Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fddc08b9-f80c-3325-b173-4d9f5ec0234a.roa
File:                     fddc08b9-f80c-3325-b173-4d9f5ec0234a.roa (raw, json)
Hash identifier:          Ks6qMVyt23JVCJ8fb3sbnWZvrdR0oSYTzYrub04amA4=
Subject key identifier:   4B:EB:5E:9A:6C:8A:93:9C:A2:B5:57:CE:43:9A:13:F3:BA:F8:5A:1A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847D999FAAB3F9E383F6218D140
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fddc08b9-f80c-3325-b173-4d9f5ec0234a.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     25019
IP address blocks:        23.204.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:fa:ab:3f:9e:38:3f:62:18:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=ebd9f963-c9f3-4192-916b-fcd5e29b95b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2c:93:45:d7:47:59:e3:ef:0c:7b:9a:73:fe:
                    8e:9a:0c:f4:af:23:be:f0:04:40:18:44:cb:dd:c7:
                    1a:ab:70:d0:a2:e6:3d:7a:52:f5:b8:a2:65:79:72:
                    09:1b:7e:1d:31:4c:ad:58:a5:db:90:90:03:cb:65:
                    60:13:4d:89:c3:3c:8a:cf:46:da:a5:2c:78:2a:8b:
                    1f:cc:e1:02:76:4e:62:ce:e0:9f:02:78:d1:4b:fd:
                    50:d4:d9:d5:84:cd:51:fe:5e:69:20:69:09:40:77:
                    09:45:6f:70:49:e4:49:ef:a3:35:07:bc:5a:49:98:
                    6b:82:44:e7:21:30:69:e0:a9:df:8e:01:aa:29:e9:
                    9b:22:7f:d8:0c:96:72:68:91:a4:61:87:29:19:f4:
                    99:2a:03:24:f0:a7:92:f9:35:0b:df:4d:f4:12:f7:
                    97:64:45:4e:10:a9:b3:1b:5a:5c:64:09:f9:63:91:
                    3f:d0:03:c9:8d:90:be:13:a7:c9:88:e7:7c:3a:7d:
                    f4:b3:78:da:b2:1e:45:95:24:63:1e:dc:fd:4a:e8:
                    2b:22:73:5e:d3:8b:c8:f1:e5:38:c1:b2:1d:06:ca:
                    15:df:f8:dd:79:1f:57:28:64:da:43:bb:cb:7b:51:
                    c7:67:c5:cd:4f:a1:43:94:81:bc:cd:c2:43:92:33:
                    b8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EB:5E:9A:6C:8A:93:9C:A2:B5:57:CE:43:9A:13:F3:BA:F8:5A:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fddc08b9-f80c-3325-b173-4d9f5ec0234a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.204.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:42:c3:3b:ff:4d:c8:2a:df:be:08:9d:a3:9e:56:c1:15:26:
         71:2f:bf:57:47:f6:e3:e1:a2:a7:38:9c:18:d9:52:31:e0:ed:
         35:a4:b1:80:c0:9b:58:c0:6d:aa:94:ef:75:7b:33:53:e0:1d:
         26:b4:58:94:99:36:5f:93:0c:88:bd:9e:ed:f5:3c:5f:78:f2:
         18:a8:ab:dc:35:d3:29:f9:42:35:b9:5c:69:7f:c4:ad:15:bd:
         04:ca:79:58:96:4f:61:bb:84:2d:6a:c1:67:b8:63:16:3c:cb:
         21:17:35:6e:52:1c:ee:02:b2:5f:85:b1:2c:18:7c:de:9e:3a:
         09:f5:3b:db:8c:5b:58:8d:a2:80:d5:dc:da:0b:41:9d:39:1f:
         c7:ff:f4:00:be:6c:40:58:5e:81:c1:39:f2:34:c3:8e:f7:1c:
         73:d7:40:86:f8:a5:18:ba:c8:47:bd:e2:3f:1a:65:26:81:e0:
         04:09:45:f4:3c:69:d3:c5:59:ef:0a:01:97:c1:27:44:5c:b3:
         56:46:d5:0d:32:3d:e2:85:64:a7:a7:af:fd:97:6e:c0:1d:6c:
         7e:74:4f:d0:55:8f:16:1d:67:b7:3f:6c:0c:a4:9d:8a:07:74:
         bc:1f:1c:ce:a0:21:86:1c:01:02:51:92:3d:a5:22:9a:ac:d4:
         86:c8:be:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:09:46 2024 by rpki-client on console-fra.rpki-client.org