Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7938993d-d09a-30bd-90c2-0515366471bc.roa
File:                     7938993d-d09a-30bd-90c2-0515366471bc.roa (raw, json)
Hash identifier:          em0cjstoYMdPjcTd/RZgBOkwz3N45HPUgifx9D9g+vc=
Subject key identifier:   57:D9:AB:A9:8D:4A:33:6D:2C:24:73:D8:40:57:CA:07:10:48:CE:3C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584762D67371FD530F7D33C8B980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7938993d-d09a-30bd-90c2-0515366471bc.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     16625
IP address blocks:        184.28.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:73:71:fd:53:0f:7d:33:c8:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=6160afc7-d749-4c2e-b8da-83228b21c243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0b:df:0b:44:64:bd:af:e1:c8:27:af:de:a6:
                    be:6f:7d:2b:bc:4b:b8:ea:2b:d6:aa:b9:fe:80:f8:
                    ff:dd:a0:7a:a7:11:09:2a:22:01:cf:6d:31:f3:df:
                    9b:d9:29:b7:73:3b:48:f2:35:33:cc:29:6a:02:29:
                    79:e9:a5:5f:c7:e1:f2:98:e8:a0:0a:63:f1:6a:19:
                    b7:44:ed:5a:74:49:92:0c:4a:c6:d1:75:71:51:99:
                    22:34:39:81:93:54:17:17:b8:50:6e:cb:96:f5:49:
                    71:af:55:ee:65:78:81:13:dd:a9:77:53:86:b7:30:
                    90:f0:7a:8e:e4:67:10:d8:22:8d:ea:fa:9e:c2:f3:
                    1a:aa:7d:c9:97:d9:8a:af:ce:bf:ed:ce:a3:81:ce:
                    90:01:49:69:96:d2:67:97:84:24:84:3f:bd:69:0f:
                    d3:b0:98:01:6c:d3:bf:3b:ac:3f:ed:b2:37:56:3c:
                    87:6c:50:83:94:9a:b1:be:63:d5:92:2c:b5:84:17:
                    01:77:81:df:9f:4b:08:a1:e3:5d:88:55:5f:72:0b:
                    8f:ff:6a:93:38:14:1d:74:70:a8:82:b8:85:2c:c5:
                    8d:19:4d:82:da:49:ab:09:7f:6f:f1:99:b6:b7:5b:
                    26:3d:35:17:74:b9:3f:43:bb:81:71:d5:37:5b:e6:
                    bc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D9:AB:A9:8D:4A:33:6D:2C:24:73:D8:40:57:CA:07:10:48:CE:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7938993d-d09a-30bd-90c2-0515366471bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b6:7f:68:fa:6a:fd:69:ee:8c:52:17:ae:69:ab:7a:06:64:
         53:4c:91:76:73:19:b9:2d:b3:16:12:fb:07:ee:8a:bf:72:f1:
         aa:40:c3:8b:72:f4:42:8c:60:45:f8:b1:28:bc:6c:68:e4:91:
         f5:eb:ce:6d:51:85:8c:13:48:1d:a9:7e:fc:7d:1d:58:9f:41:
         74:52:c8:28:19:63:0a:a4:b0:93:6f:72:31:27:f2:f0:a1:f2:
         4d:16:e0:72:d3:b4:bc:66:43:b4:66:fb:72:9d:20:b4:ad:b6:
         7d:38:83:d6:ca:0d:56:32:a0:1d:7b:7f:a1:0e:73:64:e1:95:
         cd:9e:05:5a:46:9f:b1:66:f4:f1:34:44:00:f7:a2:79:35:b3:
         a3:04:5e:a8:2a:10:a1:4f:3e:16:08:3d:aa:4a:6e:40:f7:34:
         69:b0:2a:24:6e:6b:66:73:94:1e:6b:33:d8:ec:34:18:a9:de:
         a1:25:2a:f7:a2:8b:e3:5a:e4:ea:eb:de:2c:d9:da:a8:19:05:
         24:67:16:05:f3:a0:67:46:05:0b:b6:58:e4:07:1a:df:24:4b:
         bd:c1:81:50:27:fc:cc:60:ad:8a:b7:4a:60:a3:36:ed:ab:62:
         3c:af:c2:ff:82:ec:73:5e:6d:dd:b2:c6:be:bd:17:ee:5f:87:
         f1:c6:31:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:32:17 2024 by rpki-client on console-ams.rpki-client.org