Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/289c9239-2dd4-3e61-ac0b-042bd821526e.roa
File:                     289c9239-2dd4-3e61-ac0b-042bd821526e.roa (raw, json)
Hash identifier:          9/HCOCyNjHg8JMiOLAJ7hpgzFk7OqsDflbkhJJJN9IA=
Subject key identifier:   71:57:D2:01:7F:5D:06:69:12:FE:D4:8E:9D:C4:F6:4D:12:F5:0D:CD
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F432858478F812E4892CEBC2C61500700
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/289c9239-2dd4-3e61-ac0b-042bd821526e.roa
Signing time:             Wed 16 Oct 2024 13:00:43 +0000
ROA not before:           Wed 16 Oct 2024 13:00:43 +0000
ROA not after:            Tue 14 Jan 2025 14:00:43 +0000
asID:                     30215
IP address blocks:        23.90.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:81:2e:48:92:ce:bc:2c:61:50:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Oct 16 13:00:43 2024 GMT
            Not After : Jan 14 14:00:43 2025 GMT
        Subject: CN=ef55ae29-0ab5-47dd-bffb-56d574698951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:5b:e0:c5:a0:10:88:db:af:0a:af:16:75:
                    2a:31:51:60:a2:21:11:63:77:b5:9f:f3:88:94:d0:
                    ab:ae:c2:de:6c:22:fe:ec:44:0b:40:b5:6c:9c:5f:
                    51:53:98:35:14:83:fa:2c:a3:63:e2:76:f8:43:af:
                    a7:db:b8:14:ae:85:2a:ce:a4:18:43:4a:d8:31:70:
                    2e:b1:e5:8b:1c:67:75:3e:27:1c:36:66:96:2d:1a:
                    ee:40:3d:fc:0d:e6:13:70:d8:68:9d:4f:3c:ef:23:
                    9e:3c:03:5c:f4:d4:32:8a:e3:0c:69:b0:52:8d:70:
                    90:fe:99:da:b9:48:9e:fd:a7:55:cd:55:25:df:aa:
                    e0:60:5b:31:b1:8c:20:6b:3d:ac:3a:0b:f7:36:a1:
                    f8:02:eb:82:f9:22:dc:67:47:0a:84:41:9d:b7:b4:
                    e2:8e:64:99:39:24:26:31:15:9c:6b:04:d5:31:40:
                    c5:40:0c:86:a9:e8:ba:11:4e:66:ef:80:15:43:6e:
                    ba:58:2b:b3:75:76:e7:e8:67:0f:c1:b0:35:c8:3c:
                    c0:cb:82:49:c2:47:c3:48:7a:4e:8f:c5:8b:4f:6c:
                    19:d0:06:7d:c6:1b:4c:cf:17:d3:ab:d7:58:9d:3b:
                    18:ff:9c:96:6a:d7:ff:8a:32:a8:18:c4:d3:08:30:
                    87:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:57:D2:01:7F:5D:06:69:12:FE:D4:8E:9D:C4:F6:4D:12:F5:0D:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/289c9239-2dd4-3e61-ac0b-042bd821526e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:5d:fa:7a:cd:dc:8c:04:5c:f2:71:7b:4c:a2:af:b0:04:a4:
         01:ad:a4:16:5c:b9:3a:12:5a:68:5e:8e:6c:a1:9d:18:9f:04:
         72:b6:a8:19:0e:b7:1e:c3:9f:4f:00:6e:bc:f2:d0:c8:8f:17:
         87:b2:22:00:71:7d:0b:ff:88:2d:e5:3d:37:f2:84:19:b3:b4:
         86:5b:b4:2e:4a:2f:95:5c:3c:26:80:34:c4:be:e2:0b:1b:14:
         5c:b7:9a:02:65:ca:fc:1f:33:93:ce:a0:b8:19:fe:06:cf:c4:
         01:89:fb:78:0c:a9:2f:92:8c:72:96:79:32:66:27:25:c9:d7:
         7b:fa:b6:c1:81:e5:30:7e:e9:7d:37:cd:1e:bc:32:df:0a:82:
         1c:76:df:7e:79:07:cb:79:d4:66:16:68:c8:b7:db:fb:2a:5b:
         25:f6:2d:e1:91:1a:73:9e:51:8d:50:bf:ea:6b:59:5c:13:24:
         b6:bf:f6:54:61:ec:c7:b3:cd:a9:f2:f3:ae:72:68:b9:45:25:
         8e:31:1d:9c:3a:16:78:81:fb:65:f9:91:6d:c9:d9:04:19:0f:
         b0:5c:7f:54:29:94:37:cb:e1:e1:9d:ff:38:89:02:a9:87:7d:
         97:76:bf:8f:0d:83:1a:02:6b:e3:73:d7:d1:00:40:7c:a2:8d:
         90:a3:13:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePgS5Iks68LGFQBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI0MTAxNjEzMDA0M1oXDTI1MDExNDE0MDA0M1owLzEtMCsGA1UEAxMk
ZWY1NWFlMjktMGFiNS00N2RkLWJmZmItNTZkNTc0Njk4OTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlxb4MWgEIjbrwqvFnUqMVFgoiERY3e1n/OI
lNCrrsLebCL+7EQLQLVsnF9RU5g1FIP6LKNj4nb4Q6+n27gUroUqzqQYQ0rYMXAu
seWLHGd1PiccNmaWLRruQD38DeYTcNhonU887yOePANc9NQyiuMMabBSjXCQ/pna
uUie/adVzVUl36rgYFsxsYwgaz2sOgv3NqH4AuuC+SLcZ0cKhEGdt7TijmSZOSQm
MRWcawTVMUDFQAyGqei6EU5m74AVQ266WCuzdXbn6GcPwbA1yDzAy4JJwkfDSHpO
j8WLT2wZ0AZ9xhtMzxfTq9dYnTsY/5yWatf/ijKoGMTTCDCHQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFX0gF/XQZpEv7Ujp3E9k0S9Q3NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMjg5YzkyMzktMmRkNC0z
ZTYxLWFjMGItMDQyYmQ4MjE1MjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1pqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGld+nrN3IwEXPJxe0yir7AEpAGtpBZcuToSWmhejmyhnRifBHK2qBkO
tx7Dn08Abrzy0MiPF4eyIgBxfQv/iC3lPTfyhBmztIZbtC5KL5VcPCaANMS+4gsb
FFy3mgJlyvwfM5POoLgZ/gbPxAGJ+3gMqS+SjHKWeTJmJyXJ13v6tsGB5TB+6X03
zR68Mt8Kghx23355B8t51GYWaMi32/sqWyX2LeGRGnOeUY1Qv+prWVwTJLa/9lRh
7Mezzany865yaLlFJY4xHZw6FniB+2X5kW3J2QQZD7Bcf1QplDfL4eGd/ziJAqmH
fZd2v48NgxoCa+Nz19EAQHyijZCjE2E=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:37 2024 by rpki-client on console-ams.rpki-client.org