Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8946a42-f418-3ed9-b783-720e163153db.roa
File:                     a8946a42-f418-3ed9-b783-720e163153db.roa (raw, json)
Hash identifier:          HOS3SJm1Q6OswGMwt3kFCY2Cd4PenMSnmXp5WLwfolg=
Subject key identifier:   3F:23:92:74:F8:A7:35:1A:4B:0D:55:95:5A:B2:32:32:0F:77:91:30
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848774F9FDE7020C474A34B5640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8946a42-f418-3ed9-b783-720e163153db.roa
Signing time:             Tue 07 Jan 2025 13:48:31 +0000
ROA not before:           Tue 07 Jan 2025 13:48:31 +0000
ROA not after:            Mon 07 Apr 2025 12:48:31 +0000
asID:                     16625
IP address blocks:        23.219.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:4f:9f:de:70:20:c4:74:a3:4b:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan  7 13:48:31 2025 GMT
            Not After : Apr  7 12:48:31 2025 GMT
        Subject: CN=b1acc179-3827-4f98-a6e4-24606e201ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ea:cf:be:22:32:34:2a:2e:8c:34:87:b6:3c:
                    53:f9:22:9a:cf:75:6f:27:d7:b6:43:2b:7c:57:ae:
                    90:53:b2:a1:15:b9:3d:43:54:8f:a1:df:4e:ee:1a:
                    84:97:83:59:cf:31:95:f0:32:bc:4a:80:9a:49:9c:
                    66:dd:57:ff:24:7a:5d:f0:1d:1f:41:5a:06:55:57:
                    cc:82:80:05:0c:d4:19:13:c3:4b:b8:bd:a8:90:49:
                    98:b5:12:34:79:bd:b4:e7:77:16:ef:a9:0a:9a:8b:
                    55:6f:06:5e:94:17:12:82:68:b1:dd:0d:67:90:f1:
                    61:ec:d9:f1:13:c6:78:34:22:4e:ac:2f:3c:2f:64:
                    e4:bf:9f:c4:12:6c:20:db:b7:ce:7b:9c:b7:6e:2e:
                    08:f3:e6:27:3e:01:14:9a:bd:e0:a5:51:3b:98:d2:
                    0d:09:0f:05:69:06:13:ff:7d:80:93:8b:0d:d0:bc:
                    10:8f:b4:74:ec:56:2d:e7:87:57:e6:66:b4:79:0b:
                    ff:43:d5:ad:7b:49:fb:8e:e1:cc:eb:d0:6a:b4:72:
                    db:15:42:9d:35:db:a0:c2:b3:ea:f5:95:68:ea:29:
                    5f:7a:14:c2:88:22:5f:86:cb:c7:7c:d6:a8:fa:f5:
                    cd:c0:24:0f:67:d6:a4:7d:7c:4c:b5:27:1e:d1:8f:
                    62:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:23:92:74:F8:A7:35:1A:4B:0D:55:95:5A:B2:32:32:0F:77:91:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8946a42-f418-3ed9-b783-720e163153db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.219.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:bd:06:54:0e:dd:be:65:db:ab:64:d9:e1:44:d4:ad:11:77:
         b1:8c:ee:c0:86:a1:14:c0:9a:ea:c8:dd:7e:f1:ba:d2:2e:b5:
         0d:a1:e2:17:e1:3b:7d:ea:bf:bb:3c:a5:2b:57:e9:3b:e0:b3:
         b4:da:7f:c1:b4:2a:cb:e0:78:66:ee:a0:1c:6c:64:e1:90:03:
         25:58:76:4c:e3:fe:72:33:a7:f9:f3:95:69:f5:5b:a6:f5:a2:
         78:d7:e4:c6:d0:55:dc:98:dd:6a:47:91:f5:37:ff:25:a9:9f:
         b5:5d:fd:6b:aa:77:16:ba:70:2b:aa:18:c0:25:b1:99:db:02:
         20:49:43:a0:53:e9:a5:86:5d:9e:14:7c:e2:30:11:39:38:fb:
         47:0d:56:e0:48:a2:1f:6f:56:8d:d4:a1:f3:e3:b1:c5:7e:3b:
         e7:66:8f:43:fe:2a:52:e3:62:bf:7a:8e:2d:07:22:1c:99:8b:
         33:ca:f9:f8:fd:fe:63:d3:8a:93:3e:8a:ab:69:e5:c3:60:ef:
         86:07:4a:6c:f8:5c:7f:3a:4c:7b:e4:2b:9c:db:d1:55:b4:1c:
         6a:ba:5e:5c:38:43:81:dd:1d:a7:b1:78:0e:00:a6:70:fd:84:
         ba:bc:64:44:5b:02:08:e1:d4:4a:9a:ff:b5:5b:7f:6e:38:72:
         08:9f:c5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 15:05:44 2025 by rpki-client