Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16c287fb-280f-390b-9b4f-b5bf39ed247d.roa
File:                     16c287fb-280f-390b-9b4f-b5bf39ed247d.roa (raw, json)
Hash identifier:          MEtw6depr67WY/IXaGSdVSpPv9ULbqqpDKFN2u9rRRU=
Subject key identifier:   BE:08:F5:A0:23:B5:9D:89:60:E4:7A:EC:E7:B8:99:A1:9B:37:CD:00
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848C9B0E349DB64DC11A82B8000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16c287fb-280f-390b-9b4f-b5bf39ed247d.roa
Signing time:             Thu 06 Feb 2025 02:00:39 +0000
ROA not before:           Thu 06 Feb 2025 02:00:39 +0000
ROA not after:            Wed 07 May 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        23.219.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c9:b0:e3:49:db:64:dc:11:a8:2b:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  6 02:00:39 2025 GMT
            Not After : May  7 01:00:39 2025 GMT
        Subject: CN=2b4f3e11-aa84-43fe-b235-d926836ee400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:80:92:79:8e:c8:02:57:b7:71:7c:d5:4e:39:
                    6e:68:5d:c6:82:17:d8:9b:50:8a:5d:1f:cd:df:0a:
                    69:39:82:31:1e:6a:e2:c8:e1:e2:ca:15:63:fa:1c:
                    fe:6a:a3:d3:4a:27:ae:99:48:6c:c3:1a:07:57:7b:
                    3f:38:19:43:68:0e:14:d8:b3:be:86:db:b5:7a:c0:
                    60:2b:81:6c:c4:71:d2:ed:34:7c:23:ba:9d:2f:f9:
                    d4:1d:57:0e:65:93:8f:77:17:8f:c9:44:59:28:5a:
                    a4:2a:75:58:9f:26:42:0e:51:69:1a:53:e2:61:f7:
                    60:db:55:54:05:a0:4a:7c:cc:cd:72:46:f9:67:be:
                    bc:c4:7d:1d:e4:7d:b8:5b:17:17:8c:50:75:53:ee:
                    1d:35:22:c8:3c:b4:dc:cd:2c:0e:51:6a:04:5a:29:
                    41:51:30:73:1c:d6:0f:30:91:ed:4d:bc:09:a2:31:
                    d5:77:fe:39:60:6b:7d:9e:c0:61:93:25:86:27:dd:
                    cd:7f:15:4a:7d:f2:26:9e:53:2b:ef:45:ae:64:65:
                    de:2c:0f:a5:13:5f:34:42:64:70:6c:ee:5b:8c:d0:
                    37:ed:93:9b:19:95:df:46:36:1c:55:6a:83:e0:75:
                    c6:75:4c:cd:b3:59:24:01:f0:f5:c8:39:c8:ed:4c:
                    04:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:08:F5:A0:23:B5:9D:89:60:E4:7A:EC:E7:B8:99:A1:9B:37:CD:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16c287fb-280f-390b-9b4f-b5bf39ed247d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.219.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b8:f9:6d:09:38:27:2b:00:03:73:6d:4f:d6:43:f1:30:48:
         63:fb:e1:0d:30:cd:b9:99:8d:17:5b:0f:bf:7a:8d:f0:c7:17:
         fd:cb:a8:cc:ae:12:c9:76:82:65:0d:61:01:f8:eb:4e:f8:25:
         71:c2:59:a8:61:72:17:f1:54:dc:c4:14:3d:0a:ab:a5:01:41:
         85:53:a1:54:cb:de:75:98:68:e7:f2:18:9d:c7:94:be:08:8f:
         a5:66:5d:f5:68:7a:02:4b:ca:61:3e:92:dc:82:e1:42:b9:00:
         64:c3:3c:2f:ae:26:9d:ee:78:01:e2:09:3e:8e:fe:ed:26:db:
         0d:d1:3e:3a:0f:6d:aa:3d:ea:95:f1:af:2d:9b:73:fd:1c:94:
         c9:81:4a:cb:c0:98:33:db:cf:a9:40:63:1c:6b:e8:8f:18:2a:
         b3:9b:fd:ef:da:5a:6f:85:40:82:38:2e:a5:96:e3:a2:f3:d4:
         a8:bf:4c:67:87:25:65:d2:1e:17:bd:3b:ce:e6:81:c1:70:79:
         74:d7:b1:1c:76:15:af:d6:a6:c2:57:e6:14:60:26:0d:dc:67:
         5f:56:02:75:e9:22:f5:12:6e:2a:aa:f4:8c:c4:ae:6e:fe:39:
         12:e0:81:09:58:41:82:fc:66:3e:2a:70:76:aa:eb:48:34:1d:
         36:6a:13:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:30 2025 by rpki-client