Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7797fa14-1a05-350f-bc0a-0cbf51b503b8.roa
File:                     7797fa14-1a05-350f-bc0a-0cbf51b503b8.roa (raw, json)
Hash identifier:          uj5YYE+0ljgy+A4HZULYzhWmpKiRjCQ7oV8OcrlLKNc=
Subject key identifier:   EE:B7:F2:70:7B:2F:22:B3:93:22:63:B8:36:D7:61:A1:C7:48:65:3E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584754E0F244E6D89B2B71A9DFC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7797fa14-1a05-350f-bc0a-0cbf51b503b8.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     16625
IP address blocks:        23.64.138.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:f2:44:e6:d8:9b:2b:71:a9:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=44ac8e23-0143-4f17-807e-649226cd16ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f4:82:15:25:97:57:d9:e8:03:0d:26:77:cc:
                    9d:09:79:3f:5e:93:58:15:ec:cb:65:4d:03:88:53:
                    72:71:07:8b:03:71:73:d5:e3:16:a9:34:6d:11:b8:
                    bb:7c:f5:4c:48:c8:5b:54:2c:fd:07:7a:43:57:4d:
                    df:8f:6f:e2:55:9c:bd:1a:b1:74:e8:b8:50:44:f8:
                    47:21:8b:77:79:b7:7e:7a:30:70:e1:80:da:fb:d5:
                    11:58:c2:23:1b:01:15:ad:1a:59:04:42:28:08:d9:
                    d7:43:99:61:5e:5a:d0:07:c5:9a:8b:05:19:ee:a1:
                    31:5e:be:d6:cd:c9:21:57:63:df:f2:4d:fa:71:45:
                    db:93:3e:69:a8:8b:11:a2:a5:b9:88:ad:94:d0:de:
                    ef:48:83:21:c7:51:90:85:5c:cc:75:c9:0e:76:26:
                    91:c0:fa:29:03:c6:d8:7a:2c:6d:08:23:3f:8b:3c:
                    c1:39:b6:98:43:d0:18:0d:8d:d6:e0:73:b2:fa:90:
                    f0:8b:12:f8:4f:cc:b0:06:81:ee:50:9c:9d:51:b5:
                    e8:1b:3b:15:31:dc:d8:44:cc:ae:c4:5f:59:76:6a:
                    f6:83:18:81:77:aa:05:3d:54:81:30:78:2f:46:b7:
                    a0:10:23:2c:62:34:6f:e3:0e:36:1f:2b:a7:c9:92:
                    90:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B7:F2:70:7B:2F:22:B3:93:22:63:B8:36:D7:61:A1:C7:48:65:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7797fa14-1a05-350f-bc0a-0cbf51b503b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.64.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:1c:d1:e6:a7:13:97:dd:68:51:0f:17:c2:52:27:d1:84:a9:
         cb:4c:cd:ac:5d:a0:35:bd:53:85:27:e3:8c:0c:54:1d:e0:c1:
         28:85:59:db:05:41:14:11:76:e1:ea:6b:6e:f1:cb:f2:d4:38:
         4e:32:f0:71:56:2f:9d:91:fa:41:7a:3f:f8:ce:9a:d9:18:fd:
         2f:ff:19:9f:96:c4:84:aa:0f:06:ef:8c:56:d0:82:8a:27:f5:
         ea:83:01:68:0c:9d:d1:91:5b:10:ed:ac:9c:f0:28:ad:32:12:
         26:b1:c9:f3:f6:cd:5b:16:40:08:89:48:a9:11:cb:43:53:a9:
         33:8c:f9:db:c5:f0:68:f0:da:38:ff:bc:c4:0a:00:60:cb:87:
         0f:e1:47:9b:47:ed:d8:31:3a:c1:c6:89:28:c5:65:4f:37:22:
         a4:fa:d7:87:95:1d:d9:68:44:9c:e9:ea:0d:16:37:c5:a1:d1:
         f9:bc:f5:d3:5f:37:af:59:38:17:b8:a1:09:05:19:61:bf:cb:
         00:91:6f:4e:64:23:45:de:76:18:74:02:a4:8e:73:95:43:d3:
         dc:97:e6:35:40:1c:cd:4e:4e:0f:64:06:5d:48:50:6a:4a:04:
         79:2e:2d:94:83:b4:4b:4e:5a:15:22:bb:2c:34:61:93:02:25:
         dc:b2:03:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:32:17 2024 by rpki-client on console-ams.rpki-client.org