Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f36dc179-4c12-3462-9cf4-fb539b2aa1cb.roa
File:                     f36dc179-4c12-3462-9cf4-fb539b2aa1cb.roa (raw, json)
Hash identifier:          oi4jVB0HB7L0KeiFI7P7ZnF7eMj01lVDagPQ1MOVAsA=
Subject key identifier:   FE:A5:C7:8F:4B:BB:77:7A:8B:9C:44:F2:80:4F:6E:9E:B1:C1:07:B1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AF9BF9EADA144CCC84FF8600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f36dc179-4c12-3462-9cf4-fb539b2aa1cb.roa
Signing time:             Mon 28 Oct 2024 01:00:32 +0000
ROA not before:           Mon 28 Oct 2024 01:00:32 +0000
ROA not after:            Sun 26 Jan 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        23.63.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:af:9b:f9:ea:da:14:4c:cc:84:ff:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 28 01:00:32 2024 GMT
            Not After : Jan 26 02:00:32 2025 GMT
        Subject: CN=cb077dd1-2ebf-4c9c-917c-917e7a247769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:12:74:44:34:6f:92:5e:a1:96:ca:ca:64:
                    23:c3:2c:53:29:20:e1:b3:29:94:04:0e:5b:de:39:
                    3d:c7:fd:15:6d:7e:21:4a:2b:0d:10:6f:fd:57:0c:
                    73:6d:41:c8:33:25:0d:6f:77:c3:45:90:0e:30:a8:
                    ba:ad:5c:d0:40:97:0b:c3:de:a1:fb:d7:59:bb:bd:
                    77:1d:55:23:38:01:3d:4b:23:ec:47:3f:30:f8:3e:
                    57:e0:a2:fa:aa:95:d1:56:70:44:93:f4:cf:46:3b:
                    0c:15:ab:43:ae:d3:c5:a1:9d:7a:34:52:f2:03:c4:
                    d4:05:c4:99:9a:64:53:e0:3c:df:8e:b7:42:61:6a:
                    8d:d4:5b:56:d3:e7:af:3b:68:cd:6e:bc:41:6c:f8:
                    db:68:68:7d:5f:67:9e:21:69:63:10:6f:47:ed:30:
                    cf:41:ff:a2:4e:c6:ee:fa:22:82:0d:a1:be:da:8a:
                    2e:32:b0:66:fc:c4:d9:1a:de:5d:19:33:c8:23:93:
                    9d:c2:26:8e:f2:d2:e6:35:b9:69:7a:93:fc:d4:ce:
                    96:19:05:89:ef:fd:ea:ff:cd:db:a2:54:cc:b5:fb:
                    42:a8:4a:48:d9:01:40:2d:2e:96:d4:90:fa:63:30:
                    8a:77:3b:3c:b2:a0:47:13:02:db:5b:7f:13:7b:e1:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A5:C7:8F:4B:BB:77:7A:8B:9C:44:F2:80:4F:6E:9E:B1:C1:07:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f36dc179-4c12-3462-9cf4-fb539b2aa1cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.63.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e4:aa:73:94:ad:6b:3f:ae:f9:9d:01:89:bd:46:b5:4c:44:
         4c:41:39:ed:b8:52:02:c4:1c:6e:12:77:97:f2:00:c7:0f:6d:
         a5:f5:c4:1c:94:bc:0d:bf:62:3a:1e:30:5e:9b:ff:33:49:c5:
         72:8b:e9:1a:53:26:44:86:d2:e5:70:97:2f:79:89:ea:08:7a:
         f5:02:a8:dc:d4:95:5e:2b:c9:cd:0a:44:c0:45:d1:5e:88:08:
         6c:fb:c7:56:0f:3f:8b:52:b9:09:3b:e6:e5:4d:ad:7d:a1:55:
         2a:a9:84:32:72:6c:0e:6f:62:24:67:3d:da:ce:90:97:4d:46:
         90:99:99:89:e6:84:c5:c1:f8:02:b0:23:6e:69:d1:0f:dd:0b:
         2d:7f:22:e7:28:08:74:aa:c5:87:67:f5:7b:33:78:70:6c:d5:
         b1:dd:0a:3e:da:d5:83:79:70:5e:94:63:b0:cf:4c:ed:b1:7f:
         f4:74:f5:b0:3a:47:3f:50:21:0a:21:71:a0:a6:c1:fe:69:d6:
         78:a9:f0:6d:b0:ba:b8:38:8f:28:dc:ff:e6:a6:e0:0d:d8:5d:
         80:9c:5a:f0:88:40:0b:4f:fc:88:e4:a7:fa:50:54:6f:0d:0f:
         b8:14:56:d0:e9:8f:58:a6:9a:12:30:41:c9:5e:4c:d5:62:98:
         72:30:68:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:43 2024 by rpki-client on console-ams.rpki-client.org