Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3378795a-a2e1-3e64-9eeb-71fc09ebddfd.roa
File:                     3378795a-a2e1-3e64-9eeb-71fc09ebddfd.roa (raw, json)
Hash identifier:          MHfNoRyyJaBREbFkudf41Em+dvtWk37otryoOyO6b4A=
Subject key identifier:   F7:A6:64:F5:2A:6D:15:1C:54:E2:E1:48:10:36:89:B1:1F:46:97:59
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F432858475910C4E1070A122DC62DDA80
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3378795a-a2e1-3e64-9eeb-71fc09ebddfd.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     30238
IP address blocks:        23.90.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:c4:e1:07:0a:12:2d:c6:2d:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=84b2fa2c-aaef-43d4-81b7-55f25fad208e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f9:a8:e0:92:4b:76:7d:d2:28:26:37:18:f2:
                    f0:de:a1:53:81:0b:45:64:18:c7:b0:98:68:1e:32:
                    4f:c3:79:16:6d:ca:76:83:d9:24:89:fd:1d:60:42:
                    2f:12:b1:9b:19:21:a8:ad:bc:83:fa:b9:d0:30:1a:
                    12:5a:ae:4a:09:70:ea:a4:64:64:90:05:1e:61:70:
                    b1:4b:c8:c1:f8:6e:09:9d:79:99:96:36:e5:c3:5e:
                    b9:76:89:54:58:5b:52:30:fd:3c:2f:92:e5:c7:7f:
                    4e:c3:14:62:17:16:30:bb:e2:9f:8f:2d:10:8b:f0:
                    52:ae:10:af:ff:1e:4f:12:63:8e:c5:6a:56:2a:ce:
                    8c:50:d2:65:fa:df:7a:e1:77:78:72:03:2e:9a:55:
                    b7:e4:f7:06:10:23:c2:4f:ce:32:75:3b:87:e8:da:
                    16:e2:05:0e:e0:21:ed:40:00:9c:70:02:1c:27:22:
                    6a:6b:6a:47:25:8a:62:f6:c1:47:f0:66:a3:bb:61:
                    ea:05:58:83:50:75:93:c8:f5:e0:f1:42:b7:b1:f5:
                    79:63:6e:af:d5:eb:33:2d:d6:3c:f6:65:47:c6:b0:
                    65:e8:a2:44:83:9b:04:11:49:fd:69:13:fa:c8:4e:
                    b2:70:b1:99:37:fb:4a:2a:78:86:99:b5:97:ec:74:
                    36:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A6:64:F5:2A:6D:15:1C:54:E2:E1:48:10:36:89:B1:1F:46:97:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3378795a-a2e1-3e64-9eeb-71fc09ebddfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7d:a3:6d:23:a2:2b:c7:90:36:fe:01:79:0c:1d:49:16:79:
         60:17:e2:63:6a:25:89:ac:d0:17:28:7d:46:62:a9:a4:7e:cd:
         06:31:ba:22:de:9e:c1:57:5f:50:11:b0:2b:9c:e9:25:f2:c5:
         06:32:28:23:7c:d3:59:92:fe:9e:c9:4d:15:8c:c9:ec:04:9a:
         93:a4:85:af:44:99:07:d3:d4:4b:0f:77:c4:21:8b:1c:b8:4c:
         4d:0d:94:d9:b8:71:e4:ba:fa:80:4a:13:d3:a5:df:e2:01:63:
         14:9a:2d:08:3f:52:13:a9:27:e5:b3:33:f7:a4:07:2f:4d:d8:
         7b:6b:90:3e:e5:35:6f:bb:c0:33:8f:7a:fe:be:07:d4:17:c4:
         de:26:4e:0f:24:0f:5b:b9:b3:c7:01:cd:3d:a4:e4:ff:c3:bd:
         57:d4:26:4d:cf:0d:97:4f:32:eb:ae:97:57:e3:48:41:56:e1:
         bd:2d:fd:90:68:f6:bd:36:4f:a4:5b:5c:ec:c0:45:cc:ca:75:
         33:35:65:a7:0c:f5:55:4c:f5:43:e4:1b:25:9e:6a:d7:2e:ea:
         57:a1:54:f0:a8:36:fe:b8:ea:07:47:7b:7e:bc:f1:c5:8d:8d:
         d9:29:ba:12:71:de:5a:a8:5f:31:42:43:fe:77:37:a3:fd:e0:
         4f:20:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:34 2024 by rpki-client on console-fra.rpki-client.org