Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b35b5a2-445d-3b48-b074-a22ac6d2825b.roa
File:                     8b35b5a2-445d-3b48-b074-a22ac6d2825b.roa (raw, json)
Hash identifier:          FXvTpmcAeI9fiAv4m+LcTuQhvv/hXJv7NleOSWoc7dY=
Subject key identifier:   7F:B5:55:1A:23:5D:84:5C:1E:56:B2:E7:8C:BE:3A:F9:7D:4E:4A:9A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845E6DEC86DD8633E85C8C050F0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b35b5a2-445d-3b48-b074-a22ac6d2825b.roa
Signing time:             Fri 17 May 2024 10:30:53 +0000
ROA not before:           Fri 17 May 2024 10:30:53 +0000
ROA not after:            Thu 15 Aug 2024 10:30:53 +0000
asID:                     16625
IP address blocks:        23.53.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e6:de:c8:6d:d8:63:3e:85:c8:c0:50:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 17 10:30:53 2024 GMT
            Not After : Aug 15 10:30:53 2024 GMT
        Subject: CN=f8d74e30-efe8-45ca-ae4b-6c6ab9de144a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cf:ae:a3:e4:9c:fb:cb:56:43:d0:c4:3a:cb:
                    8b:63:6d:d7:7b:a4:1a:f3:bc:42:1f:11:6f:71:e3:
                    e2:64:00:78:6a:2c:9b:4e:e3:b1:f3:e6:63:b4:ea:
                    3d:b3:54:07:89:76:9e:d1:11:c9:19:f7:2d:d9:e6:
                    de:c2:da:07:1d:fc:c0:e9:e8:34:83:ff:2a:e8:9d:
                    c2:1f:d8:77:7c:95:7d:68:0b:5f:6a:43:0e:25:cc:
                    7c:03:ae:ed:2b:d4:be:82:0d:ed:c5:32:30:89:29:
                    e6:38:e9:9a:10:3d:da:fb:a5:9e:19:8b:bc:a1:65:
                    c0:73:0d:0f:1a:91:dd:36:79:c0:f4:8b:a4:37:fc:
                    a4:d2:b6:6c:3c:0e:49:5f:66:6f:22:c0:1d:be:c1:
                    b9:04:c8:c5:d0:df:79:f8:8e:70:b7:e9:00:56:af:
                    3b:a4:c8:99:bf:60:fb:14:cf:f5:7c:fc:21:fa:e5:
                    9d:da:ba:05:e9:b5:98:5c:74:d4:79:5c:4a:38:3b:
                    d2:e5:e8:e4:d4:85:ac:98:e8:80:44:93:8d:50:fa:
                    64:fe:f8:cf:48:99:72:2b:e3:9a:65:f7:6b:9f:72:
                    fa:9e:de:9f:9e:83:e7:05:a3:48:6c:c0:8c:82:e3:
                    ee:14:16:0d:af:d3:60:e3:60:cf:4c:27:22:9d:ba:
                    05:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B5:55:1A:23:5D:84:5C:1E:56:B2:E7:8C:BE:3A:F9:7D:4E:4A:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b35b5a2-445d-3b48-b074-a22ac6d2825b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.53.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:4c:5a:01:c7:a5:c3:e6:cd:24:18:d8:58:65:8f:36:10:7d:
         ce:c7:57:38:08:bf:b9:82:69:e7:31:7a:c5:af:56:cd:a0:c6:
         77:e6:94:b9:2a:be:7d:4c:09:29:7d:b7:38:4d:fd:eb:e3:26:
         82:71:13:73:3e:2b:d1:94:22:78:db:ed:c9:fb:91:3d:f9:78:
         cf:6c:57:dd:ff:66:f3:19:b2:51:9e:57:28:ec:4c:de:e5:3c:
         a3:58:d4:53:de:b3:90:5b:6d:de:fe:92:cf:80:37:e5:0b:e9:
         52:b4:46:19:1d:34:91:bf:ed:3d:90:e5:45:02:01:5f:ea:61:
         9f:84:ad:79:74:8d:17:d3:47:65:6c:e9:1b:7b:e5:e2:04:9a:
         1b:e0:6f:19:6f:9f:48:f3:db:29:e4:88:ec:cc:4f:05:38:62:
         b2:24:95:bf:63:41:89:dc:35:e8:64:a9:8e:f9:0c:06:34:f9:
         52:c5:5c:cd:cc:d9:13:01:93:be:fa:9d:90:f5:fa:9a:83:34:
         dc:5c:df:57:2f:a6:98:40:8a:e2:36:20:ae:18:37:c3:67:12:
         87:b1:95:4f:54:66:49:57:5d:19:7a:1a:39:65:ee:c9:6f:54:
         53:fc:bd:10:62:69:c7:4b:d5:af:e0:38:3f:2e:1d:ee:c6:0e:
         49:93:c6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:39:10 2024 by rpki-client on console-fra.rpki-client.org