Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9619a71b-fbc5-38e8-bbb8-a1d975791119.roa
File:                     9619a71b-fbc5-38e8-bbb8-a1d975791119.roa (raw, json)
Hash identifier:          fyS0uvzKAdPrUvqNEyjLrfU1VXEQ+PddmsZy5SjMzxo=
Subject key identifier:   2D:2D:E9:A8:48:4E:8B:E1:0F:8D:E7:87:BC:D5:A6:90:B3:18:4F:1C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AF9BF39D08012F8E5FC1EE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9619a71b-fbc5-38e8-bbb8-a1d975791119.roa
Signing time:             Mon 28 Oct 2024 01:00:32 +0000
ROA not before:           Mon 28 Oct 2024 01:00:32 +0000
ROA not after:            Sun 26 Jan 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        23.63.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:af:9b:f3:9d:08:01:2f:8e:5f:c1:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 28 01:00:32 2024 GMT
            Not After : Jan 26 02:00:32 2025 GMT
        Subject: CN=c74774a7-ccb2-434b-b643-a9f649599c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:29:d1:41:a4:b2:eb:b0:5b:1a:f6:54:8d:35:
                    ac:7d:a8:d4:db:fa:e9:1c:32:aa:6d:73:ac:52:06:
                    6e:ef:86:6e:94:2c:27:c6:92:a7:6e:35:f6:e6:c7:
                    2e:3e:2d:4b:36:8d:22:b6:e1:e4:30:94:71:aa:5e:
                    5e:62:72:cc:e2:91:de:50:50:10:27:71:e1:19:98:
                    73:7b:bd:ca:c2:98:8f:e1:fb:8c:53:8e:b6:84:ab:
                    9a:ac:af:bd:d2:09:56:ad:e0:28:1f:b1:39:01:ed:
                    7e:8b:95:b3:b4:21:e6:96:75:d0:1b:be:85:b2:e6:
                    c6:54:19:b5:ff:25:88:20:a9:e8:81:d8:5c:b7:cf:
                    5f:b9:59:54:9c:c7:d5:78:82:a7:a1:f7:e9:85:d9:
                    3e:b6:e8:53:da:cb:2a:c8:1b:ef:77:8f:12:06:44:
                    84:c9:62:b6:08:cb:35:ae:b6:f0:a2:d9:09:42:76:
                    0f:20:3a:ec:0d:f3:bd:5a:00:c7:d7:8f:25:55:09:
                    9c:33:e5:4b:ad:d5:ed:db:8d:fc:92:86:59:8d:ad:
                    da:8a:fc:61:f3:19:44:ec:13:41:b6:da:ef:60:8f:
                    ab:52:f8:ac:10:da:fa:fd:76:a0:25:02:06:eb:30:
                    3c:ce:8c:8b:f7:09:18:13:50:18:29:95:75:57:2e:
                    49:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2D:E9:A8:48:4E:8B:E1:0F:8D:E7:87:BC:D5:A6:90:B3:18:4F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9619a71b-fbc5-38e8-bbb8-a1d975791119.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.63.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:9d:03:cc:3e:3b:e3:ea:7d:7e:44:2f:bd:5a:cb:ca:57:33:
         ac:f2:3a:7d:62:40:a8:6d:8d:b3:26:de:4e:c5:d9:45:92:2f:
         cd:18:0b:d6:9a:4c:0a:05:ac:ba:8b:14:78:6d:dc:a3:0e:8c:
         79:15:f3:ad:0f:f0:c4:20:b2:e0:5f:c2:c0:ac:b3:a8:9f:46:
         19:6d:13:69:fe:92:e6:8b:e4:60:61:77:13:a3:49:b5:94:da:
         6f:32:1f:cb:67:5d:2f:1e:6e:aa:de:53:fc:ba:8c:78:f8:18:
         dd:8d:07:a1:9f:db:b6:53:ef:7f:de:8e:6f:f5:c4:06:2d:fb:
         cc:a1:bf:25:8a:95:71:68:ed:dd:16:59:0a:6c:aa:c6:e9:fc:
         c7:85:3f:07:71:99:b0:31:b5:da:fc:eb:ed:14:51:04:09:0a:
         30:40:65:a1:23:18:91:46:8f:c3:17:f4:6e:1d:9d:32:54:52:
         54:4b:72:e3:89:fb:13:1b:a5:1b:83:f9:ee:a4:00:5b:b0:59:
         c6:4b:d8:94:34:b5:5a:71:57:b0:23:8d:9e:e0:59:17:0a:8b:
         a5:af:98:16:02:4d:11:c9:6a:68:bc:d3:f6:1b:a5:aa:86:99:
         e5:30:5c:dd:67:7b:81:42:40:3e:c9:df:4b:36:bb:46:d5:2c:
         b9:16:f5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:17 2024 by rpki-client on console-fra.rpki-client.org