Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c834a061-9bb2-3d89-a4c4-ad8138352952.roa
File:                     c834a061-9bb2-3d89-a4c4-ad8138352952.roa (raw, json)
Hash identifier:          bcQPDJUzA+pAvt5eSkZi3Dp754APF8607zaPCMimnP0=
Subject key identifier:   5B:77:2C:47:B1:7C:5D:66:12:40:E0:09:32:3F:ED:89:9B:20:9A:0E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DBDD382AEBF589AECBEB6B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c834a061-9bb2-3d89-a4c4-ad8138352952.roa
Signing time:             Mon 13 May 2024 11:53:50 +0000
ROA not before:           Mon 13 May 2024 11:53:50 +0000
ROA not after:            Sun 11 Aug 2024 11:53:50 +0000
asID:                     16625
IP address blocks:        23.40.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:dd:38:2a:eb:f5:89:ae:cb:eb:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 13 11:53:50 2024 GMT
            Not After : Aug 11 11:53:50 2024 GMT
        Subject: CN=a88f0d47-c849-40b7-aae2-cc061309e1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:33:fe:63:27:91:c2:7b:49:78:1f:24:31:d3:
                    d8:5f:fe:c8:a2:ec:e4:f6:2c:9b:2c:e0:aa:72:1f:
                    6b:3d:b4:51:0f:82:4a:ed:93:31:1e:3a:cb:cf:63:
                    a3:36:26:3b:88:c7:aa:04:8e:b7:06:1e:d6:89:3a:
                    31:44:b6:a9:45:db:9c:48:83:7e:54:a4:22:b4:a7:
                    dd:0e:2d:82:9d:8d:79:f5:e1:77:b7:ff:ba:c0:15:
                    64:a3:55:4e:02:9c:68:eb:0e:72:64:53:85:96:03:
                    6c:a0:8b:60:b2:db:38:ee:82:f3:0c:c4:cd:b6:4e:
                    56:a7:60:7a:69:48:69:e4:7a:4b:8f:80:ff:ae:55:
                    cd:08:ee:38:01:56:b7:de:03:70:2a:cd:17:0f:ae:
                    d7:94:06:a3:19:c3:bc:ac:7b:e5:e2:d7:6a:90:de:
                    42:e8:42:c7:57:02:92:7c:de:51:53:94:98:76:98:
                    0d:b1:f8:70:6d:7f:3a:e9:ab:d9:27:17:f5:49:80:
                    5e:dd:b5:7f:0d:a7:18:69:0c:b6:ff:a4:fd:9b:78:
                    b9:c0:8b:4b:ad:1a:a6:19:7c:e3:46:da:08:2f:75:
                    23:53:44:c5:77:7a:14:56:3a:30:2f:50:2e:00:df:
                    a7:af:e8:cf:11:ac:08:2b:9f:16:ee:88:44:59:bd:
                    58:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:77:2C:47:B1:7C:5D:66:12:40:E0:09:32:3F:ED:89:9B:20:9A:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c834a061-9bb2-3d89-a4c4-ad8138352952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.40.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:78:7d:82:c0:97:d3:9b:fe:be:1d:ad:95:cd:64:16:53:70:
         d6:3f:17:4d:b6:33:33:27:a3:26:cd:0f:73:33:13:dc:ad:e9:
         55:66:f5:14:fe:a8:bf:34:b7:dc:2f:b5:b9:c9:cf:e9:5a:eb:
         43:65:01:ce:93:d9:f7:30:48:20:4a:e6:cd:6f:cb:66:55:5d:
         b7:da:14:1b:2c:ed:df:a5:b8:2b:40:ed:cb:17:df:d4:cd:e5:
         cd:8f:4a:72:2e:cc:71:3c:d1:bd:74:e9:59:5a:95:c7:86:7a:
         f2:af:52:e2:05:52:46:ca:50:aa:5d:f4:7d:d1:a3:89:8e:d8:
         ea:bf:39:6b:ad:eb:22:18:4a:bb:65:55:a1:2c:a9:63:51:a0:
         d3:ab:7f:6e:b9:cc:8e:fc:95:84:57:bd:cd:94:1d:cc:38:39:
         5b:b6:7d:23:3a:67:ad:95:cd:4b:b5:61:99:7c:0d:20:38:e4:
         3e:ae:e2:15:85:f0:87:59:87:56:7c:89:61:f2:de:c1:51:0b:
         0f:d1:40:a2:eb:e0:92:0c:8f:49:eb:29:5f:f6:39:36:80:73:
         ab:bd:64:b0:8c:22:ba:64:38:e7:5b:6e:80:90:00:45:f6:86:
         9d:98:da:88:5b:8d:d6:d1:56:98:fd:6a:cb:93:fe:9b:b4:ad:
         d1:17:48:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:40:51 2024 by rpki-client on console-ams.rpki-client.org