Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49fe5724-ba2e-3986-82b0-9c11927ec955.roa
File:                     49fe5724-ba2e-3986-82b0-9c11927ec955.roa (raw, json)
Hash identifier:          LGrAEhlwA4OGOisP0Gx0nsg0hhjSsnk38VlZ4OjDsYE=
Subject key identifier:   D8:2A:63:79:14:73:54:13:31:E7:4D:96:00:3B:A0:78:4B:65:58:40
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AF9BEFAFF34752E290150540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49fe5724-ba2e-3986-82b0-9c11927ec955.roa
Signing time:             Mon 28 Oct 2024 01:00:32 +0000
ROA not before:           Mon 28 Oct 2024 01:00:32 +0000
ROA not after:            Sun 26 Jan 2025 02:00:32 +0000
asID:                     16625
IP address blocks:        23.62.10.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:af:9b:ef:af:f3:47:52:e2:90:15:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 28 01:00:32 2024 GMT
            Not After : Jan 26 02:00:32 2025 GMT
        Subject: CN=ebe6c0f0-409f-4e96-98e8-9e0583bb2316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:01:1d:8a:b3:23:50:0d:f3:64:0c:6a:7f:c1:
                    7c:4d:4b:b3:7c:db:b7:63:8c:cf:a6:39:7c:6e:a5:
                    d4:5c:63:95:13:23:ee:c4:c8:7b:1c:7f:9d:24:99:
                    b2:02:6f:3d:a2:52:20:69:82:67:a2:3c:63:86:da:
                    66:58:b5:fa:89:c8:ac:52:6a:f0:f3:7e:5e:5c:03:
                    2c:48:37:ae:9b:e0:ef:a3:fa:d5:73:92:f8:e2:e9:
                    a1:70:61:09:24:70:f0:10:78:d3:3f:78:0c:25:e3:
                    ae:53:fb:a7:ab:eb:f7:d0:c8:62:d8:77:49:6e:53:
                    f3:ca:00:1b:bb:43:7a:e1:68:e9:ad:c1:d0:19:e0:
                    cf:9e:62:a5:30:c8:72:13:33:6e:13:fe:8a:be:0b:
                    7e:07:59:2c:d8:65:18:d4:f7:b4:59:bc:ca:96:64:
                    c3:a5:98:7c:4f:5a:fb:25:82:b4:89:9a:8c:88:1c:
                    19:a8:6b:40:4f:0c:cb:8b:5e:c8:55:57:71:9c:42:
                    72:91:5f:f1:42:5f:be:b2:89:fe:e6:ee:0a:5b:e7:
                    63:d2:68:51:6b:ce:74:7d:00:d8:e1:d1:b8:fa:2e:
                    5b:eb:70:f3:63:db:0e:97:68:1a:36:84:3e:0b:9e:
                    58:c0:ea:54:51:8f:68:17:b9:35:97:04:93:f0:89:
                    78:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2A:63:79:14:73:54:13:31:E7:4D:96:00:3B:A0:78:4B:65:58:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49fe5724-ba2e-3986-82b0-9c11927ec955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:31:8c:1f:6f:2c:6b:05:40:82:af:ea:f4:a9:cf:4c:5d:5b:
         ff:39:3a:37:3e:2f:ff:c5:ac:fe:4c:dd:2c:46:1e:90:59:c5:
         b9:e5:68:14:e4:5c:e1:70:ae:e9:5b:fe:06:a6:6a:db:33:6c:
         21:fe:5e:1c:14:66:38:2b:53:80:9a:aa:ca:c3:fb:5a:98:58:
         de:1d:e2:25:49:fe:4c:83:39:a0:6e:af:0e:8d:dd:76:ae:5b:
         6f:f5:5c:86:86:ee:ee:da:d1:96:a9:c1:1a:5e:e1:43:26:55:
         d7:20:a6:4e:d4:48:68:d6:4f:78:d6:1f:05:38:94:ef:31:ae:
         60:49:f5:78:cf:ea:f5:26:89:f9:7a:ea:2d:5b:4b:b0:de:0d:
         d1:12:00:e7:d2:f7:8f:92:b2:54:95:cc:e5:de:bb:e5:40:16:
         5a:4e:96:2e:06:42:f2:30:1c:b0:b0:8d:05:9e:58:1d:0e:4b:
         65:62:61:c3:97:96:32:b1:d6:95:dd:8c:57:91:41:09:65:ca:
         31:e4:14:4c:68:c5:48:02:18:c8:7c:4f:87:d3:f6:d5:33:6d:
         22:58:d1:30:56:c7:e0:33:13:0c:f3:e9:11:7b:2e:3a:6c:a0:
         57:8f:8d:17:70:ae:72:c8:b6:30:8b:58:ae:79:48:46:e1:87:
         a1:20:67:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:37 2024 by rpki-client on console-fra.rpki-client.org