Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8287e410-8aa5-303c-87da-c2b6d711a73a.roa
File:                     8287e410-8aa5-303c-87da-c2b6d711a73a.roa (raw, json)
Hash identifier:          M+YqrtaYet4OGZgQuivF7Y9qVhTPWD5VR7Pdj+3tZYk=
Subject key identifier:   9B:B7:64:3B:39:49:67:01:25:39:70:03:36:91:9D:3F:54:11:C7:6C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847ED24D1FC198606335C320B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8287e410-8aa5-303c-87da-c2b6d711a73a.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     20940
IP address blocks:        23.220.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:d1:fc:19:86:06:33:5c:32:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=937fbd2c-39a3-4dc1-abbb-0b676d7928dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:33:c0:78:64:3b:5c:e3:a4:87:ac:23:ab:
                    98:8e:0c:55:21:2b:9b:da:a6:a8:bc:2d:a7:58:3d:
                    33:6b:63:1d:73:4c:13:b8:12:7b:66:28:c0:d4:d1:
                    46:c2:cc:6a:52:bb:13:e2:b4:fc:37:93:38:76:91:
                    8b:62:9d:96:99:4f:5c:37:5b:06:78:28:68:b3:22:
                    2b:f0:a8:64:14:68:95:d0:02:d4:6d:5e:57:c1:e5:
                    ea:1e:8b:9d:69:d0:c6:80:4e:38:d2:5e:57:98:fd:
                    45:e3:bd:f7:44:0e:7f:2b:5e:c9:ed:eb:d8:61:84:
                    2f:22:97:47:26:1f:81:f7:b7:f4:6c:49:25:a7:32:
                    d2:cd:7d:2c:87:9c:c7:a1:a5:6f:ee:75:60:ec:6c:
                    41:ec:53:83:a5:7a:46:ea:d1:e3:a2:e9:e4:37:09:
                    a3:55:4e:fc:2e:12:e6:af:e2:73:f4:29:25:a7:a8:
                    3f:8f:07:3a:c2:98:a9:06:d2:fc:76:2c:d1:7a:83:
                    6d:f3:71:07:b1:5e:3a:3d:08:f2:c1:4d:7b:c7:26:
                    61:c3:08:36:12:c7:e2:ee:5f:f6:98:ce:85:bd:25:
                    fa:c6:3f:41:12:23:60:50:01:d2:f1:ef:e1:76:b4:
                    a2:61:8a:22:55:ba:95:45:9e:b3:08:77:46:3d:7a:
                    d8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B7:64:3B:39:49:67:01:25:39:70:03:36:91:9D:3F:54:11:C7:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8287e410-8aa5-303c-87da-c2b6d711a73a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.220.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ee:47:40:67:6d:5a:5f:cd:70:89:55:16:8b:47:51:f3:63:
         fd:e1:e2:09:22:34:cb:52:99:ef:52:eb:3c:c5:7a:cc:17:83:
         b1:17:a4:7d:6e:59:02:7e:10:41:3d:fa:d3:a2:72:0f:50:1d:
         25:49:cf:2c:5b:74:68:a4:7f:f6:62:14:b1:5e:ff:60:af:ae:
         9e:5b:ad:c3:ca:cd:b6:93:be:a1:ee:31:54:6a:32:22:66:b8:
         93:0c:65:64:63:b8:35:ab:2d:d5:2b:45:9d:36:4a:6d:d7:a4:
         7a:e0:f6:36:40:e0:b1:a2:8e:78:fa:35:ee:aa:f3:d1:b8:8a:
         86:7c:ca:1a:33:32:54:69:9f:87:54:d0:53:32:a5:75:86:0c:
         c1:50:f4:e2:16:a9:4a:e2:67:96:09:19:98:3b:5d:72:7c:1d:
         20:be:55:73:23:39:bb:98:12:c6:5f:5c:c4:72:f5:8d:ed:ff:
         db:29:61:c7:1c:e3:f6:51:f7:87:a9:05:ad:85:06:8c:fd:cb:
         ae:17:fa:5a:48:d5:28:e5:55:7a:84:ac:60:f5:1a:0c:bf:a4:
         fa:cd:7e:5e:8a:ea:6f:a5:41:d1:8f:5d:f5:d4:57:64:4b:73:
         44:19:24:e9:d4:70:b4:af:25:43:c4:e9:48:7c:59:0c:19:20:
         59:6e:88:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:08 2024 by rpki-client on console-fra.rpki-client.org