Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/314d290e-501d-3552-a856-2dd6c3c44348.roa
File:                     314d290e-501d-3552-a856-2dd6c3c44348.roa (raw, json)
Hash identifier:          ZFCi9yXvwq1r2UozAmQOn5tF4xtyB7bftQvDeewb7L0=
Subject key identifier:   3B:0A:02:5B:37:5E:60:3E:91:A5:68:97:E4:B3:3B:1D:5E:40:9F:13
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584777C639A8F4BC9C450E007600
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/314d290e-501d-3552-a856-2dd6c3c44348.roa
Signing time:             Tue 08 Oct 2024 01:00:31 +0000
ROA not before:           Tue 08 Oct 2024 01:00:31 +0000
ROA not after:            Mon 06 Jan 2025 02:00:31 +0000
asID:                     7922
IP address blocks:        23.237.126.0/23 maxlen: 23
                          23.237.130.0/23 maxlen: 23
                          23.237.136.0/23 maxlen: 23
                          23.237.138.0/24 maxlen: 24
                          23.237.191.0/24 maxlen: 24
                          23.237.218.0/24 maxlen: 24
                          23.237.244.0/24 maxlen: 24
                          23.237.250.0/24 maxlen: 24
                          50.7.0.0/24 maxlen: 24
                          50.7.8.0/24 maxlen: 24
                          50.7.9.0/24 maxlen: 24
                          50.7.10.0/24 maxlen: 24
                          50.7.11.0/24 maxlen: 24
                          50.7.12.0/24 maxlen: 24
                          50.7.13.0/24 maxlen: 24
                          50.7.15.0/24 maxlen: 24
                          50.7.16.0/24 maxlen: 24
                          50.7.18.0/24 maxlen: 24
                          50.7.19.0/24 maxlen: 24
                          50.7.20.0/24 maxlen: 24
                          50.7.21.0/24 maxlen: 24
                          66.90.124.0/24 maxlen: 24
                          192.240.122.0/24 maxlen: 24
                          198.255.16.0/24 maxlen: 24
                          216.227.131.0/24 maxlen: 24
                          216.227.142.0/23 maxlen: 23
                          216.227.144.0/23 maxlen: 23
                          216.227.146.0/23 maxlen: 23
                          216.227.148.0/23 maxlen: 23
                          216.227.150.0/23 maxlen: 23
                          216.227.152.0/23 maxlen: 23
                          216.227.154.0/23 maxlen: 23
                          216.227.156.0/23 maxlen: 23
                          216.227.160.0/23 maxlen: 23
                          216.227.162.0/24 maxlen: 24
                          216.227.163.0/24 maxlen: 24
                          216.227.164.0/24 maxlen: 24
                          216.227.165.0/24 maxlen: 24
                          216.227.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:c6:39:a8:f4:bc:9c:45:0e:00:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Oct  8 01:00:31 2024 GMT
            Not After : Jan  6 02:00:31 2025 GMT
        Subject: CN=7ae1b534-7411-497b-a849-4072a703306b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:23:12:aa:c0:53:75:ce:8c:2b:45:65:70:8a:
                    6f:da:4f:07:e1:82:8e:85:9d:5b:2f:37:ea:de:d7:
                    b5:74:be:b2:17:a9:2f:c1:76:cf:26:52:67:3f:6b:
                    91:94:a8:8d:63:32:13:b5:11:a2:55:09:c1:1f:f6:
                    63:b5:9c:a7:17:5a:70:fa:e0:c0:cb:ae:36:6d:55:
                    b2:6e:79:30:ef:7a:85:10:dd:67:97:0a:64:03:8c:
                    b4:7b:cf:a6:9a:82:e8:0d:ba:de:75:40:9b:e4:a5:
                    3b:ca:38:15:cc:28:b7:96:0b:f9:b2:53:30:32:ae:
                    d0:22:54:e9:2a:67:58:19:50:aa:7e:46:7e:cf:7c:
                    25:db:e7:34:86:0d:f7:69:4d:84:ed:fd:0e:ac:ea:
                    20:63:a3:fd:9f:e5:a8:00:0d:cf:fe:78:8d:ee:50:
                    3b:2a:5d:c2:aa:da:01:a5:ba:64:59:38:7a:a0:89:
                    63:d8:c3:3a:43:c2:93:5c:2e:72:08:1f:14:fd:09:
                    f1:f0:17:b7:4f:85:17:01:1d:3c:30:c2:d7:0c:f4:
                    0b:26:24:20:a5:14:1c:3c:65:a3:32:b8:69:87:d2:
                    56:5a:50:9a:76:66:09:07:63:48:1d:d1:18:cd:99:
                    22:1f:08:64:76:f6:60:5d:fc:c7:ad:e8:65:d3:a7:
                    43:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0A:02:5B:37:5E:60:3E:91:A5:68:97:E4:B3:3B:1D:5E:40:9F:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/314d290e-501d-3552-a856-2dd6c3c44348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.126.0/23
                  23.237.130.0/23
                  23.237.136.0-23.237.138.255
                  23.237.191.0/24
                  23.237.218.0/24
                  23.237.244.0/24
                  23.237.250.0/24
                  50.7.0.0/24
                  50.7.8.0-50.7.13.255
                  50.7.15.0-50.7.16.255
                  50.7.18.0-50.7.21.255
                  66.90.124.0/24
                  192.240.122.0/24
                  198.255.16.0/24
                  216.227.131.0/24
                  216.227.142.0-216.227.157.255
                  216.227.160.0-216.227.165.255
                  216.227.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:7c:3a:05:9d:b2:dc:8d:72:bd:dd:26:98:fb:2d:9c:ea:94:
         9e:d3:df:a9:73:57:f6:98:bb:42:88:29:25:1e:63:cb:10:04:
         6a:ee:52:ea:fb:84:21:3e:21:24:0f:7f:5b:bc:12:86:2f:ca:
         7c:85:8a:bb:19:e0:f6:fd:00:4d:0f:79:37:dc:96:66:23:49:
         23:2a:1a:9e:8a:45:59:3c:9c:17:96:67:fa:7a:b6:63:d3:ff:
         ac:a4:12:40:b8:10:5c:5f:3c:59:20:b1:b2:63:f6:64:01:99:
         35:78:79:af:d9:0f:e2:5e:a9:52:78:f6:3d:b6:16:9d:ea:cf:
         9a:73:59:1e:15:d0:7e:ca:67:9c:fe:62:ea:92:1b:20:32:db:
         e2:45:90:ad:01:73:ef:b8:a1:b2:c2:8f:a0:4a:d7:3b:f8:86:
         e5:cb:4a:02:d4:f6:46:14:32:05:d7:1d:0b:15:8e:a1:34:6a:
         e1:ff:5a:48:52:27:de:b7:4c:34:8c:6b:4c:3c:dd:d6:9e:9e:
         c4:81:41:b9:77:38:cd:2c:af:63:4d:2e:90:ce:fe:90:f2:9a:
         e6:22:32:c5:fd:b3:83:73:b3:58:a1:a7:05:11:9d:9e:a7:15:
         88:b5:7b:31:e3:fa:fe:52:5a:ff:cb:ee:b9:02:ba:34:a8:93:
         8e:4e:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:12 2024 by rpki-client on console-ams.rpki-client.org