Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7637002f-7472-366e-83aa-25b59a16bc49.roa
File:                     7637002f-7472-366e-83aa-25b59a16bc49.roa (raw, json)
Hash identifier:          dSiZADEl62CnyMEbENJkFG5lLQW6YFAJbUMbUuaI5TE=
Subject key identifier:   F9:1B:A9:F4:19:0A:9F:7F:53:DC:71:01:74:7B:27:85:37:D8:32:70
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858384FE681C97CEDF6695A226800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7637002f-7472-366e-83aa-25b59a16bc49.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     19157
IP address blocks:        23.86.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:e6:81:c9:7c:ed:f6:69:5a:22:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=6c2d657b-a8ac-434e-ada9-5f366d030f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d2:f0:b9:93:b3:e0:ef:14:9f:da:1b:7f:c9:
                    5c:26:1b:9b:aa:f7:3d:72:ff:4f:ea:7c:cc:20:2d:
                    19:20:a1:7d:43:0e:f4:32:12:b8:80:63:55:e9:3f:
                    6a:90:fc:36:e3:0c:b3:8e:11:bd:93:28:f8:ac:1d:
                    b9:fe:53:f4:b1:56:c6:98:ea:31:7e:02:51:e3:2d:
                    6b:7c:96:bf:22:e2:b2:2c:2b:4f:91:cd:8f:cb:18:
                    7d:95:93:7c:f5:13:3b:a8:4d:5c:11:00:8c:b3:18:
                    e5:41:54:1d:cd:b4:a8:52:4a:95:f0:5f:ee:2a:05:
                    19:c5:dd:df:89:84:05:0c:b1:f3:ea:49:b2:f1:54:
                    d4:42:90:dc:13:e9:56:5c:ee:75:bf:2c:59:36:1c:
                    40:f8:5f:38:4f:6e:7e:a4:61:a3:ed:af:34:ba:a1:
                    13:7b:67:a4:42:d4:03:05:50:77:77:78:0c:80:fb:
                    16:d6:c9:44:b1:a6:6f:4a:23:f7:7a:a9:03:58:b5:
                    b3:2d:45:2a:4b:02:b6:a5:91:41:be:9c:00:40:2f:
                    7d:fe:4b:d0:2c:bd:95:00:4f:a9:93:52:77:b4:2f:
                    38:94:17:d0:61:95:8c:5c:6e:e1:52:df:97:16:b8:
                    aa:b5:a9:af:02:25:23:8d:15:0d:c6:3b:a6:8b:db:
                    07:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1B:A9:F4:19:0A:9F:7F:53:DC:71:01:74:7B:27:85:37:D8:32:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7637002f-7472-366e-83aa-25b59a16bc49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:4c:bb:87:4a:cf:b8:88:71:f6:01:55:e7:35:3c:24:92:c1:
         81:12:41:fa:45:5c:80:f2:36:f9:a0:cf:b3:2e:f0:ae:d4:07:
         e9:1c:21:2a:53:0c:b6:20:ae:af:c6:52:04:2d:c8:2e:ba:47:
         45:d7:bd:02:d7:f0:30:ce:fc:5c:d4:6a:35:db:86:62:e4:b4:
         b0:c2:12:ac:77:44:2c:5b:c1:2e:28:a2:18:d5:a3:fa:88:f1:
         59:34:3a:c8:2c:74:c3:ba:c7:30:e5:13:85:7d:22:20:a4:d6:
         68:5d:4f:3f:65:e1:60:9b:d5:0b:e0:fb:52:bb:87:57:7d:9d:
         66:c0:2f:10:47:fa:5e:d1:bd:6e:a9:60:e6:bf:96:f6:bc:9e:
         dc:c6:42:76:6e:27:c0:c5:a5:de:cc:60:15:b8:7b:89:1a:af:
         48:a6:d1:29:a1:78:3b:a5:96:db:19:98:c1:a2:67:24:cc:f8:
         74:3c:7d:83:7d:85:49:5b:9a:a1:dc:71:f5:1b:ec:42:1f:9c:
         f3:9a:7d:9e:cd:c8:da:2e:35:63:12:90:9e:72:01:2f:fe:57:
         98:f1:d6:b4:72:47:78:4c:e9:37:17:f8:24:35:a3:d7:fb:7c:
         b1:1b:65:02:9d:3a:40:60:ff:13:fd:8f:9e:3c:f7:39:e2:ee:
         ae:db:a6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:33 2024 by rpki-client on console-ams.rpki-client.org