Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddc77088-857c-3b1f-b5ea-34bcc6209011.roa
File:                     ddc77088-857c-3b1f-b5ea-34bcc6209011.roa (raw, json)
Hash identifier:          +K5uvChAcBoPCnUsWrTL08JCmE5YhGjWCkvvHjI6M9U=
Subject key identifier:   58:09:91:CD:C0:F0:20:AE:D0:BE:79:43:64:1F:B7:DA:47:03:CB:07
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B696C25F0C072840EF8DC180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddc77088-857c-3b1f-b5ea-34bcc6209011.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        23.223.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:c2:5f:0c:07:28:40:ef:8d:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=7433eb1b-1a24-48a0-ac05-88ae4ed6be70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a3:b9:ca:9c:33:39:dc:0a:45:6b:d7:40:69:
                    0b:2b:a1:c8:50:64:9a:75:34:26:ba:0a:74:5a:83:
                    89:a5:91:d1:d7:7e:eb:27:60:59:f2:bf:1d:c3:3e:
                    f9:d4:b0:27:01:86:6b:0a:3e:d7:a6:44:bc:3b:bc:
                    40:e5:20:48:1a:3f:ab:fe:33:98:06:c4:f3:d1:4e:
                    db:69:65:3d:28:e3:c8:1c:68:19:cb:ca:94:89:97:
                    70:a3:1d:c4:3f:ca:bf:09:b0:cd:9f:77:d7:c0:9b:
                    90:7c:79:39:8b:31:46:98:c1:dc:63:ac:da:e4:20:
                    49:9f:cc:0c:c5:b7:f1:4d:16:9e:1b:58:bf:8f:3e:
                    70:67:af:6b:05:c6:ea:bc:2a:01:0f:c1:38:8e:d5:
                    a2:c5:db:cd:70:ad:47:b3:b1:59:8a:ac:94:9e:4c:
                    bb:6a:8c:67:b3:cb:bb:a8:d0:3d:d3:4c:e2:58:2d:
                    7b:02:82:9b:51:d7:1d:95:5b:ed:4a:ff:b6:d9:df:
                    97:6d:50:5d:bd:c0:97:de:a0:bd:a8:20:a8:10:77:
                    99:14:8e:7a:52:dc:86:07:e7:5a:46:38:92:d1:1a:
                    03:dc:b2:b5:81:8f:22:f3:2e:a6:e2:2b:75:56:8c:
                    62:76:6a:81:46:b1:f0:9d:b3:7e:2d:44:69:f0:a2:
                    a2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:09:91:CD:C0:F0:20:AE:D0:BE:79:43:64:1F:B7:DA:47:03:CB:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddc77088-857c-3b1f-b5ea-34bcc6209011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.223.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2f:df:ee:2e:f6:c1:b1:4e:b7:97:de:5f:72:07:90:ba:78:
         43:f9:72:a2:5a:88:f6:95:78:71:d1:e6:c9:e6:81:31:b9:c8:
         ee:6d:fa:09:4c:f6:6c:c1:8e:7a:04:d0:f3:76:f2:18:7b:32:
         43:4d:15:7d:d4:0e:66:25:49:91:5a:d3:a6:b9:41:82:98:20:
         19:6b:57:ca:82:b1:4c:3e:35:81:1b:6a:a6:d9:54:b4:f0:53:
         87:bc:a3:0b:5f:39:ce:b9:64:dd:d3:b6:9e:69:e2:48:09:b8:
         13:03:bb:6d:1d:b3:8f:98:67:2a:50:47:2b:18:04:b5:ac:45:
         67:aa:e1:94:14:e3:86:ce:e1:01:8e:76:8b:cf:be:29:dc:39:
         09:22:c7:58:1a:be:07:e1:28:7e:5a:dc:57:fd:b0:78:6d:39:
         0d:c4:16:a3:ba:93:91:df:e9:82:44:98:e7:06:50:f2:33:09:
         c1:ef:3b:bb:a7:14:b9:96:ac:90:c1:ec:e5:8c:31:78:c0:e3:
         a5:0f:b9:35:32:ad:45:e6:78:6d:05:39:58:85:dd:bb:38:f3:
         3c:72:a4:df:1c:5f:f5:99:9a:d1:32:82:e5:70:e3:be:d1:de:
         17:e1:d0:b7:43:9c:3f:15:6d:4c:6a:8d:b5:9a:89:7b:28:dc:
         ea:6e:28:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:46 2024 by rpki-client on console-fra.rpki-client.org