Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2acd43ff-7160-3d93-97a5-fc4078274979.roa
File:                     2acd43ff-7160-3d93-97a5-fc4078274979.roa (raw, json)
Hash identifier:          oiuuQvEc2PvZ0zXSmEO7Y3gJLg/t7D73uqRjpbYytDM=
Subject key identifier:   07:BB:30:4D:BE:FD:B9:B2:23:47:60:2C:AA:C0:6F:C3:6E:54:FC:AF
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858384FE683F4126B4DA1C4E28880
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2acd43ff-7160-3d93-97a5-fc4078274979.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     19157
IP address blocks:        23.86.22.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:e6:83:f4:12:6b:4d:a1:c4:e2:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=a3907db4-3a33-47b0-a035-d53b886dbeaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:d0:23:d9:d7:9c:d8:9a:70:96:ab:51:50:
                    d5:ee:64:5f:f2:6f:88:a1:da:22:cd:e1:21:88:05:
                    53:1d:77:4f:61:eb:5a:df:d2:9b:f6:a4:73:5c:22:
                    4a:5c:b0:55:c4:bb:5e:fe:95:86:f4:41:70:72:c3:
                    a9:a7:8a:43:a0:6d:f0:d5:8d:01:28:ca:da:02:7b:
                    c1:58:ce:b8:0e:a7:33:47:46:32:17:ef:a3:9c:a0:
                    bb:e7:65:fa:61:d8:98:61:3b:0c:19:ad:06:56:2a:
                    cf:dc:c7:a8:d2:89:26:9f:7e:e0:c1:bb:ae:05:4e:
                    c1:fe:4f:22:b9:02:45:5a:b1:7d:46:12:22:0c:39:
                    26:38:bf:db:4a:30:fa:eb:45:a8:a9:99:4b:b5:10:
                    46:8a:d0:51:c0:dd:bd:88:47:d8:5a:18:b0:98:36:
                    cb:d2:25:e4:41:8b:20:26:e0:02:14:8e:e3:e0:d4:
                    a5:58:a4:f3:18:5e:34:da:a1:96:76:fc:fd:9d:97:
                    4d:9f:15:3c:57:be:f9:8b:df:70:36:d0:62:18:b4:
                    53:ff:81:b3:fb:a5:bd:83:66:5f:76:ed:03:cd:6a:
                    b6:09:ca:76:3a:6c:a4:4d:af:30:77:b5:60:ac:12:
                    78:95:aa:51:28:d8:45:19:45:b3:1b:13:8e:e3:15:
                    8f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BB:30:4D:BE:FD:B9:B2:23:47:60:2C:AA:C0:6F:C3:6E:54:FC:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2acd43ff-7160-3d93-97a5-fc4078274979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:21:0f:f5:1d:f0:84:c7:5a:f2:21:60:92:58:2e:9d:58:9e:
         c3:6d:ef:5a:9a:7b:d0:70:42:14:f8:95:37:6c:cf:f9:c0:3a:
         e6:17:e3:d8:7e:74:36:36:ef:96:91:b7:d9:cb:e3:ef:7e:06:
         71:30:9a:de:45:88:64:ee:bd:c9:43:91:9e:77:e1:98:c6:42:
         8c:95:51:5a:09:21:fc:6c:91:bc:59:d8:32:3d:0c:8b:f4:6b:
         cd:bf:cb:e6:29:b0:fc:bf:e5:1a:9f:71:a4:a2:a9:3e:6f:4e:
         ee:68:21:97:0f:95:24:cf:28:54:da:78:e8:8a:9f:28:8a:33:
         83:0d:ec:7b:43:1c:7d:c5:ec:9e:a8:03:8c:a0:12:2a:3d:7d:
         dd:db:13:95:42:54:11:44:e0:8b:42:9c:05:f2:32:c0:2e:3c:
         7d:12:c8:02:5f:89:11:b8:f6:c0:a5:99:e3:dd:8c:fb:4f:2c:
         e8:1e:05:d2:1f:ff:63:5f:40:46:11:5b:bc:f3:6a:b5:cf:71:
         4e:9c:bf:98:47:7a:81:34:29:bf:cb:3f:f5:19:40:14:bc:fa:
         e0:c0:2c:a4:d7:90:5e:7b:55:83:80:4a:93:51:c4:d6:c1:da:
         cc:ec:6c:02:73:92:5e:31:03:97:ef:b8:70:ea:54:38:36:44:
         04:c4:54:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:23 2024 by rpki-client on console-fra.rpki-client.org