Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6523bfb5-9409-336e-ac36-3b6a19ae0932.roa
File:                     6523bfb5-9409-336e-ac36-3b6a19ae0932.roa (raw, json)
Hash identifier:          hm0zdByn9tGLIc4BZyZbUetA/+4Jai/MTHOVPu26eno=
Subject key identifier:   DF:C6:FA:35:89:50:B6:B1:60:41:7F:9A:D2:FA:1F:AE:D4:D1:4E:FF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858488DAB66D44CC896248C04586C
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6523bfb5-9409-336e-ac36-3b6a19ae0932.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     20940
IP address blocks:        23.54.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:66:d4:4c:c8:96:24:8c:04:58:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=1ad9782c-c662-4b62-8006-6d7afa328f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:27:5a:ad:94:30:f3:a3:42:09:d5:04:82:
                    f1:96:5b:a8:70:01:8e:bf:0b:ba:8c:90:1d:e2:aa:
                    9d:cc:d7:39:31:ed:1c:6f:35:f9:a7:0b:9e:b5:22:
                    c8:ff:c7:74:06:f9:2e:62:17:85:9f:4a:14:85:ff:
                    8f:bb:d4:ce:ce:81:c3:96:7b:d2:26:cb:27:b8:ef:
                    fd:ee:f4:7d:02:43:69:71:87:b7:a8:a4:61:87:05:
                    fc:a9:81:11:46:53:b3:e0:eb:80:0b:42:c9:1a:a6:
                    23:1c:92:86:08:a8:3f:32:f6:c2:d0:26:7e:17:33:
                    20:93:b2:fc:5e:75:b5:fa:c0:35:11:96:25:c7:6c:
                    9a:d9:4f:3b:be:48:a2:d1:b9:0e:f5:41:7a:d3:23:
                    6f:46:84:65:8e:7c:dd:82:b1:3c:38:1d:5c:8c:fe:
                    d9:43:04:f7:06:fc:19:ed:7a:06:f2:a0:b7:10:cd:
                    02:7d:be:5b:9d:5a:b0:3c:fb:91:b2:f5:47:7b:e0:
                    25:25:67:68:41:3b:08:9a:b2:38:43:25:b4:ce:07:
                    5c:b7:44:58:33:46:5f:a7:f9:2e:12:68:cf:5f:16:
                    ff:3f:cd:d4:ec:c8:86:ac:7c:f7:b7:5c:7e:ee:96:
                    83:f3:b8:86:c3:00:ee:cc:33:54:b3:ba:42:23:35:
                    f5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C6:FA:35:89:50:B6:B1:60:41:7F:9A:D2:FA:1F:AE:D4:D1:4E:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6523bfb5-9409-336e-ac36-3b6a19ae0932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:35:c0:14:3b:3d:55:19:11:b5:8d:c2:c1:6b:23:d7:26:2b:
         78:d7:e8:83:49:f6:4f:53:bc:95:ad:ca:10:f4:ba:58:b0:2e:
         f1:75:b4:48:03:18:6f:05:ad:21:ae:b9:ea:6d:f4:34:61:29:
         5f:b9:ed:e9:79:99:ab:91:b1:39:6d:f7:ec:a9:a0:b9:89:ce:
         f3:91:85:b7:d8:ff:2c:0d:ca:41:c3:4d:df:1f:46:ce:87:48:
         f2:ca:89:cf:37:22:a9:5b:c3:f0:e7:63:78:dd:e7:e7:49:27:
         d7:2d:13:19:8d:53:33:d1:2e:af:19:10:b9:8f:35:e4:9d:61:
         72:a5:e6:46:87:b7:1b:c2:97:bc:8a:ae:76:6b:8f:34:3e:be:
         73:69:61:97:ae:81:d3:e5:5b:af:73:f1:23:b9:f0:c8:17:2b:
         a4:bf:7d:34:6c:c4:02:06:06:0f:b6:d3:4a:6a:3c:ff:e4:12:
         85:08:e3:03:c5:58:81:f6:c4:12:d1:9e:4e:6e:65:97:94:ae:
         58:0c:62:cf:7c:6d:c7:19:0e:d6:11:8a:47:03:b8:fb:09:c8:
         07:b5:b3:17:5a:9f:6b:8c:34:a7:73:61:6a:ea:0c:87:b7:14:
         91:c0:58:de:ea:77:96:3a:5d:74:b4:60:49:25:a3:e2:13:4d:
         8a:0e:80:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:44 2025 by rpki-client