Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b254cd0c-599f-3a38-9767-5adef2d88c75.roa
File:                     b254cd0c-599f-3a38-9767-5adef2d88c75.roa (raw, json)
Hash identifier:          jKFKMApLf/oCDe/OIGc01DDubXmC2I6CADypcxtjVeI=
Subject key identifier:   EB:7B:37:31:6C:EA:40:27:E7:57:4A:04:ED:C9:1F:5E:6E:9A:31:4A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848BE8639CF7E4AA97F3AFFF480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b254cd0c-599f-3a38-9767-5adef2d88c75.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     16625
IP address blocks:        23.216.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:39:cf:7e:4a:a9:7f:3a:ff:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=848365c2-6bc0-40f1-9371-35e78013a42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7e:ec:3e:09:38:ea:f3:fc:dd:24:8e:4d:ee:
                    6f:ea:da:fe:c2:2a:60:bb:0d:7f:f0:e6:c7:ea:de:
                    bb:7e:77:d6:72:5c:2b:53:e7:99:a4:d8:3f:36:64:
                    f0:ca:43:d5:79:f8:25:fa:b3:d3:30:dd:5c:8e:cf:
                    d4:9a:92:bb:99:52:4e:65:ee:99:25:b9:7c:40:fc:
                    2e:0b:e4:03:d5:cb:ff:3a:8f:1b:a5:ab:69:da:e0:
                    53:00:11:ac:90:ac:f4:f7:b4:df:58:cb:e5:c7:ff:
                    ba:34:16:24:1b:0f:6f:4b:16:e4:ec:d4:b8:73:b7:
                    fb:4f:6f:4c:55:d6:d3:ba:68:a4:ae:56:bf:b8:38:
                    3d:5e:7f:c2:69:62:65:7c:25:9d:5c:c5:22:d3:78:
                    ee:1c:07:d1:8c:d8:c7:53:e6:5f:95:0a:42:4a:21:
                    40:01:0c:9d:4b:03:65:a1:2d:9d:92:63:ee:77:d6:
                    8a:79:9d:84:ef:7c:ac:e9:c1:b5:f2:c8:1a:d0:c6:
                    83:62:2b:96:ff:14:4d:b5:f2:2a:2f:1d:26:65:cb:
                    c9:06:5e:90:bc:3f:65:13:99:a0:92:d4:03:ae:b9:
                    c5:dc:06:76:a0:95:3b:1a:cd:2b:d0:84:68:65:fb:
                    a6:39:e0:b7:09:7d:36:31:da:e1:61:47:1e:3e:9b:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7B:37:31:6C:EA:40:27:E7:57:4A:04:ED:C9:1F:5E:6E:9A:31:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b254cd0c-599f-3a38-9767-5adef2d88c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.216.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:38:73:19:c6:59:88:b5:cb:05:b5:98:cc:81:b2:cc:85:46:
         6b:c6:f9:d2:58:92:86:ca:f5:eb:cb:f7:87:39:b2:30:a4:3b:
         b5:19:3c:c0:3c:4f:68:01:9a:6a:de:a9:e7:88:74:79:6b:17:
         9f:c8:b0:0e:69:47:5d:99:07:55:fd:85:93:5e:09:45:8e:d9:
         a3:07:af:0e:be:8f:08:de:94:bf:83:38:da:35:7d:7e:d8:3c:
         bd:bc:56:ba:99:1c:43:55:6c:d1:a7:59:fb:6a:66:9d:c4:1b:
         79:4f:2b:d2:d0:ca:79:46:56:eb:ca:b3:06:e6:1e:c6:fe:7e:
         8d:09:45:44:01:09:f8:96:36:a3:41:c0:4d:9a:25:58:f9:f2:
         14:e5:0d:be:97:16:c5:a3:9f:d1:3b:fe:52:c6:aa:1c:3f:d3:
         d7:23:75:2d:5f:95:58:7a:6c:8d:9f:24:f1:68:8a:d0:2e:13:
         2d:44:fe:a9:8f:95:b5:ac:bd:3d:54:c4:03:df:70:8c:3d:52:
         61:38:e4:44:54:30:5b:3c:2f:54:30:24:c1:02:ec:ee:97:d3:
         6b:83:5e:8b:5b:7c:4a:0c:47:cc:d2:98:59:7e:2b:b2:57:06:
         64:b8:78:5b:3d:c4:62:49:15:23:4a:48:0f:d6:97:5e:5e:b8:
         dc:e7:e9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:04:56 2025 by rpki-client