Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cad6a93-4de9-32f8-b777-1196979dc7a8.roa
File:                     5cad6a93-4de9-32f8-b777-1196979dc7a8.roa (raw, json)
Hash identifier:          AiI2qPfibAwwQHnd+gDUKMGzVnOOBwdhMGpbIxO5AgU=
Subject key identifier:   D7:39:02:6C:B3:F1:95:82:31:1B:88:C6:73:6C:EE:63:83:D6:08:57
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858479D76CF20B771C0AF4AAC8A60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cad6a93-4de9-32f8-b777-1196979dc7a8.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.43.162.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:cf:20:b7:71:c0:af:4a:ac:8a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=30a9d10e-85b0-4c88-8a86-239a0ae31248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c0:04:af:d3:48:e4:2b:b6:13:2b:5a:df:73:
                    28:f5:b5:c4:dd:b3:2f:7b:78:66:3c:ac:26:8e:f3:
                    7d:60:18:9c:66:4e:5e:62:ff:4a:43:5d:89:5b:c7:
                    e9:63:78:f6:6f:63:4c:9e:3a:0a:a0:cf:71:2e:22:
                    c7:b9:ce:e1:98:15:3c:f8:d4:70:14:21:f3:2c:00:
                    a9:19:4e:9f:3c:84:1d:74:fb:15:12:03:b6:91:8d:
                    7d:3a:d9:ae:06:e0:36:52:84:2d:9e:70:3e:12:fb:
                    73:42:7b:1f:e8:10:3b:c1:5d:e0:4e:1a:70:39:c0:
                    a1:1e:74:b5:a1:59:55:77:51:eb:79:fc:0e:93:df:
                    73:59:8d:7b:d6:e0:16:ce:2d:09:14:32:f1:ec:ed:
                    b0:e7:14:12:74:fb:a1:c0:f3:57:a4:be:cd:49:1b:
                    f6:3a:66:ee:10:7b:7f:54:ec:6a:f7:85:93:c9:b0:
                    74:b8:1a:45:e3:6f:88:cf:9d:b7:f7:eb:27:b3:b0:
                    ac:02:ae:63:d9:20:a4:ab:e9:f8:e2:63:5d:b9:2c:
                    91:8b:63:fe:84:73:cc:22:39:70:cf:87:04:9e:dc:
                    be:3a:86:f6:d3:00:ca:9b:bd:c1:0c:db:0f:05:f6:
                    47:31:4b:be:e0:ed:5b:5b:4d:10:25:4f:1d:3b:da:
                    41:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:39:02:6C:B3:F1:95:82:31:1B:88:C6:73:6C:EE:63:83:D6:08:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cad6a93-4de9-32f8-b777-1196979dc7a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:4d:e1:46:04:c3:f3:b5:59:ee:5a:57:9f:36:18:91:ed:9f:
         21:45:3d:9c:8a:30:fd:8b:b9:77:7a:4f:6d:a4:40:21:bf:88:
         cd:e9:8b:58:d1:da:73:8b:8d:45:2e:4d:54:61:36:92:09:95:
         9c:47:bd:8c:82:e7:a6:c7:14:6c:3c:51:ab:c5:a8:f8:93:6d:
         3a:9e:2a:b1:4a:cc:cb:6e:5b:95:1c:45:08:25:23:dc:4e:84:
         02:b2:34:88:e9:ea:c1:a0:d8:bf:19:c5:09:86:e2:28:48:89:
         2c:e7:72:43:21:e4:af:c0:bf:c1:91:97:3a:67:56:c0:0b:a2:
         62:59:53:40:78:4d:45:62:93:8b:e3:65:6a:ba:51:68:75:d0:
         8f:eb:04:60:47:12:60:45:84:4b:3d:4f:4e:1e:c2:39:73:97:
         e7:3e:0a:33:3c:a3:3d:4f:ae:b6:3a:1c:9c:c4:9d:0b:3e:24:
         5c:74:0d:81:7a:7d:cf:e5:52:6d:e3:ed:7d:52:6c:8a:26:d1:
         46:7c:6e:8e:60:67:88:3a:a9:52:76:4a:cf:fd:90:16:34:b4:
         bd:fe:74:fd:c6:f7:17:a2:cd:63:6b:e0:5e:e9:02:9f:13:2e:
         38:50:5b:91:02:cc:ae:46:0b:82:1b:f8:49:3f:2d:d1:1c:0c:
         9e:47:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:47:05 2024 by rpki-client on console-ams.rpki-client.org