Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6b6fd947-ca7b-33e3-b5a8-1f67a51590c2.roa
File:                     6b6fd947-ca7b-33e3-b5a8-1f67a51590c2.roa (raw, json)
Hash identifier:          mhrLBsExP1pDvS6YsXzEJFAhS5+AgQkjNaEMbMphzPA=
Subject key identifier:   5B:5F:86:53:3F:7A:1E:12:EC:C8:69:3E:0C:8B:55:AB:AD:92:E5:23
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36C9C24A06888F438CED00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6b6fd947-ca7b-33e3-b5a8-1f67a51590c2.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.54.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c9:c2:4a:06:88:8f:43:8c:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=58844e1a-a62c-4ce2-bee7-ce989fd094b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d9:61:f0:52:01:4c:4c:bf:9f:ec:48:e2:3e:
                    63:de:4d:e1:0b:33:14:c4:3d:6b:16:b3:dd:48:f8:
                    cc:b0:ea:35:82:93:c6:52:48:9a:9f:20:d2:1c:6a:
                    ce:df:57:41:c1:64:c6:d4:86:0a:dd:9b:ce:44:e3:
                    fb:f1:56:14:f5:23:7b:67:9a:62:1e:a7:b7:e0:48:
                    7f:e2:67:3d:0d:32:a3:cd:05:05:90:a9:2d:a2:6f:
                    22:93:07:d9:54:62:e4:04:c0:32:4d:d9:67:5c:8b:
                    99:a7:c8:5e:f3:cd:17:a2:a3:05:d0:02:76:60:78:
                    8e:ff:21:39:10:9b:fe:46:53:de:60:d5:cd:28:e3:
                    ef:88:38:2f:da:5f:81:d8:4d:98:3b:50:33:d3:e6:
                    96:f4:da:1e:9c:a3:0a:05:52:15:36:21:98:fa:e1:
                    b9:13:cb:05:21:fd:c5:64:2d:d5:08:e4:c1:5d:f4:
                    04:4d:30:4e:ad:4f:ea:f6:06:77:e9:6c:49:3d:5e:
                    a1:4e:d1:0b:8b:0a:d5:9a:9a:d1:b7:b7:99:41:30:
                    aa:06:ad:9a:4d:a6:90:37:07:61:e3:2a:b2:5a:94:
                    a5:60:62:19:a9:89:af:f3:49:f5:70:f5:07:13:88:
                    dd:ca:2b:3d:0e:60:ad:1c:fd:88:74:e4:c8:03:89:
                    74:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5F:86:53:3F:7A:1E:12:EC:C8:69:3E:0C:8B:55:AB:AD:92:E5:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6b6fd947-ca7b-33e3-b5a8-1f67a51590c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:33:d6:65:66:70:18:b7:22:90:50:2c:54:31:cd:1d:da:a6:
         ea:e6:87:4c:39:d7:d9:10:fc:87:f0:c7:2e:12:5c:55:1a:4c:
         c0:00:28:14:cb:7c:47:23:c4:80:a4:01:35:f3:8b:ee:b3:7e:
         45:10:da:b7:cf:30:03:9b:80:50:47:d7:8c:b0:42:49:20:2b:
         91:24:5e:c7:bc:76:bb:7f:49:17:79:f2:bf:0b:9b:c9:f9:8e:
         00:ac:c5:28:64:c0:94:0f:59:e4:7c:1b:16:98:a0:ff:fe:54:
         d8:f2:08:29:f8:82:ce:7f:6f:71:34:97:5c:74:ea:0d:0b:09:
         02:00:4e:76:13:25:0e:6b:d4:b4:a9:e5:85:d5:cc:1a:84:c9:
         fa:09:34:6e:bb:d9:f0:00:4f:a6:02:b3:5e:0e:b7:ad:9a:70:
         68:c9:89:63:8a:b2:3a:1b:f8:94:c3:66:48:58:6e:c0:db:f3:
         5e:4e:90:19:49:3c:20:30:81:8e:e5:e5:c5:a9:57:50:70:a6:
         50:e3:f7:bf:0f:d5:c1:67:be:d4:19:7f:b2:fd:5a:ff:ae:6e:
         dc:f1:de:0c:15:da:ac:65:38:4c:c4:90:4f:28:95:0b:b9:1e:
         e4:4c:28:31:1a:2b:8c:05:d0:12:a8:47:dc:d7:c1:5b:84:75:
         34:fd:85:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:20:54 2024 by rpki-client on console-fra.rpki-client.org