Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6028085b-4145-310a-bce4-cb8a4eaff104.roa
File:                     6028085b-4145-310a-bce4-cb8a4eaff104.roa (raw, json)
Hash identifier:          bUP5IMCcTQp3P8aviviD4HyJDctq7rrS54CFFeR8Wv8=
Subject key identifier:   2D:C7:91:A9:4B:23:A9:3E:74:A1:CF:06:38:65:0F:64:9A:A0:0E:1A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847D999FC22EAA5243121F70560
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6028085b-4145-310a-bce4-cb8a4eaff104.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     20940
IP address blocks:        23.205.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:fc:22:ea:a5:24:31:21:f7:05:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=c8bdd0ea-3b2a-4ab7-9893-ac5d3142d845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:c3:c1:08:4c:ce:d0:2e:97:09:2d:aa:30:
                    b6:2c:59:14:e4:3d:96:c2:e1:0d:d8:83:40:3e:4d:
                    7e:e2:85:f5:51:43:16:0a:7e:68:4e:0b:fd:79:8f:
                    10:67:07:2c:f7:96:e3:71:da:39:c8:19:2d:d7:eb:
                    ce:13:65:4a:4f:8e:fb:88:42:a1:7e:7d:ba:eb:08:
                    ef:1a:e2:e3:44:18:8f:24:00:bc:9c:4b:12:d8:b8:
                    0d:d1:14:54:59:94:e4:12:64:45:44:3a:e6:29:f0:
                    17:fd:8f:9d:50:d8:ec:e7:38:2f:1e:74:ec:04:51:
                    48:0b:fb:10:bb:5b:6c:03:61:e8:01:a1:55:a7:ea:
                    df:1e:4c:60:6f:80:3e:25:6f:f4:a4:70:4f:e1:5f:
                    e3:a0:6a:58:88:77:ec:6e:30:ea:b4:44:b8:c6:b1:
                    bf:1e:ad:39:7a:78:a0:82:3d:79:76:39:d1:72:3f:
                    bc:4c:3a:97:2d:89:97:b7:6b:a6:52:c9:81:58:c6:
                    32:d9:be:67:76:51:24:fe:a1:a1:ed:c7:b5:8a:5e:
                    3b:2e:a4:85:30:2c:bb:c2:a2:d9:81:5d:0e:b8:a8:
                    a5:98:fb:9a:3c:4a:7e:4f:65:2b:8b:8c:5a:ed:e4:
                    b0:f4:75:6b:82:3d:1f:99:bf:79:67:b4:c3:0e:11:
                    c5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C7:91:A9:4B:23:A9:3E:74:A1:CF:06:38:65:0F:64:9A:A0:0E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6028085b-4145-310a-bce4-cb8a4eaff104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.205.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:74:ad:03:c9:85:6e:86:fc:50:4d:30:88:f9:b8:e1:d0:22:
         51:bb:25:ac:5e:53:66:bd:82:81:95:e6:c6:9f:b8:2b:03:04:
         bf:2c:a5:80:03:ea:4d:e4:74:ae:aa:67:b2:68:54:85:d5:83:
         cd:8e:33:e3:b7:67:4d:6c:02:e8:d3:c4:04:e5:da:5c:83:e1:
         18:7c:9e:6a:c4:26:ec:52:ab:e9:e1:f6:df:d9:f2:ce:cc:6b:
         ec:ce:24:ad:b7:50:08:4a:04:2d:b0:ac:9f:3d:c2:64:ae:75:
         1c:ff:ef:35:3e:1b:16:35:3d:25:a0:12:83:d8:dd:5b:6e:13:
         e5:a4:7a:d0:fc:e8:15:e6:19:c8:d6:44:99:4b:a6:fd:40:aa:
         3c:ab:87:d5:e9:31:83:5f:e9:54:5d:f9:f8:24:10:95:e3:59:
         7d:48:dd:3d:40:ba:bc:8f:ca:0d:f7:13:27:f9:5a:3e:8b:14:
         07:c8:5e:35:c8:5e:bb:29:08:e6:e9:d1:20:67:58:ce:a3:3b:
         bd:d3:c7:c7:91:6a:68:73:07:2c:3b:07:09:8a:89:9c:8b:0d:
         18:7b:94:68:54:f1:ca:76:86:3b:6f:cb:66:9c:0a:6a:30:0c:
         4c:48:16:d8:24:be:0a:63:27:b0:ef:05:ea:0e:de:bb:af:1b:
         3a:f7:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:35 2024 by rpki-client on console-ams.rpki-client.org