Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/216a9e88-1e1f-3ff4-a301-3fab09f9ab8b.roa
File:                     216a9e88-1e1f-3ff4-a301-3fab09f9ab8b.roa (raw, json)
Hash identifier:          +n3lmUhe2vBOEww7aHropuGmTdaVxRyeQbjrMat/ZtQ=
Subject key identifier:   1E:20:66:D7:6A:2B:1C:C6:66:D2:02:F2:29:C0:46:17:21:A6:76:8B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A441DC64E9A0301DEB92FD80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/216a9e88-1e1f-3ff4-a301-3fab09f9ab8b.roa
Signing time:             Tue 23 Apr 2024 13:51:21 +0000
ROA not before:           Tue 23 Apr 2024 13:51:21 +0000
ROA not after:            Mon 22 Jul 2024 13:51:21 +0000
asID:                     16625
IP address blocks:        23.5.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:41:dc:64:e9:a0:30:1d:eb:92:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 23 13:51:21 2024 GMT
            Not After : Jul 22 13:51:21 2024 GMT
        Subject: CN=b09e6c54-f2f2-48b7-9340-efa5bca38e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:a8:25:9c:3e:bb:1e:3e:4a:5c:07:b9:68:
                    b0:5f:92:19:35:a7:2f:89:d1:c3:c8:80:c5:1f:be:
                    a4:11:c7:92:37:cf:0c:fc:a8:8c:0e:07:10:48:a9:
                    06:e6:bb:e0:27:02:09:d0:78:ab:d0:29:cc:1a:ff:
                    1d:54:b7:df:eb:40:f9:53:2f:3d:90:da:3c:a3:51:
                    a5:37:dd:4d:43:cd:7b:52:be:f2:de:13:87:2c:7e:
                    cf:af:46:05:38:4a:b5:f2:fa:1f:96:9e:4c:1c:b3:
                    b4:cb:4e:89:75:f2:c4:1c:65:27:be:01:e1:24:71:
                    c4:99:08:32:b0:63:6f:b0:ca:39:f5:8d:1b:60:3b:
                    b0:62:f9:40:f0:9f:b5:50:14:4e:7a:b9:ab:54:88:
                    28:a3:46:d1:d5:07:50:59:14:70:41:52:a7:0c:7f:
                    e3:9d:bb:87:44:de:16:0d:32:bb:0a:28:d2:bc:37:
                    6f:3b:f2:ea:f3:81:00:b1:00:3c:8e:07:a1:9c:6f:
                    7a:f7:84:d3:99:ed:db:1c:63:9d:71:a5:e9:d4:ca:
                    22:81:fc:63:73:21:df:d0:e9:92:28:c0:68:62:6c:
                    1f:0e:07:d6:2f:a2:11:8a:09:e8:bb:cf:49:9a:dc:
                    ca:f3:fa:38:25:ce:71:80:55:a1:53:0b:43:14:58:
                    87:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:20:66:D7:6A:2B:1C:C6:66:D2:02:F2:29:C0:46:17:21:A6:76:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/216a9e88-1e1f-3ff4-a301-3fab09f9ab8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.5.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:87:64:d6:17:0a:8b:16:02:3e:7b:a0:93:c9:e9:63:8f:15:
         45:45:d4:09:e6:4f:b1:7a:e5:1e:ed:e1:81:6a:a8:1d:95:3e:
         69:5d:e1:e6:da:93:e3:5c:f6:8d:40:2c:35:3e:f5:ca:d0:a4:
         1b:4c:35:3d:85:c3:57:9f:c8:58:46:61:95:14:66:f5:6a:aa:
         e7:00:0f:b2:7d:3e:15:9e:a1:4c:f7:08:fa:8a:73:ea:22:83:
         f2:dc:50:fe:ad:ae:72:45:e2:d3:1e:2d:30:16:21:d8:a5:7a:
         79:1b:ee:fe:bd:5d:75:b3:31:bc:c1:6d:43:58:c5:d4:3a:7b:
         0d:08:1f:9f:2d:36:e5:e8:2b:21:2f:f6:11:cb:fb:88:0a:b9:
         26:00:1f:77:a7:a3:a8:56:95:ad:f7:81:08:f4:a2:c7:de:19:
         4f:8e:fa:36:f7:04:fb:be:db:e1:9d:6f:9c:cd:8e:19:0c:f2:
         33:64:9f:e3:cc:85:3a:17:72:81:b0:ea:a9:60:7e:86:aa:e6:
         af:55:10:53:e1:57:65:18:50:62:c0:f5:50:b6:82:eb:d0:0e:
         50:a6:70:83:63:d7:b8:1f:c2:b7:f6:2c:55:98:50:dd:7b:85:
         3e:20:36:51:9d:0d:8b:a8:7f:c7:f5:70:07:4b:11:06:d0:16:
         0c:f9:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:01 2024 by rpki-client on console-ams.rpki-client.org