Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c39f937d-fb3b-39fd-9001-0708ae7b1903.roa
File:                     c39f937d-fb3b-39fd-9001-0708ae7b1903.roa (raw, json)
Hash identifier:          nYx1HsAjip20OeKrlQ3j4C5diP+X4HE41fkqyCIeb0k=
Subject key identifier:   60:02:67:5F:4E:ED:19:72:8B:4D:37:3C:B8:DB:DA:16:74:4C:17:5F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C8DA0289F21223A8333AB480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c39f937d-fb3b-39fd-9001-0708ae7b1903.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     16625
IP address blocks:        23.200.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:da:02:89:f2:12:23:a8:33:3a:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=cc418ded-62eb-4c1e-8c47-6e2a0b4d7984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5b:ef:d5:a2:6c:3d:a8:f2:9c:27:c7:79:6b:
                    11:ca:29:ec:9f:c2:fe:c2:96:f7:60:60:ca:71:ae:
                    2b:07:36:32:ad:2c:2e:d8:21:f9:8a:55:cf:8d:cf:
                    c8:e6:b2:7e:7d:c0:be:58:a5:3c:a0:07:9c:a2:44:
                    f7:de:82:66:70:da:a2:12:e2:47:97:dd:76:8c:20:
                    20:53:32:fa:f7:ae:f2:f2:c6:b1:02:9a:ce:e9:e0:
                    fd:4e:58:34:a8:13:00:02:23:fa:64:1b:ba:68:df:
                    e0:7d:91:4b:cf:c4:5c:a8:92:c8:8a:c7:3c:46:b5:
                    4f:42:b8:0b:df:2e:60:bd:a3:31:79:ad:f2:76:80:
                    f1:f9:1f:2d:40:56:ab:06:72:cf:16:6a:45:a0:a5:
                    2c:65:43:71:65:70:23:66:9d:93:e4:f4:b6:77:c9:
                    19:f1:74:36:7d:09:f9:47:a4:ce:f1:f7:76:7d:90:
                    48:4f:ff:41:98:59:4a:1b:99:63:fc:87:4a:87:0c:
                    bd:93:38:15:dd:3c:9f:47:7a:b2:ea:2a:4f:09:4a:
                    eb:90:27:96:ea:df:e3:cb:10:51:82:d5:0a:35:ab:
                    9f:a6:5e:d5:eb:68:fd:65:08:8d:93:8d:60:d3:51:
                    a9:41:2d:4f:ab:cc:cf:19:7f:83:06:ee:c2:0f:75:
                    3d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:02:67:5F:4E:ED:19:72:8B:4D:37:3C:B8:DB:DA:16:74:4C:17:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c39f937d-fb3b-39fd-9001-0708ae7b1903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:3f:35:95:20:46:8a:58:3f:53:80:62:d0:95:5c:9a:7d:f9:
         7c:a6:c4:f5:22:c1:de:53:36:0d:0a:79:d8:e4:9e:8f:9f:58:
         86:ae:72:a5:f1:c6:57:1f:66:bb:19:47:8c:8a:44:e2:c3:d7:
         b6:bc:64:5d:0e:f9:82:90:8d:a6:53:30:0b:73:af:a1:50:12:
         62:b6:84:8b:2e:9f:cf:4e:52:76:7a:f4:5c:7a:45:c1:a7:11:
         b6:02:a5:92:0c:6e:f2:4a:7f:c8:43:50:75:ff:de:d7:41:e0:
         29:0f:40:39:a2:de:a2:ec:4f:00:1a:bf:25:bd:fb:75:96:50:
         ba:40:2c:1a:59:5c:30:73:c6:e0:a8:10:60:4d:47:b1:84:1c:
         6b:d7:fb:32:3f:bb:2b:34:b3:05:93:7c:91:4d:74:b1:a9:c8:
         a8:f2:47:41:18:55:c3:d9:cf:86:fe:8a:ab:b5:95:5e:11:c9:
         01:b4:bd:a3:11:61:9a:2f:cf:fc:1c:00:82:d3:4b:2c:de:7f:
         3a:e4:78:b1:19:0c:bf:ae:fb:89:0e:63:47:15:f2:6c:c2:75:
         3f:a5:94:03:de:37:2e:3e:26:ad:53:69:c5:88:0b:70:38:62:
         bb:09:00:82:c2:34:d3:f4:24:73:c2:b1:58:82:22:b0:71:8f:
         6f:66:7f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:21:40 2024 by rpki-client on console-fra.rpki-client.org