Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d353b96d-d280-3ed7-877a-9ac521189a27.roa
File:                     d353b96d-d280-3ed7-877a-9ac521189a27.roa (raw, json)
Hash identifier:          7yodUD3fHHV8PLEsUV3sYPFQTw2dQT0XJOb9Epv4WTE=
Subject key identifier:   06:3E:8E:46:B6:0B:8B:F3:6C:A8:F3:06:38:EF:3F:25:10:C4:4B:1E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36E29DF962A8ABB27582C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d353b96d-d280-3ed7-877a-9ac521189a27.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.61.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:e2:9d:f9:62:a8:ab:b2:75:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=913e05d0-502a-4213-8e20-272b9c7c1642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e7:39:22:40:37:4a:09:fd:b5:b3:46:df:84:
                    87:36:e4:f4:7c:87:48:48:67:91:15:0b:c0:ef:17:
                    f1:b3:1a:6a:ed:15:97:02:51:43:60:f8:19:05:cf:
                    f2:92:5a:5e:1c:81:2e:47:73:49:c5:ee:69:2a:87:
                    6e:ff:a0:ff:12:fc:da:bc:1a:aa:e5:e2:46:d0:f3:
                    58:69:dd:bd:77:28:2e:40:2e:c2:a3:5c:49:d8:0e:
                    de:09:3b:68:bd:d8:df:60:be:27:c0:f1:55:d1:f5:
                    f9:6c:5d:38:43:76:b1:17:b3:f4:f9:9a:62:f1:f3:
                    cb:87:15:6c:40:ea:d9:f1:fa:e9:c3:5e:9a:69:32:
                    1d:95:72:50:f4:e2:73:61:b5:17:f7:81:9c:a4:ef:
                    1e:30:d8:51:60:64:c0:01:88:58:c2:3e:0d:4e:37:
                    2c:40:0a:0b:95:cf:61:bf:3e:8c:af:47:39:b4:6e:
                    19:bc:c1:63:96:0c:37:7a:97:0a:65:a7:ac:14:6a:
                    e6:48:cc:b7:1a:8d:7d:a8:f6:4a:00:4a:15:4a:0e:
                    18:84:3d:8e:94:e0:4c:42:d7:1d:52:48:6c:4f:5a:
                    fd:50:52:1a:fc:f3:76:b5:29:87:03:89:56:c3:8a:
                    3e:d9:a6:b5:96:ad:a7:e8:84:f9:7c:53:c4:3f:d8:
                    d7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3E:8E:46:B6:0B:8B:F3:6C:A8:F3:06:38:EF:3F:25:10:C4:4B:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d353b96d-d280-3ed7-877a-9ac521189a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.61.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:da:46:fb:1c:73:10:a5:07:e8:83:26:79:f0:57:cd:8c:ed:
         fd:ff:bc:bc:0c:46:86:6f:aa:85:ef:cc:7a:a4:79:dd:f4:5a:
         36:2b:11:e3:28:44:5b:3e:c8:ce:2e:c2:a3:e8:9e:c0:19:9f:
         86:a9:23:97:0b:de:ec:8f:87:10:c3:4b:9e:fa:26:12:17:10:
         84:49:66:46:c5:dc:e4:5d:80:0b:31:ac:aa:32:82:29:8b:f2:
         3b:a0:6c:de:09:76:f8:e0:4e:34:b9:ef:ef:f7:b2:ff:1c:71:
         c5:3d:15:05:5a:4d:38:f6:73:6f:8f:4f:1b:dc:20:0c:f3:85:
         7f:22:53:d9:ba:16:17:02:fd:98:fe:fa:fe:ba:e9:a2:1c:8f:
         89:bf:fb:52:8e:b5:85:5d:cf:73:77:2d:9c:23:82:3b:ce:78:
         ac:eb:94:e5:0d:ec:70:1d:bb:38:a5:c2:e8:67:b2:0f:55:db:
         64:af:68:b1:0f:f1:e7:36:11:f0:bd:4f:e7:15:9a:54:ee:33:
         c1:a9:be:98:b4:36:9d:7e:0e:c9:f0:24:b6:e1:11:4d:54:49:
         94:e4:5f:1e:42:fa:04:53:ab:55:ed:ad:c7:b4:33:ae:2f:03:
         71:4b:a2:0f:e0:22:a7:27:26:69:5d:5a:ab:28:6c:84:3a:62:
         ab:cb:f2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:42 2024 by rpki-client on console-fra.rpki-client.org