Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/432b8a7b-ecf3-348d-a189-0a282642f6a6.roa
File:                     432b8a7b-ecf3-348d-a189-0a282642f6a6.roa (raw, json)
Hash identifier:          EYFyW7VFEOjiieFeSsKbF8uEuSP38yWpIOPaZyY6gfo=
Subject key identifier:   6D:55:BA:E4:B3:5C:33:F9:C8:D4:9F:07:DD:47:BC:DF:89:FD:0A:20
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B696C230F40310FBD717CE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/432b8a7b-ecf3-348d-a189-0a282642f6a6.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     16625
IP address blocks:        23.223.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:c2:30:f4:03:10:fb:d7:17:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=52d6df55-2965-46f6-8bbe-34b300688fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f5:b9:91:74:2d:c3:62:a6:d6:db:6b:f6:61:
                    78:9f:b2:d8:93:f4:58:fb:2e:37:69:d0:f1:88:f2:
                    77:95:a4:19:8f:b6:6d:1a:14:fa:9e:15:38:2b:ac:
                    60:13:4a:c9:ea:d6:ed:fa:fe:94:e9:1d:c6:2e:0d:
                    15:e0:ed:61:06:7c:86:02:2f:76:01:74:5d:a9:ad:
                    51:1d:62:87:15:d6:33:a2:36:c9:d4:bc:30:ea:12:
                    f5:39:db:9f:47:f4:4d:68:fd:bc:fe:84:67:a8:2d:
                    3f:0f:21:96:6e:51:4c:5f:bb:7d:d5:0c:b2:3e:5d:
                    9d:be:96:4a:d6:ce:68:18:5c:15:d2:52:7f:04:a5:
                    bb:94:c9:5c:6f:d0:45:4c:cf:09:f6:03:8f:99:11:
                    59:d7:f4:9f:e4:91:81:63:6a:ad:d6:57:f7:de:32:
                    9f:63:c5:e0:d9:25:11:f6:58:b8:29:91:c2:cb:01:
                    3c:de:3a:68:a8:39:b3:46:cf:10:e2:66:3f:d2:f9:
                    2e:65:87:50:30:ed:52:6e:a1:a1:c0:8f:19:ef:e2:
                    29:96:70:23:1d:21:56:16:22:38:b9:f5:7b:7f:33:
                    7e:68:41:46:6d:86:c8:a6:04:9f:73:1f:69:10:b1:
                    82:72:31:e5:a8:fe:af:1e:3b:0a:93:80:82:1c:2e:
                    56:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:55:BA:E4:B3:5C:33:F9:C8:D4:9F:07:DD:47:BC:DF:89:FD:0A:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/432b8a7b-ecf3-348d-a189-0a282642f6a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.223.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:8d:19:17:de:45:4a:dd:f5:cf:ad:2e:11:d5:30:b8:09:42:
         8d:ac:f9:3e:69:0e:38:37:5e:b4:3f:a9:0e:88:34:79:03:ba:
         f9:2c:e4:9b:b2:17:40:a9:ad:3f:bd:48:fa:95:6b:4c:6d:09:
         b0:2f:b2:ec:fc:fb:a9:1f:fe:6e:b7:be:67:60:bf:05:f3:2e:
         c6:e5:50:da:39:46:1f:c8:32:f5:ee:1a:35:78:da:1f:0e:2d:
         dc:b2:08:49:7c:22:d4:5f:d4:01:8d:2d:3e:26:bf:be:02:bb:
         40:59:29:d3:f7:c7:e1:8a:ff:fe:06:45:65:7e:f2:30:b0:db:
         90:5a:c3:17:e5:c9:15:85:5e:af:06:db:07:9f:4d:91:e4:e5:
         67:2a:30:f9:61:26:35:8e:7c:6a:9a:96:7c:55:3f:c3:73:db:
         7d:ec:e4:e3:06:ca:cb:5b:d7:c8:6a:15:84:2b:ec:8a:4a:fe:
         61:d2:4b:c1:c5:51:03:73:10:5e:ca:5d:9c:20:65:b2:54:0c:
         6a:f9:24:91:2c:18:ae:70:23:a0:89:ae:fb:30:0e:64:06:39:
         d6:19:3e:1f:b2:36:af:d7:e3:50:59:43:5f:9d:2e:08:ac:ca:
         17:ea:31:10:b3:04:9f:55:b0:e5:04:62:1a:49:39:fa:0f:73:
         28:2c:5c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:31:57 2024 by rpki-client on console-ams.rpki-client.org