Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/690c85e1-1652-374a-b217-d31ec19827c3.roa
File:                     690c85e1-1652-374a-b217-d31ec19827c3.roa (raw, json)
Hash identifier:          XvBqP3QrR8Q1XGrc3BO+IosiJbsw/EYtTca7wQV/cZs=
Subject key identifier:   08:D8:8B:FC:AF:E8:38:3F:C9:1B:F7:F4:79:20:DE:5A:DE:32:3B:F1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36CF6804F4EAB7E14BFB22
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/690c85e1-1652-374a-b217-d31ec19827c3.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.56.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:cf:68:04:f4:ea:b7:e1:4b:fb:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=a31c9a81-fbe3-4d1a-aa63-793195523aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:02:5d:28:04:d1:8c:00:d4:6a:e0:e1:54:
                    5a:28:aa:5a:89:66:79:10:d9:17:43:96:3f:66:3c:
                    74:3f:46:74:95:7e:c4:bc:e1:53:77:8a:4c:c1:54:
                    43:d4:ef:77:13:15:46:fa:2b:29:3f:ce:dc:93:f4:
                    89:8a:a1:b7:d8:62:7f:1a:3a:5b:cf:de:6b:58:9c:
                    a4:06:e0:4b:b7:70:72:15:9c:ea:f9:fc:8d:21:aa:
                    33:b9:19:9e:ea:5e:75:27:46:af:70:3a:a8:1d:83:
                    9f:3b:72:70:9e:f4:3a:53:9c:46:6b:10:76:c7:0a:
                    e1:8d:9f:aa:2c:66:aa:b3:6a:86:af:cb:58:b6:8d:
                    65:32:85:d5:3b:ca:9c:dc:2e:47:d5:4e:e4:fc:7a:
                    06:09:1f:b4:11:c7:ed:75:e4:d4:ee:1a:79:45:86:
                    fc:9c:1e:a5:c3:04:72:4d:c0:a6:8f:47:08:69:81:
                    31:27:5c:45:42:e3:07:1e:cf:02:a3:23:b0:9b:b2:
                    08:e6:dd:0d:f2:26:00:ef:71:4e:30:28:8b:29:63:
                    84:ef:55:82:3e:58:18:8e:8d:41:1c:3b:2c:06:7d:
                    44:c7:0d:5f:a5:e7:3a:ec:9e:82:41:5a:f8:a1:da:
                    82:47:d9:85:18:4e:da:3c:03:36:1e:b7:a3:b3:a2:
                    bc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D8:8B:FC:AF:E8:38:3F:C9:1B:F7:F4:79:20:DE:5A:DE:32:3B:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/690c85e1-1652-374a-b217-d31ec19827c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.56.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:8d:55:d8:d1:c9:2f:68:b7:cc:84:2e:7b:6e:11:c8:1b:81:
         28:20:1b:db:ac:af:d6:63:5f:73:00:9a:80:aa:43:c7:19:ef:
         5a:ca:a5:1e:08:66:cb:a6:d1:4a:41:f7:8b:c0:89:e7:b7:86:
         51:99:e0:8f:10:73:87:93:45:d3:51:18:36:b5:68:91:f9:82:
         da:7d:3a:ff:0c:c3:02:3f:3a:51:f4:c0:3d:38:3b:d0:7c:19:
         37:7e:39:4f:51:e0:0f:48:d7:e5:d3:d5:af:b3:44:b0:d3:16:
         f9:e6:d2:6b:78:0f:0f:bd:49:1e:e5:18:8e:c0:6a:ff:fc:ad:
         08:38:eb:88:f2:b9:81:f4:1c:98:13:75:d7:05:f5:8c:24:e3:
         3f:04:ae:dc:98:58:9f:13:6a:62:22:63:ac:82:30:01:79:6c:
         eb:17:77:0c:af:a3:a8:4a:f5:bb:2f:10:8c:0e:b2:62:e3:14:
         76:39:16:cc:20:38:0a:58:5f:24:a9:a9:a4:fe:16:52:8f:dd:
         63:e3:90:71:1d:b4:99:db:80:25:83:17:fd:cb:fa:c0:d2:df:
         6d:55:03:3d:39:63:a3:70:0b:cf:cf:f3:92:07:32:da:0a:01:
         f4:5d:77:e4:5a:37:98:94:0a:df:d1:4c:22:7c:ba:e9:9e:60:
         0f:97:d3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:51 2024 by rpki-client on console-fra.rpki-client.org