Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d72d812-8380-311a-a05d-1bf3e875efee.roa
File:                     4d72d812-8380-311a-a05d-1bf3e875efee.roa (raw, json)
Hash identifier:          TmtCwxIG7iYjsYSKGEg7dxFj9HqmD6a/Nkzete048/k=
Subject key identifier:   B3:F9:0D:15:44:83:14:1A:41:B3:69:3F:4D:9A:E3:03:3E:8C:64:7C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845E11FEB3783729F020E1C3FAE
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d72d812-8380-311a-a05d-1bf3e875efee.roa
Signing time:             Wed 15 May 2024 09:07:16 +0000
ROA not before:           Wed 15 May 2024 09:07:16 +0000
ROA not after:            Tue 13 Aug 2024 09:07:16 +0000
asID:                     20940
IP address blocks:        23.47.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:1f:eb:37:83:72:9f:02:0e:1c:3f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 09:07:16 2024 GMT
            Not After : Aug 13 09:07:16 2024 GMT
        Subject: CN=b91e1ee3-adeb-4c12-b8cb-f921b8cd26e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:04:18:2b:08:83:20:06:d4:4c:6c:7e:2e:
                    f3:76:6e:6b:b2:ed:02:d2:ec:8f:d7:ee:2d:c2:67:
                    65:40:7c:bb:d7:04:dc:db:8a:9a:b4:c9:d9:d1:90:
                    27:2d:6d:69:18:50:a6:eb:e1:dd:d9:de:6e:d2:9d:
                    0f:2f:99:29:be:d6:3b:04:0e:eb:75:7b:34:f1:7c:
                    7b:e3:85:cb:6f:4b:51:ef:8d:09:90:8f:52:c7:3e:
                    84:d6:af:8f:2f:9e:b8:6f:82:6a:66:4d:7f:18:9f:
                    1d:5f:28:cd:ec:d8:6e:62:0d:c4:64:15:06:48:fb:
                    7d:75:47:41:fa:80:3e:1c:6c:a2:62:a3:07:e4:0e:
                    28:e4:09:c3:c9:13:d7:11:f7:78:c4:db:60:5e:b7:
                    2d:b1:6b:97:84:1e:bf:e1:c6:e4:d4:d8:96:40:49:
                    a4:ab:56:49:f6:b2:6b:1b:76:60:e8:2f:03:75:af:
                    45:cd:35:d5:ec:5b:5a:a8:56:e0:52:5e:55:6f:a8:
                    49:7b:07:08:ff:f0:be:51:2c:59:1b:44:58:49:f1:
                    28:00:9c:a2:c8:9c:5f:8b:c1:2f:16:e8:4f:7d:f8:
                    96:e0:b2:d6:f0:2b:1b:a0:66:3b:d9:49:96:b3:f2:
                    62:dc:ca:2f:6c:6d:08:7a:4c:6d:8a:a5:04:ab:05:
                    68:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F9:0D:15:44:83:14:1A:41:B3:69:3F:4D:9A:E3:03:3E:8C:64:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d72d812-8380-311a-a05d-1bf3e875efee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:af:46:1c:e8:23:2b:d0:a4:86:92:c9:21:90:32:c5:22:cd:
         40:d5:8d:0e:e4:39:33:94:13:8a:09:06:f8:9c:83:73:1e:17:
         e5:a9:44:46:86:13:13:d0:19:71:83:34:75:93:03:e9:eb:f6:
         bc:4d:26:f0:83:01:87:8b:d8:d2:61:a9:6a:f9:96:c4:c0:df:
         68:25:5c:24:ec:ce:66:fa:fb:53:c7:0a:b9:5e:65:27:65:da:
         42:bf:d7:75:f5:5c:c0:5d:10:db:bd:e3:1c:9b:aa:f0:30:28:
         fd:b8:e7:dd:e6:e8:09:4c:bd:5e:49:5d:78:7c:d4:6d:50:fd:
         3c:ef:fa:04:49:20:b1:bd:43:9e:34:4d:5c:61:d3:64:73:f9:
         c0:9b:07:63:44:a6:19:29:d3:ac:fa:1f:bf:ae:68:c4:57:1b:
         da:f3:b7:05:2c:43:2d:6d:56:ec:7a:98:e7:be:dc:c1:28:c2:
         65:39:0e:fe:f3:55:1a:c2:0e:41:64:93:da:be:04:84:85:d7:
         5f:28:0f:f5:27:ef:49:bd:7e:65:03:67:76:d8:02:d9:5b:7d:
         de:46:12:5a:fc:02:5f:cc:4d:78:7d:ae:92:b2:5d:83:e6:e3:
         82:05:1f:6c:25:53:9e:54:a2:34:24:33:02:5f:f2:cf:af:23:
         5b:68:bb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:13:13 2024 by rpki-client on console-ams.rpki-client.org