Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3cd6ac5-4e08-3fe3-a0f8-49942ce9f661.roa
File:                     c3cd6ac5-4e08-3fe3-a0f8-49942ce9f661.roa (raw, json)
Hash identifier:          tEvkJAXOFMDvWNMcpiBfipDmPbvIKmXF9eRNTjpHVpk=
Subject key identifier:   7A:03:7C:5D:8F:CA:07:53:97:11:AB:85:90:69:8D:46:5C:E2:93:A8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845D077FF00179EC6B76AC15A20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3cd6ac5-4e08-3fe3-a0f8-49942ce9f661.roa
Signing time:             Thu 09 May 2024 09:55:59 +0000
ROA not before:           Thu 09 May 2024 09:55:59 +0000
ROA not after:            Wed 07 Aug 2024 09:55:59 +0000
asID:                     16625
IP address blocks:        23.33.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d0:77:ff:00:17:9e:c6:b7:6a:c1:5a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  9 09:55:59 2024 GMT
            Not After : Aug  7 09:55:59 2024 GMT
        Subject: CN=45b916b8-bafe-4977-8e59-d8255b31e861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:b3:53:d9:fd:10:02:43:7e:e9:09:71:80:
                    65:3b:b9:cd:77:c3:27:31:e9:c5:34:ba:f9:d2:63:
                    22:86:81:22:c5:3c:e6:b8:5c:ad:0c:48:c3:fa:e6:
                    d8:9b:8d:13:b6:c2:64:a8:90:4a:81:4b:e5:17:66:
                    67:fd:ba:97:91:38:54:3e:59:d5:b6:12:3d:dd:51:
                    14:b3:19:91:86:69:25:ee:16:d8:de:69:ec:0a:c6:
                    30:d3:19:9b:66:9f:4f:82:fa:bf:c0:25:32:52:57:
                    b7:c6:22:58:40:ff:84:03:d2:dc:02:a2:21:b3:23:
                    ad:f5:ae:d8:bb:88:12:6c:1f:72:fa:31:09:37:ea:
                    cd:38:2c:ea:62:f6:56:cb:17:53:b6:47:13:58:2b:
                    64:0c:1e:c0:5e:1a:f2:2a:88:e5:b2:15:2d:c5:f3:
                    92:94:39:86:08:89:4a:01:02:88:1d:d7:5e:0f:9c:
                    89:2a:98:fd:96:2a:fc:66:58:ed:6d:7f:54:00:78:
                    4f:8c:56:cb:4c:94:43:7d:e5:4a:34:65:66:48:30:
                    63:d9:5b:2b:db:e5:32:01:a1:d1:e9:c7:c0:bf:5f:
                    3f:e5:65:57:e3:f4:63:d8:f3:3a:88:75:25:1c:96:
                    d7:cb:45:44:3c:29:b4:e3:61:83:78:2d:d0:7f:eb:
                    60:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:03:7C:5D:8F:CA:07:53:97:11:AB:85:90:69:8D:46:5C:E2:93:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3cd6ac5-4e08-3fe3-a0f8-49942ce9f661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.33.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:3f:81:15:9f:ef:8e:80:7c:ed:6a:c2:f2:20:09:94:69:0a:
         a6:ef:b6:0d:fe:e5:ea:9c:3d:0b:de:2c:cf:a0:b5:fd:48:0e:
         ea:17:af:c3:53:d8:65:0c:83:a4:b1:64:40:b4:0a:1c:5b:27:
         27:c9:a5:4f:af:72:c6:2b:39:0f:c7:a5:6f:2c:a0:5a:3d:8c:
         f0:32:6e:cd:6b:63:87:ee:16:1a:15:d6:44:c3:74:bc:f2:50:
         e4:3b:25:37:32:93:71:e3:e0:49:fe:9d:d4:0b:3b:1d:ac:ff:
         36:5b:95:41:f9:6a:34:03:7c:3e:91:36:9e:4b:99:59:5d:de:
         2e:03:85:c7:d9:ef:59:ed:c0:33:a0:cc:17:b5:3e:fb:99:dc:
         93:38:58:ab:e1:b7:8c:41:cb:28:b7:8c:95:6c:7c:63:d7:63:
         4e:74:c2:69:99:5f:36:5a:08:12:97:c8:40:dd:a6:7d:ce:99:
         73:ba:90:80:0d:cb:3e:8b:26:bb:15:01:18:83:85:29:e6:ae:
         42:b1:c8:ca:86:cf:d3:35:ac:26:e1:af:9f:17:09:c8:4e:58:
         6b:02:97:5d:96:f8:fc:9c:7a:5b:6d:81:6f:a1:53:7e:66:46:
         c8:44:9b:8d:fd:15:f0:61:a2:de:b6:93:6f:7a:8b:72:04:d5:
         fd:9b:b6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 05:14:14 2024 by rpki-client on console-ams.rpki-client.org