Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ea9f4db-5e76-3732-ad19-0e5fdc72cb98.roa
File:                     8ea9f4db-5e76-3732-ad19-0e5fdc72cb98.roa (raw, json)
Hash identifier:          jjARagpsXzBdglS0oiwbKTMjfqeYwISRWND0owWZ3nM=
Subject key identifier:   D0:47:6D:FE:77:E3:30:D4:4C:EF:DC:61:D3:29:C2:23:87:DC:97:5E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CA3F96EA05B6EF00D0E05E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ea9f4db-5e76-3732-ad19-0e5fdc72cb98.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.203.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:96:ea:05:b6:ef:00:d0:e0:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=a0e07c6a-efac-4218-a25c-8595c4b12173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:97:02:6d:ab:cc:f3:c7:fa:e6:ce:7a:d8:
                    ce:06:de:d3:a5:cd:65:01:bb:64:cf:57:7f:46:09:
                    3f:f0:a7:79:19:12:ae:6b:8b:50:7e:32:ad:a1:e6:
                    e5:91:aa:20:01:74:b2:28:02:bb:41:11:70:4c:cd:
                    20:0e:d0:11:31:ce:56:28:ac:77:46:6f:a0:a2:3c:
                    aa:36:84:39:f3:fc:6a:27:7a:1a:ff:46:c6:d6:5c:
                    35:90:72:46:47:92:4a:67:7e:56:2e:09:82:8b:36:
                    88:19:a4:43:49:5b:b9:18:09:9b:f7:f0:7b:0a:92:
                    c6:bf:a4:73:e1:29:d0:0e:19:b6:6c:27:38:e6:27:
                    1b:27:bc:21:1a:9e:d6:84:26:d4:77:ca:e6:42:5f:
                    60:45:eb:32:f8:3f:81:3d:00:c8:41:28:76:77:da:
                    31:84:5d:8f:fa:2d:33:c3:26:63:1b:36:1e:f2:33:
                    98:0c:6f:34:81:88:45:52:7b:ab:7c:82:0c:d9:73:
                    91:cd:53:71:63:25:97:58:f3:26:f0:01:ae:e5:71:
                    b2:11:01:04:72:29:6e:ff:b8:37:b7:7e:e4:45:7c:
                    41:07:14:3a:df:e9:fc:f6:40:7d:07:e3:58:08:d0:
                    59:5f:97:99:3a:6c:06:d7:d8:64:eb:6b:85:01:b2:
                    0c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:47:6D:FE:77:E3:30:D4:4C:EF:DC:61:D3:29:C2:23:87:DC:97:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ea9f4db-5e76-3732-ad19-0e5fdc72cb98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.203.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:06:8e:3b:09:9c:a5:f6:c6:ad:b4:c2:ca:a1:84:f5:14:40:
         3c:a3:32:9f:48:d8:92:08:9d:f7:d9:3f:a4:d8:a9:97:97:54:
         ca:c4:92:df:39:37:e9:e0:3c:6a:86:d2:ac:0b:b4:84:4b:01:
         dd:4d:bb:28:69:e3:b2:31:82:0b:92:f3:06:f1:93:50:b7:58:
         2e:5d:62:cb:4d:d5:b3:ee:fa:41:59:11:86:41:c7:f0:9e:9c:
         ec:f1:1a:a8:90:d0:47:53:36:1b:05:8c:56:e8:66:17:0e:b6:
         67:41:7a:71:93:a7:79:bf:49:a0:78:f9:1f:92:df:2f:e3:dc:
         1a:cc:32:eb:dc:56:36:00:b7:01:46:4e:2e:58:f6:f4:c0:25:
         56:5d:16:85:5a:a2:d5:fd:62:2b:b5:57:a9:cf:3a:3c:25:15:
         89:52:82:03:13:c6:52:cb:5f:2f:3a:4a:56:bf:2c:cd:95:d7:
         39:91:d0:50:a7:39:5f:5d:91:85:a6:0b:a6:52:00:15:3f:22:
         2e:89:7d:41:f5:d8:08:bd:83:b9:e8:fe:0c:c1:d9:b9:9e:85:
         35:9a:39:15:e1:d8:f4:ea:d4:bf:0d:7f:e7:b2:67:8b:a5:47:
         f6:d1:05:f8:11:ec:99:3e:c6:12:9b:49:b2:5e:fb:18:0c:0f:
         66:0a:c9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:30:07 2024 by rpki-client on console-fra.rpki-client.org