Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/679d2f56-b451-3eeb-99fb-c0566f2fefa6.roa
File:                     679d2f56-b451-3eeb-99fb-c0566f2fefa6.roa (raw, json)
Hash identifier:          8tmrrbINIf31wpboZeHKRnU4ELRvObLQk+YyH1Ye3So=
Subject key identifier:   44:A8:61:5D:B7:81:2E:CC:D9:BD:75:26:23:45:1A:C5:90:41:54:6E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847DF2F612D76E4C2130ACEA658
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/679d2f56-b451-3eeb-99fb-c0566f2fefa6.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     20940
IP address blocks:        23.214.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:61:2d:76:e4:c2:13:0a:ce:a6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=5eb1f947-7739-4c05-a7f0-1e87832be024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:17:d2:75:35:06:85:a4:85:d1:4e:ef:d9:bd:
                    fb:86:cb:31:97:f9:65:dc:c0:f8:63:77:62:9b:63:
                    14:b1:3b:74:4d:37:d5:11:e3:c0:f5:66:ec:2e:63:
                    c9:70:85:aa:a2:a9:a8:c8:dd:dd:23:2b:e1:cd:99:
                    bc:33:06:4c:0a:7e:73:a4:74:51:f8:3a:ee:8e:f2:
                    b2:bc:c0:06:fb:73:ac:cf:2b:d1:48:c3:9c:26:65:
                    b3:41:d3:f3:90:1d:99:f4:5d:70:af:5a:9e:85:2a:
                    57:3a:0c:88:26:3d:62:33:55:eb:2e:22:75:f4:5e:
                    e8:3f:97:8e:81:20:ee:db:f0:e9:3b:5a:cb:1d:3d:
                    cb:92:50:7e:07:f7:b9:fd:95:a5:49:64:50:05:01:
                    33:85:6d:10:13:f2:3f:80:90:9c:d0:5d:73:eb:d0:
                    58:0d:66:7a:4a:1c:2e:16:a2:f9:1d:ca:67:28:29:
                    25:c5:63:ec:fb:71:19:ed:b4:7e:8e:16:65:ce:e7:
                    0d:f7:60:6f:15:99:f7:ca:cd:76:b6:40:99:7f:75:
                    3e:43:41:45:e9:de:39:dc:b4:d7:96:1b:17:33:8b:
                    f7:8a:b9:b2:c9:af:f0:14:75:f4:a9:57:d1:22:16:
                    c6:cb:3c:ee:9a:90:26:60:7c:1b:fc:e0:33:5f:8c:
                    a6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A8:61:5D:B7:81:2E:CC:D9:BD:75:26:23:45:1A:C5:90:41:54:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/679d2f56-b451-3eeb-99fb-c0566f2fefa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.214.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:00:3f:0b:0b:68:e6:58:c0:b5:3f:06:f9:e0:87:d7:16:45:
         90:c5:f6:6c:78:f0:46:5c:6b:05:b7:d3:05:bd:f9:4c:21:90:
         33:b6:38:25:5d:c4:2e:92:2f:59:76:0b:0f:80:c3:6a:cf:81:
         e1:42:c5:e4:94:11:0b:8e:65:5f:32:46:a5:2b:a6:d5:61:75:
         6b:a0:3e:df:08:d5:c0:5e:2a:b3:ac:d4:f7:7d:8c:ce:c5:00:
         b4:8f:a0:c2:0c:7b:82:5a:09:4c:95:3c:0d:08:88:c1:c8:a8:
         b1:b2:ac:74:a6:33:e6:f5:35:ec:5c:37:27:b1:34:d8:cf:ef:
         30:1f:76:03:2f:35:dd:4d:47:69:1b:c4:4e:b5:4f:bf:96:20:
         7e:bb:22:72:a8:0a:74:45:64:64:28:46:0b:22:14:51:0c:9a:
         df:11:2d:24:88:a9:24:e2:60:c9:2a:89:2e:30:bd:0e:b5:86:
         0e:7b:c5:f0:28:30:1f:40:ff:09:78:37:8e:9b:66:de:83:b3:
         b0:b7:7e:07:bf:8e:df:55:17:f3:f6:72:02:3d:bd:41:94:3b:
         7a:f0:b9:41:fe:88:bf:94:85:7b:3d:d6:a5:cd:63:06:00:38:
         c3:69:a1:16:67:8e:87:8e:5d:97:cb:c3:7f:5f:77:52:4e:78:
         c4:5c:7e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:38 2024 by rpki-client on console-ams.rpki-client.org