Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80ad42cd-a52f-3451-b767-485dbe30ea0a.roa
File:                     80ad42cd-a52f-3451-b767-485dbe30ea0a.roa (raw, json)
Hash identifier:          Zz9sSOlmW1P7wLfxan/+Qy67ZbElUqqKLsiphVRA3c4=
Subject key identifier:   A5:A4:3F:DF:B0:41:07:FA:3C:A2:24:E9:9C:E9:1C:57:AA:6B:B7:B6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858474850AA1AEF1D5453610FB578
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80ad42cd-a52f-3451-b767-485dbe30ea0a.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     24319
IP address blocks:        23.206.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:aa:1a:ef:1d:54:53:61:0f:b5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=5f89336e-ead7-4e0b-b8de-e827ae034397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:a0:21:71:06:7e:de:e6:30:ed:99:8e:3c:
                    4d:95:41:3f:5d:48:cb:3c:bb:59:c4:72:64:00:24:
                    63:67:01:77:34:46:2e:0a:21:c9:0d:fc:f3:aa:60:
                    dd:52:aa:d9:4d:81:61:c1:37:dd:6f:33:75:fd:77:
                    d0:77:ea:8c:68:24:3e:85:96:4b:04:d9:26:d8:66:
                    b3:f2:13:da:f5:56:0f:a0:61:90:9e:88:25:b6:3f:
                    5f:4e:7b:b8:ce:46:f2:4d:f3:d5:03:96:ed:20:6e:
                    9d:d7:6e:70:7e:c7:e1:f2:b3:49:14:ce:47:d9:3e:
                    e1:27:85:26:50:0c:0d:08:cd:89:f3:1d:d4:6c:ed:
                    36:18:7e:ab:5a:2c:c3:f2:64:c6:bd:5d:84:04:8f:
                    82:7d:9c:51:a7:be:d2:8e:bd:00:e5:9e:00:31:3a:
                    f9:b7:fe:05:85:64:2b:8e:a1:bf:23:a3:d4:0e:95:
                    aa:81:fb:c5:96:c0:83:f6:8d:46:ab:b5:54:16:ad:
                    c1:3d:8b:6a:e8:a8:b4:e7:0b:7b:60:4a:74:3d:6f:
                    c2:a7:44:94:53:a1:e2:8e:0d:23:e1:f6:39:ec:1d:
                    05:e9:a4:1b:d8:ca:7e:32:a6:c4:fb:a6:dd:6c:ea:
                    96:fb:fe:ce:41:99:3f:e1:68:6f:9e:48:c0:cd:2c:
                    a3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A4:3F:DF:B0:41:07:FA:3C:A2:24:E9:9C:E9:1C:57:AA:6B:B7:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80ad42cd-a52f-3451-b767-485dbe30ea0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.206.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f1:3d:39:b3:a6:7c:06:0e:c1:79:af:55:40:02:ad:79:5d:
         15:55:b2:1a:4d:28:c9:43:7a:95:25:66:d6:a8:6c:a8:12:bc:
         c6:1c:b4:eb:48:5f:6e:56:4f:bc:22:8d:e6:33:fe:ff:aa:eb:
         53:89:ee:20:8b:5d:91:4f:ee:e2:75:35:17:e8:7d:52:bd:46:
         15:e9:62:1a:e8:7d:88:56:b4:94:4b:19:a2:f8:5a:c5:d1:f7:
         09:56:ff:b1:32:2b:52:27:b9:23:10:71:e7:7a:12:20:8a:47:
         ed:22:fc:ea:6f:81:f9:ed:22:91:1f:5a:16:01:b8:99:91:f7:
         6e:87:8c:dd:f7:87:de:3c:7c:38:62:b2:17:18:1b:80:23:2d:
         fe:f0:f2:95:b2:5c:c3:96:e8:e6:ed:d2:d8:b9:19:a9:a3:cf:
         b2:8d:c5:af:d3:2d:ec:88:bb:76:07:02:cb:48:30:89:bf:92:
         63:f0:86:60:bc:2f:dd:d2:5d:fb:51:e7:d6:53:12:26:eb:aa:
         92:88:76:90:d8:11:9e:04:08:fe:dc:04:e6:ac:8e:3b:93:6a:
         2f:f8:38:e5:3e:8b:c5:53:e6:09:ba:11:d8:94:50:4e:5b:77:
         d9:d5:e7:3c:4c:43:db:39:ac:6b:e3:d7:8c:41:77:29:ab:f5:
         8e:a9:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:27:17 2024 by rpki-client on console-fra.rpki-client.org