Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b423dd1d-b2a6-3bb2-9f79-c6bc7c0ab7fd.roa
File:                     b423dd1d-b2a6-3bb2-9f79-c6bc7c0ab7fd.roa (raw, json)
Hash identifier:          nPmnVP7afD85lEk6u8Y6wSGysVDvUNAp6Vi9dUXgcH0=
Subject key identifier:   97:7C:AC:7C:98:70:AC:C9:1E:D9:31:C8:6A:A1:17:1D:A5:6B:6B:55
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A400C6B9E497A950C14D6000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b423dd1d-b2a6-3bb2-9f79-c6bc7c0ab7fd.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        23.194.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:c6:b9:e4:97:a9:50:c1:4d:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=b82645e0-3fd7-48aa-9b76-d07e2b0a995f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c2:31:92:54:66:8f:2e:d2:89:14:4e:46:d9:
                    fe:81:f9:d1:a7:72:11:d2:42:cb:54:b9:18:01:1b:
                    a6:85:c4:2e:aa:13:6b:8b:39:e2:d0:81:e8:74:9e:
                    cf:90:05:1b:6e:91:a7:21:43:24:c0:45:ee:df:76:
                    88:02:21:af:7e:fb:18:5c:b5:90:fe:78:04:59:88:
                    a7:08:ef:4b:08:08:9f:e1:6e:b5:f5:86:03:91:5e:
                    b6:bd:0e:14:45:e2:b4:10:a7:7e:c8:6b:58:b0:e3:
                    e0:ba:ca:bd:82:2f:d0:7b:f2:4f:31:c4:5d:9f:33:
                    a6:33:25:25:7b:e0:83:ff:7f:02:69:9f:4e:4a:3e:
                    86:11:fb:67:b6:d0:ae:a5:6b:c3:60:b2:ba:05:99:
                    a4:b3:7e:2e:2d:f4:b8:dd:9f:15:58:14:04:63:df:
                    18:a1:54:33:46:50:d3:3e:e2:38:28:eb:b2:66:9f:
                    ab:b6:f3:93:7d:93:e9:cf:27:e1:b1:c0:88:f8:a1:
                    2c:df:b4:2e:d3:93:82:c7:5f:d8:1c:45:34:55:5b:
                    2f:6e:79:27:a8:c7:af:12:92:c4:f5:a1:bc:61:d3:
                    d1:e5:14:74:57:84:1d:54:7a:2b:16:05:1e:5d:d2:
                    18:37:ee:dc:23:ea:3a:bc:86:7f:41:32:e5:b0:37:
                    43:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7C:AC:7C:98:70:AC:C9:1E:D9:31:C8:6A:A1:17:1D:A5:6B:6B:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b423dd1d-b2a6-3bb2-9f79-c6bc7c0ab7fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.194.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a8:92:5a:2e:1e:c5:e8:c7:a5:84:ac:f9:8f:b7:56:e6:5f:
         b8:8d:fa:4f:8a:57:69:d9:71:fb:ea:c9:87:ea:67:b8:18:4d:
         49:95:e8:45:f2:02:08:40:79:04:be:49:d1:aa:fe:29:0d:fe:
         23:5b:54:53:71:0d:c8:05:1a:8a:9e:3a:2f:ed:72:1a:de:6a:
         1a:55:04:30:14:88:f1:60:bc:ae:1b:94:52:e5:21:a8:fa:9a:
         07:e5:ad:63:f1:36:6f:24:a9:6e:ae:c7:25:9f:8f:5b:03:97:
         cb:fb:25:b8:81:9d:55:78:af:cd:72:d3:73:70:8d:c0:c5:a4:
         c3:f9:b8:b4:d7:5f:9b:aa:81:0a:86:c0:29:cf:f7:b4:9a:84:
         d4:3f:2b:2c:23:6d:ec:c3:63:24:f7:7c:ba:f3:b9:6e:cb:ee:
         a9:51:3d:80:aa:c6:30:e9:66:5d:fd:64:ca:40:9b:19:75:66:
         e2:59:70:92:35:64:2e:a3:93:b1:7e:b3:ff:12:cb:1a:e6:96:
         d0:e3:b9:74:5c:d0:ae:6f:a8:5f:a9:91:67:1d:d9:76:e8:a4:
         85:e6:e3:36:d7:60:ef:c9:e7:10:18:28:15:98:9b:9c:2e:cc:
         6c:b6:c6:6f:84:a0:13:93:92:06:cf:6a:93:21:93:3c:d0:26:
         21:5d:af:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:49 2025 by rpki-client