          9vlWqvXFbxsWvMYeg79rkhRPJPLo5l3fsUi0VKu3ad4=
Subject key identifier:   BD:56:3E:17:62:54:13:87:E7:10:8B:59:9F:E2:81:0A:95:70:65:C0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847A1A6838C1DBFF9E7B9A58C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/510a507e-b0cc-355b-a5af-6058aadce2fd.roa
Signing time:             Wed 23 Oct 2024 01:00:32 +0000
ROA not before:           Wed 23 Oct 2024 01:00:32 +0000
ROA not after:            Tue 21 Jan 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        23.49.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a1:a6:83:8c:1d:bf:f9:e7:b9:a5:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 23 01:00:32 2024 GMT
            Not After : Jan 21 02:00:32 2025 GMT
        Subject: CN=f7b62b6e-574b-4b2f-b353-da0be96d664c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:60:df:5b:1f:f7:c0:53:19:fd:1a:16:d1:01:
                    26:2b:62:3e:3a:33:0b:fc:4e:b8:2c:aa:ad:fe:f2:
                    23:23:a1:8f:0d:dc:53:47:bd:67:56:6e:3c:c6:ae:
                    03:b8:10:07:d0:14:ed:5a:ab:8f:9a:0f:c0:67:74:
                    11:d5:dd:3a:e5:d5:84:c0:3e:64:5a:37:1e:05:45:
                    30:16:f5:3d:1d:73:34:52:1b:2a:c4:70:e9:f5:79:
                    c4:1f:d9:bf:d1:3e:ea:44:d0:5b:4e:9e:d8:a5:7b:
                    24:5d:0b:f2:78:2f:ee:69:93:64:4f:51:e2:a8:f1:
                    b8:40:05:f8:64:03:64:6f:33:87:cf:81:0c:30:30:
                    b6:f4:3f:2e:a3:d8:63:e0:c3:34:f0:91:41:f3:02:
                    36:bc:a5:0a:8c:b5:9b:8a:b1:bd:80:da:81:85:c1:
                    37:21:57:9f:57:21:d8:83:79:ee:87:e9:54:c4:91:
                    fd:e0:12:79:58:07:6f:8c:bb:73:7f:c4:80:02:51:
                    d0:9d:85:b8:0c:d9:ab:55:e3:bf:d8:8c:14:72:25:
                    f7:44:03:5e:f9:0b:d1:7d:85:79:6c:c4:cf:49:a8:
                    a4:55:59:7b:87:ba:e3:c9:91:79:48:54:71:3c:dc:
                    fd:d5:0a:f5:03:db:81:c8:5c:12:b9:03:82:53:f0:
                    c7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:56:3E:17:62:54:13:87:E7:10:8B:59:9F:E2:81:0A:95:70:65:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/510a507e-b0cc-355b-a5af-6058aadce2fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.49.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:65:3c:b9:7f:37:f5:4c:c5:a7:9e:dd:c7:58:ec:7c:e8:06:
         a3:6c:7d:48:2b:0c:ac:0e:10:23:cf:92:11:b8:d8:4e:2a:d0:
         c7:91:b6:82:a7:33:8e:f6:42:65:f8:99:9a:21:0d:c3:86:b8:
         7c:14:8a:12:7f:08:08:cf:b1:77:50:93:4d:26:72:f3:ad:78:
         ae:3b:73:da:65:04:42:c8:f8:1d:c8:5f:5d:20:7f:7f:e1:8a:
         9f:86:4e:a8:42:57:ad:c9:d1:f1:e1:19:9c:da:57:58:35:e8:
         bf:83:86:ca:fb:67:60:7b:d5:da:07:12:ba:2a:fa:c9:a6:06:
         f3:8d:d8:0a:2f:f9:e2:b9:bc:e7:37:57:f6:31:e1:04:57:ab:
         91:79:d7:a5:6d:6f:62:0d:16:d7:32:bf:c6:a4:57:25:df:65:
         f7:31:92:97:e9:6d:b6:a9:f8:39:6d:e8:23:b2:58:93:34:bb:
         42:7d:cf:18:82:9e:90:85:1a:ba:91:25:a7:5f:3e:a7:70:df:
         05:b6:4d:2e:13:c2:04:db:2f:eb:d8:b5:67:0a:d2:17:e5:aa:
         e9:3f:f2:51:87:93:9e:b0:96:0f:14:05:d7:3a:0a:6e:76:af:
         1c:10:a2:9f:b7:26:8b:35:c6:9c:f8:1d:5e:64:a5:c1:fd:18:
         3d:5a:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:29 2024 by rpki-client on console-ams.rpki-client.org