Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f64bafe8-05eb-317a-8b7e-d51859d975f1.roa
File:                     f64bafe8-05eb-317a-8b7e-d51859d975f1.roa (raw, json)
Hash identifier:          ftV6sne/WDUonHv0wHHjTIlSPHdsIWr/tW4APALLmH8=
Subject key identifier:   34:8F:3D:F2:AF:04:86:E8:55:65:1E:9B:E5:18:F7:9A:1F:A9:E8:71
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847D999FDEB5D7D9C453D41A140
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f64bafe8-05eb-317a-8b7e-d51859d975f1.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     20940
IP address blocks:        23.205.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:fd:eb:5d:7d:9c:45:3d:41:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=ee41237d-9e66-480b-93d6-f64aa9a29cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a1:3c:5b:b5:ed:ea:b7:a1:77:f2:14:cf:8f:
                    0a:ba:5a:2e:4a:34:95:b1:55:b2:bd:65:50:91:80:
                    48:d9:c5:22:72:0e:28:44:e3:dd:30:00:c6:06:a4:
                    fa:f5:21:cc:d5:a4:14:fd:fb:6e:9b:cd:f3:85:11:
                    19:c9:5a:c8:15:f8:c8:4a:f1:9f:55:cd:12:d1:1e:
                    e1:7f:4f:c2:63:ba:d3:4b:7d:68:d3:2a:91:d7:57:
                    08:9a:c0:14:af:94:12:cb:ad:75:03:80:12:59:78:
                    05:f2:88:53:7e:a9:51:9e:ce:41:65:b7:b9:c6:30:
                    58:83:7a:e6:31:d9:d0:78:8e:c5:d0:db:50:05:39:
                    ee:15:df:c8:a8:5f:cf:15:1c:c3:18:ac:35:60:7e:
                    98:ff:b0:36:7b:db:ac:ab:e5:15:10:77:0e:b8:02:
                    49:e4:9e:be:0d:6a:e9:d5:7f:88:9e:b4:c6:3f:02:
                    19:7b:82:cc:d7:d6:76:3a:89:af:86:84:03:f5:0f:
                    51:8c:f5:df:e2:80:9e:30:e8:2b:80:f0:9d:fd:79:
                    33:fc:76:0b:6e:cc:4c:cf:24:51:cc:7d:af:2f:ed:
                    41:41:d6:e0:ad:d7:10:cb:f3:e5:ce:6d:77:4a:9b:
                    cc:97:54:35:19:98:bd:b1:7e:93:d3:46:86:2d:0e:
                    14:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8F:3D:F2:AF:04:86:E8:55:65:1E:9B:E5:18:F7:9A:1F:A9:E8:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f64bafe8-05eb-317a-8b7e-d51859d975f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.205.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:19:dc:0b:15:d8:6b:df:71:77:a2:eb:d1:1e:be:d2:45:ce:
         13:d1:d5:25:76:38:69:ef:a2:28:3b:e9:29:c7:e9:12:f7:16:
         3e:0d:1f:0f:10:19:2a:d9:79:c0:ff:31:e3:58:d5:17:67:2e:
         f4:0e:cc:a3:69:30:d8:de:19:81:79:dd:1d:73:d9:df:37:ac:
         0c:9a:65:a9:d5:16:7b:76:30:bb:06:30:29:4c:8f:29:79:d3:
         13:4b:2e:42:de:39:da:5b:21:5a:57:d6:a0:d4:bc:e0:6e:24:
         3a:06:8e:e7:4f:46:d8:e9:e1:f4:c9:72:14:d0:66:b6:cf:90:
         c8:7c:57:80:bd:a8:82:63:ae:b1:cf:b4:2b:62:85:09:b5:e5:
         c5:94:f7:78:2c:b8:d3:6a:19:22:77:bf:c6:bc:d1:41:df:ad:
         4a:f1:9b:18:2a:74:c9:eb:00:7b:ef:52:bb:34:24:f6:0d:20:
         33:e0:f2:93:24:10:5d:51:1b:32:f3:f9:0b:d7:13:c4:f4:f4:
         08:42:80:1e:e2:59:a4:fc:c3:8e:bf:a7:fe:3e:b6:fd:42:28:
         02:b0:c2:5b:04:24:30:4f:5d:0b:3d:39:06:53:98:7f:5c:b8:
         2f:5f:c5:2d:fe:22:b7:d4:f7:0a:f2:ff:fe:ff:cd:5f:a3:cc:
         b2:57:31:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:56 2024 by rpki-client on console-fra.rpki-client.org