Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/666a75d0-0f92-3eb4-86f6-a34bdb124993.roa
File:                     666a75d0-0f92-3eb4-86f6-a34bdb124993.roa (raw, json)
Hash identifier:          KJrqJynBo2Jg+JE0S2kjlJHOEDsf+LhI2fwO9ec50Yo=
Subject key identifier:   D0:35:1D:62:C2:80:B8:A9:C7:68:96:6D:33:41:D6:D2:71:A5:35:1E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DC20A2741111C81576EA5180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/666a75d0-0f92-3eb4-86f6-a34bdb124993.roa
Signing time:             Mon 13 May 2024 14:09:40 +0000
ROA not before:           Mon 13 May 2024 14:09:40 +0000
ROA not after:            Sun 11 Aug 2024 14:09:40 +0000
asID:                     45758
IP address blocks:        23.42.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dc:20:a2:74:11:11:c8:15:76:ea:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 13 14:09:40 2024 GMT
            Not After : Aug 11 14:09:40 2024 GMT
        Subject: CN=2cca6806-92e6-4879-a1a1-cf9b770ca956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1d:6a:33:09:01:8e:4f:28:2a:2d:60:48:e3:
                    a9:0f:4d:2c:31:b4:ec:e7:ea:fc:a3:17:0c:1c:6d:
                    3a:12:7d:ab:f9:7a:1a:d5:eb:d3:86:ef:bf:f4:ef:
                    3c:42:1b:3b:9e:bc:49:15:92:05:a9:00:0c:0c:3a:
                    8c:60:54:11:d8:dd:64:be:ab:6b:58:ef:07:80:2c:
                    22:2d:62:07:d4:11:31:c1:3b:5d:4a:83:df:b9:b4:
                    ad:ce:5c:fc:6b:45:8d:d4:d1:b4:26:d5:12:98:83:
                    6c:db:0f:4e:78:45:0f:69:79:99:9e:a4:1b:4e:88:
                    26:1e:3f:a9:45:6d:94:a5:8c:31:d8:e6:a2:f8:21:
                    fb:2f:35:71:14:7f:d7:45:d7:1b:a9:4b:68:10:90:
                    05:04:21:30:d8:5d:8a:50:12:a1:39:10:fd:59:6a:
                    4e:b0:a6:59:fb:bd:71:72:ef:49:4c:0b:89:c6:73:
                    33:7a:28:aa:e3:fd:d9:6a:0a:87:6a:e0:12:c9:ff:
                    fa:0e:01:8c:72:d7:e5:a1:45:2d:e0:bc:02:ff:e7:
                    98:36:58:d5:f6:fa:8c:d8:a1:5d:9f:9c:31:82:66:
                    ec:a3:cd:cf:a7:00:d6:56:bf:d9:07:85:7a:32:e8:
                    80:c2:a5:f0:f9:88:c0:e7:d9:aa:1b:7d:2f:ef:88:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:35:1D:62:C2:80:B8:A9:C7:68:96:6D:33:41:D6:D2:71:A5:35:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/666a75d0-0f92-3eb4-86f6-a34bdb124993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.42.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:9c:f7:d9:52:f7:d2:e9:73:7a:3f:46:38:04:b8:81:6f:75:
         8c:61:72:65:dd:b0:d9:31:2a:10:9f:9b:b6:91:92:69:21:e3:
         8d:7e:25:00:23:e1:38:a6:ce:61:97:86:52:62:96:36:a9:28:
         52:52:62:50:4b:7d:cf:99:ca:57:f6:96:26:10:2c:49:0c:cd:
         46:08:0a:f8:b8:b4:28:2c:4f:8f:25:26:35:31:d5:22:e2:7e:
         9b:58:a0:f4:be:56:c1:2a:14:9d:7f:67:93:aa:18:c0:7d:28:
         dc:9b:b4:1f:be:7d:dc:11:20:cb:7a:1e:91:51:48:8b:e9:24:
         f6:b9:aa:3c:23:ff:7b:94:92:f0:a8:cd:a9:e6:ee:fe:27:48:
         9f:fc:f7:8e:4d:46:ab:24:bb:78:cf:4d:39:e2:66:23:90:d9:
         8b:73:3b:be:a9:52:da:74:07:25:57:0f:e5:34:a0:82:b7:a4:
         c9:c3:d8:b8:ed:42:bc:4a:f1:bb:16:1f:b2:32:4f:e1:7f:8f:
         35:67:1c:11:76:30:90:9f:a1:f3:8c:5a:8f:e4:40:5c:e5:5d:
         a9:59:31:77:37:05:8c:fa:57:5d:4a:a2:78:c8:5e:88:23:3c:
         3f:73:70:50:bc:c9:74:cc:3c:b0:c3:9c:77:02:11:88:3e:04:
         9c:44:a8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:59:04 2024 by rpki-client on console-fra.rpki-client.org