Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b24b2f29-74ec-34f1-9a71-2c5e19d1e007.roa
File:                     b24b2f29-74ec-34f1-9a71-2c5e19d1e007.roa (raw, json)
Hash identifier:          LTe2X2Xu8rvfJfeEEkdjFp2j7LQqjXPykX6C8AWl2iE=
Subject key identifier:   1D:5B:FB:E4:1E:67:61:AD:0D:64:69:58:CC:00:60:4E:FA:06:7D:32
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B3CC1F6FDD3E8AF3BFAEA800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b24b2f29-74ec-34f1-9a71-2c5e19d1e007.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     35994
IP address blocks:        23.209.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:1f:6f:dd:3e:8a:f3:bf:ae:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=18ad2a48-368a-416d-9be9-c35128ca88d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:3b:b2:7d:a3:61:77:37:18:b4:68:e6:1e:
                    ea:4c:05:91:87:71:0a:b2:89:3c:52:97:50:ae:0c:
                    12:60:f5:51:b6:93:d7:22:a3:42:14:62:12:32:85:
                    60:26:23:9b:33:04:ac:6e:1d:d6:e9:15:36:1d:6b:
                    49:a9:28:fe:bf:b7:04:4a:31:96:64:f2:3d:6a:94:
                    04:da:3f:bc:02:20:bb:72:e3:b4:a1:37:9a:1a:c1:
                    9d:9e:9d:23:16:1a:51:89:99:66:e8:00:6f:d5:fc:
                    ad:94:59:c5:1a:39:71:02:75:a9:2a:1e:ef:a6:71:
                    40:44:cf:6a:fd:42:4d:f3:57:23:ab:ef:72:6e:ae:
                    86:52:da:57:e8:7e:3b:1e:2a:d7:01:cb:47:9b:ff:
                    1b:f5:8b:63:4b:ed:fa:28:b5:bc:99:66:0b:3e:5d:
                    dd:e5:a8:4a:1e:da:1d:16:da:45:29:18:dc:8e:01:
                    1a:fc:7c:3c:99:f8:11:d3:1c:32:27:06:a6:e0:1d:
                    57:32:5a:29:0c:31:ce:c6:1d:72:c5:d7:71:78:7d:
                    ee:62:35:49:62:5a:1c:75:3e:d8:26:cb:b2:df:86:
                    08:07:3e:9d:38:8b:be:c5:b6:54:c5:68:08:66:e0:
                    5d:09:f0:0d:65:82:a4:35:6f:11:e7:d2:16:2a:f1:
                    6a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5B:FB:E4:1E:67:61:AD:0D:64:69:58:CC:00:60:4E:FA:06:7D:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b24b2f29-74ec-34f1-9a71-2c5e19d1e007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.209.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:6d:40:37:72:13:b3:05:61:64:07:0e:70:fa:74:02:f7:04:
         02:d5:a3:e1:93:ae:e7:a8:1f:47:aa:9c:ec:0e:0f:45:3c:2d:
         ab:bf:f6:fd:c4:07:64:ca:73:d7:b8:b5:d0:b4:83:2d:e9:7a:
         f0:dd:8b:e5:83:1b:80:24:81:5f:ac:ed:09:7b:cd:a7:f6:7d:
         96:dc:11:97:21:45:2a:19:fc:ea:8a:82:61:5a:a2:d1:68:dc:
         ed:3d:6d:b4:80:c0:f9:cd:7a:3b:72:77:52:be:dd:10:22:8d:
         22:2a:04:d1:86:ee:16:08:57:b5:3c:14:f8:a8:93:01:59:cd:
         48:f4:5e:22:cb:56:2a:f9:9b:b4:47:b6:ea:58:a1:65:0e:53:
         1a:9c:ec:8b:85:b8:d8:83:c4:15:d4:f5:95:a9:56:c9:a6:92:
         0e:51:9a:39:c4:08:fe:ec:f6:d2:2b:15:a6:b8:f2:04:e9:c9:
         c1:6c:43:35:66:61:21:55:fd:33:37:b9:70:ca:2b:c6:0b:84:
         fa:0e:5a:dc:99:1c:72:4f:48:55:6b:e8:37:3c:6b:6b:fb:39:
         82:f9:1f:30:fd:e8:90:f0:e4:0d:d3:01:92:b1:15:5b:1e:52:
         00:04:04:96:d0:83:4d:f6:e7:32:98:de:00:a7:6d:a7:e7:c5:
         c4:3c:6c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:47:56 2024 by rpki-client on console-ams.rpki-client.org