Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db36824b-b70c-3e66-a027-c5ea7a6a6b14.roa
File:                     db36824b-b70c-3e66-a027-c5ea7a6a6b14.roa (raw, json)
Hash identifier:          8Nr/PQGYaKyuksHX4KRsNhhzmqTv/tXZMPFyYaVVD4Q=
Subject key identifier:   D7:54:83:58:17:26:AA:71:7E:F8:6B:8B:9F:56:C0:E4:BE:0E:9F:7A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A6B5190CEB3D3EC87D845580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db36824b-b70c-3e66-a027-c5ea7a6a6b14.roa
Signing time:             Wed 24 Apr 2024 10:55:09 +0000
ROA not before:           Wed 24 Apr 2024 10:55:09 +0000
ROA not after:            Tue 23 Jul 2024 10:55:09 +0000
asID:                     16625
IP address blocks:        23.15.136.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:b5:19:0c:eb:3d:3e:c8:7d:84:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 24 10:55:09 2024 GMT
            Not After : Jul 23 10:55:09 2024 GMT
        Subject: CN=a5146e27-20f2-475a-80ee-1f8b2dd36109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c4:da:79:c6:62:45:86:3d:19:63:d3:bd:89:
                    c9:0b:60:1c:0d:d1:f8:18:86:0a:94:3f:f8:a3:8a:
                    d6:2b:a5:a1:c2:5e:29:b7:31:33:ad:15:25:1f:bf:
                    6d:a2:f0:2d:8f:46:5b:5d:3f:f4:88:6e:28:88:5f:
                    0c:30:da:66:66:27:d2:59:40:e4:e7:38:e7:77:42:
                    c7:31:56:85:f5:5a:db:e7:34:1f:90:c6:a6:d8:29:
                    02:33:22:9e:72:f4:3a:b5:17:02:bb:aa:e9:46:e1:
                    cb:38:c7:5d:99:ba:8c:27:34:4c:78:99:b7:9e:d8:
                    93:01:cf:6e:09:69:a4:7a:f8:a1:fa:7c:22:02:08:
                    a9:2b:20:e9:7c:8f:0b:88:2a:50:9e:8d:af:2e:4c:
                    15:13:08:fc:21:36:f1:9d:6e:1c:5d:f9:38:64:09:
                    78:b1:1a:40:b1:94:7e:10:3a:b3:24:a4:5e:7b:78:
                    ac:d8:c2:14:04:ee:e8:03:d6:2d:1d:25:c4:27:65:
                    9c:aa:ba:bc:60:6c:b3:74:50:ef:80:b3:54:d7:09:
                    bc:ac:0d:55:d8:af:b8:5f:4e:47:11:bf:c6:5b:7a:
                    da:06:e8:65:bf:e5:91:be:b8:ae:7d:c6:20:e0:d5:
                    53:63:ad:09:7b:46:9b:27:d6:2e:07:3c:17:f2:b4:
                    1a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:54:83:58:17:26:AA:71:7E:F8:6B:8B:9F:56:C0:E4:BE:0E:9F:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db36824b-b70c-3e66-a027-c5ea7a6a6b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.15.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:dd:ad:6e:fd:b6:3d:e0:e2:f3:3b:d3:8d:c6:dd:65:72:c6:
         55:7c:f6:81:4c:5a:85:7e:5f:54:27:3e:a1:29:3e:64:33:cf:
         88:da:35:a6:20:14:1b:2b:47:d5:2e:7e:cb:22:c8:70:89:24:
         62:1b:c5:80:b1:4d:a6:00:34:b8:ce:8c:75:0b:b5:b2:71:d5:
         ea:ee:a7:e6:05:c4:7c:b1:0e:3e:84:d1:06:dc:95:34:13:c5:
         ca:e9:e9:59:4a:87:5a:cb:90:ab:ae:0a:f5:af:de:a8:1c:d8:
         f1:2b:2a:03:54:53:63:60:28:94:43:3d:1b:09:57:ee:4c:35:
         6c:8b:91:9c:a6:2e:a7:d0:69:ab:e1:0a:9f:1d:2a:c3:08:89:
         8e:b9:f7:7e:fe:e2:1e:7d:29:d2:13:6a:6f:6e:11:d4:f8:c1:
         d6:64:75:b6:f7:06:35:9f:39:a9:8f:e8:93:0e:df:e2:59:8a:
         51:ca:92:b8:89:6c:86:b5:c1:c9:24:34:b8:b5:ba:06:ed:c6:
         e9:c8:2a:e3:02:f5:51:73:57:2d:2e:f2:0e:ae:92:4e:12:cd:
         03:76:a2:95:ba:11:13:75:ca:3c:f6:75:dd:4c:83:93:66:91:
         c2:f1:ec:5e:50:0a:29:ba:75:f4:ab:8a:72:46:28:1a:6d:8a:
         31:4b:15:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:19 2024 by rpki-client on console-ams.rpki-client.org