Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7f9546-cc31-32f9-a120-101671b4588c.roa
File:                     8d7f9546-cc31-32f9-a120-101671b4588c.roa (raw, json)
Hash identifier:          UwFzDFjP/nmZrPZqJQVV5vO8vYx0Rq3TUMFT/FciJn0=
Subject key identifier:   3C:51:39:D3:D0:D7:22:2D:FF:D9:8D:C0:FB:4B:02:44:5E:0E:8F:40
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847ED24DFD096526A61DC457F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7f9546-cc31-32f9-a120-101671b4588c.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     9498
IP address blocks:        23.223.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:df:d0:96:52:6a:61:dc:45:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=55aa0ecf-9d00-4cec-b56d-f65840852ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:51:54:1a:7d:5e:42:a2:d1:5c:7f:8f:94:7c:
                    2a:58:94:22:c6:13:da:c3:e2:7f:47:19:ad:cf:b2:
                    09:6b:23:96:8c:88:84:d2:cd:ec:f1:96:6d:e5:55:
                    41:7b:5f:83:c3:bb:6b:90:28:e4:cb:b2:34:eb:7b:
                    51:f4:8a:d3:6a:a9:56:63:78:27:41:46:f8:97:6c:
                    c6:da:ad:b7:03:1e:b7:50:0f:b1:4a:9a:ad:21:d0:
                    bc:29:36:55:85:32:a4:8e:36:80:c8:1f:d2:63:45:
                    a8:86:45:3e:fe:cb:d0:26:9a:63:6f:13:ae:7b:26:
                    93:8a:a0:ec:29:4d:d2:b4:aa:6e:af:2b:51:e5:e2:
                    40:f1:ab:a0:63:3e:f4:bb:a1:bb:d7:c8:30:ed:ae:
                    e3:3f:1a:6f:ef:f2:b7:da:34:fc:03:56:99:1f:11:
                    ed:db:f3:81:4e:26:69:18:2d:13:e4:c3:0f:bb:e0:
                    1e:70:74:5f:2e:f8:ea:b5:8b:53:c0:88:2a:18:45:
                    d0:81:60:55:52:30:2e:0a:1c:c5:79:44:02:ba:d6:
                    f3:75:94:ed:09:7f:f2:b4:2e:91:48:91:56:ca:3b:
                    5b:d6:20:b5:dd:ee:ea:dc:5a:ef:f4:12:a6:32:30:
                    fb:47:7b:ca:bb:04:04:8d:76:72:9d:37:6f:60:06:
                    03:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:51:39:D3:D0:D7:22:2D:FF:D9:8D:C0:FB:4B:02:44:5E:0E:8F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7f9546-cc31-32f9-a120-101671b4588c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.223.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:db:66:6b:fa:b7:e0:b8:2c:af:96:f0:58:0a:73:8a:a3:d2:
         90:36:9f:d6:e8:84:20:5c:44:72:99:c5:c8:4c:b9:29:90:32:
         62:6d:a7:2c:f7:f8:e4:0f:fe:61:33:74:48:af:e1:c3:cf:53:
         bf:10:30:4d:ae:4c:98:bf:cc:9a:68:8c:c0:d1:5c:3f:44:41:
         19:3d:3f:b5:d4:8a:13:e9:ee:6e:85:2c:1f:26:d5:13:c3:0e:
         55:cc:d0:49:20:cf:ce:f6:14:29:2f:6a:aa:6a:ab:ed:88:38:
         40:f6:29:c5:26:a3:07:98:ad:31:b3:d4:f6:20:4f:49:9c:6a:
         8c:00:cc:23:77:73:75:78:07:3c:f3:9d:27:6e:fa:54:2f:b1:
         42:0e:bd:e3:5f:da:7a:b9:27:64:8a:4d:9a:5b:b3:a8:4a:0d:
         73:58:83:d2:45:4f:8e:8e:9d:a6:43:30:0b:14:2e:07:7d:2b:
         e2:a3:19:8a:89:4a:3b:d6:ff:18:27:e0:72:76:ed:8e:4a:b3:
         1a:d4:45:18:55:d6:e9:ab:a5:36:27:ce:ab:4d:39:95:e9:ca:
         05:9a:d3:14:4b:72:ab:2d:27:ee:a1:fc:da:b4:10:84:58:fb:
         6b:a3:96:5c:5b:90:5a:7e:7c:30:c8:31:5d:00:64:f2:1b:79:
         ef:5c:04:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:30:48 2024 by rpki-client on console-ams.rpki-client.org