Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1a210b9-aa4e-3b8a-8964-e3996918dea5.roa
File:                     b1a210b9-aa4e-3b8a-8964-e3996918dea5.roa (raw, json)
Hash identifier:          iVzW83Dhf9cqqCPPhjuZ+HefIkKeQXivI0oXzC8ofHw=
Subject key identifier:   68:B2:AE:84:E9:B8:58:F1:F2:60:8F:8C:D5:11:C7:E4:5C:A6:6A:B9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845BFE4C0FBC2B2ADB4670D8000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1a210b9-aa4e-3b8a-8964-e3996918dea5.roa
Signing time:             Fri 03 May 2024 11:26:23 +0000
ROA not before:           Fri 03 May 2024 11:26:23 +0000
ROA not after:            Thu 01 Aug 2024 11:26:23 +0000
asID:                     20940
IP address blocks:        23.51.20.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bf:e4:c0:fb:c2:b2:ad:b4:67:0d:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  3 11:26:23 2024 GMT
            Not After : Aug  1 11:26:23 2024 GMT
        Subject: CN=21711fdc-dc54-44d3-ad22-6e40abc8ec8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:4a:a8:1a:e7:f4:1f:51:a0:6f:8b:98:f9:
                    73:36:69:4f:2d:4f:a6:3f:58:91:ba:f9:57:74:f1:
                    49:95:e4:ab:0d:6d:db:8f:b2:1b:90:91:1b:e6:11:
                    7e:5f:e0:c1:07:d0:cc:bf:77:01:61:b5:49:4f:ca:
                    02:80:a2:8a:bf:b4:91:b8:46:18:2d:d6:08:db:09:
                    a7:9e:d2:cc:0d:66:76:07:a4:4d:50:28:18:99:e1:
                    93:cb:aa:6c:6f:e8:35:d5:2e:7f:2e:cc:7f:a6:40:
                    82:d7:2b:4d:db:16:0f:a6:d2:6b:66:f4:8f:fc:f2:
                    11:60:d7:f2:19:5a:d6:1a:73:55:45:82:ac:06:b3:
                    86:9e:5c:d4:43:4c:b3:c0:03:2f:88:fe:3a:a9:1f:
                    27:37:c8:1a:3c:4b:03:94:df:e8:7c:74:fc:da:e6:
                    80:21:7f:ba:7c:bc:f5:d6:08:1a:7d:ec:17:1d:9b:
                    96:ed:81:9a:36:77:0a:42:15:11:fb:4d:75:47:84:
                    f7:32:bf:b7:cb:02:73:59:c3:21:8f:0f:70:37:82:
                    b9:8a:8c:23:28:ae:48:fb:4b:14:ff:3b:06:5d:ac:
                    ab:1a:1e:33:49:78:87:1e:2c:12:be:56:64:8a:ca:
                    1b:3f:97:3d:a6:03:ba:06:4a:96:53:e0:f5:00:07:
                    fd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B2:AE:84:E9:B8:58:F1:F2:60:8F:8C:D5:11:C7:E4:5C:A6:6A:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1a210b9-aa4e-3b8a-8964-e3996918dea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.51.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:dc:c3:cb:6c:52:f8:a5:d4:ab:a9:ef:e0:d6:39:51:71:ae:
         71:f5:39:68:33:14:7e:c5:6b:55:eb:89:90:8f:84:6c:c5:42:
         96:07:e8:1c:16:3e:4e:a8:c4:b4:a0:a0:b8:2d:b7:2c:6e:a7:
         3c:8c:7d:48:8b:9c:b6:56:33:7d:3e:6f:a6:bb:fb:13:de:72:
         59:be:1c:c4:d7:a7:f7:04:01:80:37:80:76:b7:d0:15:a2:25:
         a0:9b:d9:ff:a4:e2:47:39:0c:8d:be:bb:07:3d:cd:84:7b:10:
         df:eb:bd:68:8a:4f:ab:1f:28:19:61:76:9f:2f:12:d2:cd:1b:
         6f:05:38:0e:04:40:dc:03:de:8e:48:fa:5c:db:32:7c:d8:0e:
         3d:b9:b9:39:ae:4d:0e:9f:9a:e6:bb:c8:dd:e0:dc:a9:d8:f7:
         85:ab:20:1b:dc:ed:a2:bc:92:a3:53:f4:d8:53:ea:6e:dd:50:
         82:91:4c:75:32:14:48:5c:be:2f:df:ac:1c:e1:aa:59:98:f3:
         79:05:be:9e:68:bc:5f:87:b7:cb:6c:77:18:cf:b8:90:a0:d2:
         57:e1:d2:a9:7e:cc:7c:bf:86:5c:19:06:b8:5e:cc:a9:b4:4c:
         49:4b:7f:e7:59:25:02:b8:d9:8e:94:02:40:47:09:b1:5d:52:
         ba:7f:be:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:51:55 2024 by rpki-client on console-fra.rpki-client.org