Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/457abbad-c91c-39f8-9dc0-e2417c417256.roa
File:                     457abbad-c91c-39f8-9dc0-e2417c417256.roa (raw, json)
Hash identifier:          9p00m9iEe0PQDYD1bTYmoynvMSC3jBKSSr4/9BQjqe8=
Subject key identifier:   97:ED:98:69:A6:70:CD:51:E8:6C:B7:21:90:17:B8:83:11:6B:C9:F9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584752161C390AFD5C265C8B1E10
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/457abbad-c91c-39f8-9dc0-e2417c417256.roa
Signing time:             Tue 24 Sep 2024 13:00:40 +0000
ROA not before:           Tue 24 Sep 2024 13:00:40 +0000
ROA not after:            Mon 23 Dec 2024 14:00:40 +0000
asID:                     16625
IP address blocks:        23.66.144.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:16:1c:39:0a:fd:5c:26:5c:8b:1e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 24 13:00:40 2024 GMT
            Not After : Dec 23 14:00:40 2024 GMT
        Subject: CN=655a8832-888e-4637-b062-ce1ed8f2a2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a3:bb:9f:40:a6:93:b4:5c:e3:d4:d6:4f:ad:
                    a9:77:ed:05:37:f9:9a:83:d2:9f:9f:51:c9:a6:7c:
                    d2:2e:1d:f3:b7:16:94:e2:f2:c4:e5:c4:ff:7a:14:
                    21:2e:3c:51:5b:62:9a:3a:2d:2f:0b:19:33:a6:75:
                    05:8a:51:27:31:28:c0:52:42:a2:22:83:13:cf:95:
                    49:5a:1a:63:08:c6:56:b0:41:70:7f:13:c8:03:3d:
                    51:6c:88:03:71:70:3e:ca:b6:1e:66:00:cd:9a:8b:
                    97:f5:93:9d:48:5a:b5:3f:df:2b:44:35:37:3f:3a:
                    1c:c7:35:51:80:45:76:02:a9:be:4d:3b:17:08:76:
                    78:ee:4e:5f:6b:f5:e1:8f:f6:ca:de:5e:b5:19:db:
                    e5:54:d8:39:32:fb:2c:e2:31:de:11:6f:a0:fc:27:
                    d4:b5:6f:74:07:d1:55:9a:f2:32:f9:d7:7d:0c:e5:
                    21:5e:ab:f8:bd:0a:2b:ec:60:4f:1b:e4:14:96:2e:
                    c7:40:31:d0:9d:9a:82:e5:87:0b:2e:45:a1:14:f7:
                    8a:d8:01:ed:96:4f:0d:88:18:c0:2e:c1:ae:d7:9b:
                    0a:ec:2f:8b:da:91:36:5f:b1:35:fd:bf:5c:02:54:
                    9e:b5:32:9b:c4:ef:1a:c5:b8:83:9e:97:cd:52:d7:
                    9c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:ED:98:69:A6:70:CD:51:E8:6C:B7:21:90:17:B8:83:11:6B:C9:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/457abbad-c91c-39f8-9dc0-e2417c417256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.66.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:3f:56:48:c0:71:3e:51:cb:e1:ae:a9:28:5a:29:86:d9:38:
         00:4b:8d:31:a0:c3:f4:28:91:97:61:3e:24:f2:c7:6d:e1:f8:
         84:53:3d:bc:6c:30:16:7b:76:a2:50:4d:c2:ba:3a:ee:26:fc:
         6a:d7:84:2f:04:67:22:26:e5:ef:33:ac:9c:d3:06:78:2e:b5:
         d2:60:07:6b:ea:b8:07:06:2c:28:45:f1:b5:bd:67:cb:a2:e5:
         f1:6d:5a:a6:16:7f:0a:28:65:c3:a5:b1:a8:88:96:a7:bf:99:
         9e:77:e8:c5:a7:3d:76:35:05:65:66:6f:d3:e3:9e:bc:85:29:
         28:5e:7e:b8:56:d4:c9:58:c2:6b:6c:b5:fc:1b:ba:74:43:17:
         60:ab:71:09:be:c9:4f:e2:e2:8b:ef:15:9f:63:95:bc:7b:a7:
         b1:7f:5e:17:f0:28:f6:6b:9d:37:ab:52:11:a1:e5:4b:83:f4:
         8a:54:0d:37:f6:2e:f0:4d:16:c5:a2:b6:f2:85:66:b1:61:aa:
         e1:f6:a3:48:e1:27:6c:fe:42:b7:b5:d5:7d:c0:c6:e8:85:fb:
         1b:83:b9:bf:d9:23:79:8b:a8:f2:83:3b:08:05:cd:a8:f6:d3:
         d0:89:5b:88:38:6e:8e:c0:89:fa:e5:88:dd:a1:36:29:d6:16:
         e3:17:db:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:31:58 2024 by rpki-client on console-ams.rpki-client.org