Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1c8cc20-610b-3994-9846-534c08dc829f.roa
File:                     d1c8cc20-610b-3994-9846-534c08dc829f.roa (raw, json)
Hash identifier:          VGGTtvExu7JF4JM5b2da3cdf+XTf++1Fv4/tELYJNVU=
Subject key identifier:   CE:95:6A:14:2E:9B:21:0A:3E:CC:DA:52:C8:7A:08:6B:15:6D:68:4C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DE4F993A753B686FAC776A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1c8cc20-610b-3994-9846-534c08dc829f.roa
Signing time:             Tue 14 May 2024 08:55:55 +0000
ROA not before:           Tue 14 May 2024 08:55:55 +0000
ROA not after:            Mon 12 Aug 2024 08:55:55 +0000
asID:                     16625
IP address blocks:        23.43.168.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:4f:99:3a:75:3b:68:6f:ac:77:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 08:55:55 2024 GMT
            Not After : Aug 12 08:55:55 2024 GMT
        Subject: CN=d088e7b5-8dbb-408d-8498-a4b9c9d30cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ed:82:d4:d7:4b:e6:a8:d9:c3:3f:cf:f0:ee:
                    00:f0:11:24:be:a7:3f:dc:88:c4:01:be:b8:6b:67:
                    27:a4:aa:fb:c1:99:b0:9c:b7:ac:bc:94:a7:ec:fc:
                    fb:35:73:5c:58:a2:9a:85:9f:11:c4:2c:5f:b6:cb:
                    b6:c4:20:7a:b8:61:d9:ff:db:cf:9d:02:ba:50:93:
                    aa:d1:12:1f:00:27:db:9e:1b:d8:0c:35:97:a2:1c:
                    30:f5:4e:90:93:be:5d:5b:59:a3:f3:aa:a2:22:5e:
                    53:df:0a:3e:d1:c3:c0:12:f1:2e:98:00:11:f4:e4:
                    57:50:ce:b9:31:56:a9:ca:53:6b:95:8d:35:a6:c8:
                    45:82:52:0e:c8:f4:b4:83:39:05:af:b8:5e:3e:b7:
                    c6:88:16:a1:5c:28:f0:cd:e3:d6:f7:f2:70:32:e0:
                    26:93:1a:54:7a:18:54:70:00:90:a6:58:5c:e7:18:
                    e1:10:57:f7:63:b4:d7:fa:8c:86:65:17:89:f9:e8:
                    9f:d8:da:77:92:3d:02:1d:d6:db:42:4b:11:27:72:
                    8f:fa:92:1c:81:2e:1d:b8:2c:f0:83:ca:c5:32:e3:
                    26:b4:2d:aa:01:ab:a1:68:6c:e2:ce:85:c1:64:d2:
                    29:e0:08:dc:05:67:33:85:04:e2:a4:3f:ae:e5:87:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:95:6A:14:2E:9B:21:0A:3E:CC:DA:52:C8:7A:08:6B:15:6D:68:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1c8cc20-610b-3994-9846-534c08dc829f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:01:46:41:3c:a3:5d:c5:4b:a1:cd:a2:c1:75:cc:53:ba:93:
         7b:8d:74:dd:ec:86:9c:1c:82:d4:d0:06:5e:a2:94:37:a2:a6:
         f2:a4:b8:d3:7d:d7:66:7b:b3:a5:16:dd:ed:c0:cf:fc:59:aa:
         34:8d:67:9b:8a:0e:53:15:24:a3:af:4d:37:e2:5c:f5:de:f6:
         07:88:27:86:db:6a:9c:71:50:5b:96:9b:9f:81:8b:f4:e1:01:
         b0:35:92:c7:be:df:75:5d:ff:9f:97:d6:b8:b5:20:94:45:84:
         c1:30:9a:3b:86:e5:ff:3a:c6:c3:d9:72:2d:a6:85:cb:e2:b0:
         6b:a0:a0:ab:f1:5c:6c:aa:98:9b:82:54:cf:19:17:83:2e:2f:
         ef:2b:45:73:f5:72:a9:18:d6:7e:ab:f9:9f:31:f1:b0:03:99:
         15:4b:86:94:ba:db:46:41:55:fe:21:ce:5b:54:ab:46:62:28:
         38:94:50:ac:94:e6:25:36:3f:a2:ae:77:39:82:97:e6:42:db:
         6a:ad:6a:23:78:4a:cf:67:af:7d:f1:cc:20:6a:c5:58:6e:16:
         1f:f3:2e:27:53:41:f9:bf:16:6b:8b:86:ce:2c:7e:d0:54:e7:
         24:e3:5d:4c:ef:2a:23:85:c6:10:68:bb:52:0b:a8:e9:1e:29:
         51:df:77:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:39:21 2024 by rpki-client on console-fra.rpki-client.org