Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55683f0b-f842-3ba8-b2ee-5b8db083f974.roa
File:                     55683f0b-f842-3ba8-b2ee-5b8db083f974.roa (raw, json)
Hash identifier:          my8TrvHMbMupl6iHaRnnJnQAMScEBQpzZwoWyXk2oys=
Subject key identifier:   26:79:E7:CB:C8:B6:DC:4C:78:B3:07:F6:30:C5:BC:44:1D:EE:0A:EF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858491D715C506FDE554FB07F8C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55683f0b-f842-3ba8-b2ee-5b8db083f974.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        23.192.0.0/11 maxlen: 11
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:5c:50:6f:de:55:4f:b0:7f:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=9d82273c-78fc-4776-b68e-8e921db4b88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:26:e7:1e:29:8e:eb:9f:91:9e:df:02:c8:db:
                    97:ec:b4:e8:66:cc:c9:19:19:4f:6c:a1:14:9c:30:
                    1e:b7:20:ec:52:4c:9a:c9:0e:47:cf:32:73:81:7b:
                    cd:88:14:7b:d4:e2:5e:18:e6:52:53:2e:0e:95:1a:
                    ab:d0:00:46:3a:d8:a5:33:42:d8:7f:e7:47:96:f4:
                    15:42:a6:49:d4:0a:12:f5:e6:63:0d:56:af:d4:21:
                    e7:75:01:38:25:54:78:80:30:5a:f8:fe:14:9b:52:
                    35:08:e5:46:69:05:0c:1b:a8:79:4d:ee:05:89:cf:
                    dc:ed:3a:5d:f9:df:a3:ea:2c:ba:24:f2:fc:02:19:
                    b2:80:8e:7b:52:23:18:b1:1c:fd:64:6e:85:f8:ec:
                    e4:96:2b:94:7b:6d:03:af:f3:e8:b9:79:8e:83:fe:
                    fc:08:83:90:84:3d:95:24:49:84:f7:22:3e:8b:55:
                    27:a3:1e:49:0d:6c:7c:4a:fd:ea:0b:e5:d0:83:d9:
                    45:d3:02:e7:de:a8:ef:5c:a8:4f:98:eb:76:3e:4d:
                    1f:8d:8a:ae:84:c9:b7:33:0a:d8:ec:55:89:23:fe:
                    4a:30:96:56:d6:71:d2:75:2a:f6:87:7f:e0:be:ea:
                    d7:f8:65:50:e4:27:97:a8:6b:49:61:0e:c5:74:8f:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:79:E7:CB:C8:B6:DC:4C:78:B3:07:F6:30:C5:BC:44:1D:EE:0A:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55683f0b-f842-3ba8-b2ee-5b8db083f974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.0.0/11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:db:9e:fe:85:fa:fb:38:18:b2:05:7a:17:c3:92:35:bd:16:
         91:3f:5d:80:45:84:ff:d0:65:d4:a4:8c:eb:b4:25:99:2f:59:
         a3:8d:39:59:c9:fd:d6:3a:9b:a6:45:f7:c2:07:3f:38:f4:fa:
         20:ff:26:e2:1a:8e:f6:58:56:b3:95:f0:87:93:50:f6:90:7e:
         6f:01:98:96:f8:a5:bc:10:a4:e7:bd:9a:d3:a7:7c:9b:5f:f6:
         0e:51:08:e8:13:4c:00:20:a8:2d:c4:1b:5c:42:55:a7:59:aa:
         3e:2d:c1:84:2f:da:45:63:fc:09:cd:43:52:49:50:68:51:b2:
         f1:1b:42:b5:ed:d0:43:69:ac:6a:fa:05:2c:cf:da:9e:01:1c:
         19:b0:28:27:05:2a:3f:cc:8d:d5:75:74:91:d4:c5:6a:44:67:
         de:02:af:9e:94:bc:6d:58:bb:dd:d1:f1:c3:3e:f6:d3:2b:4c:
         5e:df:d1:f5:8f:5c:2d:1f:7b:b5:7b:0a:92:7f:69:1f:a2:fb:
         76:a4:48:67:70:cb:30:5f:38:ba:e0:34:3c:f0:2c:7d:e1:11:
         9a:d3:30:9d:ce:75:62:38:18:37:ec:1a:af:d8:ad:83:51:5f:
         25:84:da:7d:c8:c5:7e:7c:c3:75:2e:5e:d3:b9:f4:b5:9a:b2:
         64:83:3a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:24:54 2025 by rpki-client