Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c56ab218-bdbb-3e52-8c7f-7134a653c07d.roa
File:                     c56ab218-bdbb-3e52-8c7f-7134a653c07d.roa (raw, json)
Hash identifier:          S50d2pl4MgJ4eWGLdTCf6Hv60LYTi8lXS1pznn36BFk=
Subject key identifier:   B6:7D:4F:A6:86:0E:8F:78:CF:8B:03:73:33:02:8B:08:FD:F9:E0:18
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584765A1052236E6B6CF9FF29BD8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c56ab218-bdbb-3e52-8c7f-7134a653c07d.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     16625
IP address blocks:        23.14.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a1:05:22:36:e6:b6:cf:9f:f2:9b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=9a89f23c-3711-464f-9f1a-f11c2a189377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:03:b8:27:db:17:91:90:4a:74:3e:af:48:06:
                    3d:06:73:00:dc:f1:bd:ab:1c:df:e2:21:6e:0f:d4:
                    ab:94:d2:11:16:75:f6:3f:8b:3b:99:97:84:18:c4:
                    2a:1a:9f:31:b6:b9:6b:3d:28:22:f3:2d:e3:38:88:
                    20:2a:e5:1f:fb:2f:96:4b:69:97:99:e1:b3:3d:04:
                    b7:52:9f:6c:fe:63:44:fb:97:2f:b5:68:bc:54:54:
                    f6:86:47:8e:ac:e1:59:9a:7d:ad:a9:93:dd:be:f4:
                    36:eb:b0:24:1d:3f:fc:a8:ec:25:95:09:c4:a6:2a:
                    fc:1e:27:bf:e1:ba:9c:1d:be:04:9f:76:7e:fc:96:
                    c8:01:aa:97:3c:53:09:25:e0:42:f3:4c:dc:06:a1:
                    ff:eb:e9:ba:44:38:59:7e:3a:61:fe:ea:3b:84:f8:
                    8a:ed:1b:2f:9c:a1:0a:b7:81:46:73:16:a8:42:a7:
                    88:39:f7:5d:47:db:ef:db:7c:05:cb:79:12:5d:87:
                    ab:82:b4:61:7e:b5:22:7d:50:17:fe:ed:5d:4b:b6:
                    15:5c:14:8f:99:4c:2a:10:59:25:11:87:dc:af:b7:
                    db:83:fd:95:5e:e2:fd:85:98:30:dc:a9:3f:06:54:
                    06:4f:f6:2d:42:a2:72:f3:bb:05:05:94:0a:76:37:
                    41:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7D:4F:A6:86:0E:8F:78:CF:8B:03:73:33:02:8B:08:FD:F9:E0:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c56ab218-bdbb-3e52-8c7f-7134a653c07d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.14.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:3c:d5:cc:61:d5:74:5f:05:cd:59:73:eb:fa:9e:f0:6f:98:
         c1:99:ff:e4:ed:ae:5b:7d:20:33:61:36:c7:aa:ce:ed:85:6d:
         fd:36:b0:ad:39:8f:43:39:57:06:b5:9a:d8:47:02:c1:be:81:
         b8:78:0a:d9:c2:0e:0e:8e:6f:14:1d:75:5c:c0:9d:26:58:21:
         d7:85:9e:1e:17:30:48:a0:38:56:08:3e:f1:b8:c8:cb:23:42:
         ed:01:c3:09:cd:5f:ef:9b:d5:3e:e0:e4:51:99:dd:fe:9c:65:
         95:52:46:69:64:55:fe:2d:e0:a9:a6:09:9b:f5:79:55:56:b3:
         b1:e7:17:0e:b8:e0:da:0b:d9:ef:ff:c7:04:21:de:e5:a1:42:
         8f:f0:2f:a7:af:f6:f6:22:2c:13:10:e4:38:7e:c4:7b:38:7b:
         0e:a9:d7:a6:d7:cf:11:e1:d7:26:6a:2d:cb:7b:93:8f:81:35:
         44:29:25:ea:db:e6:16:16:d9:04:df:6a:55:ad:6c:7a:01:d9:
         96:8f:e3:5c:18:7b:a6:f2:7f:bf:1f:10:52:8a:42:55:74:4e:
         65:50:e5:26:77:51:6a:b0:a0:49:45:cb:fa:ee:76:da:9b:ed:
         b9:5a:76:20:64:a1:c0:4e:5c:81:10:8e:85:93:41:d8:6f:90:
         14:a2:7e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:30:31 2024 by rpki-client on console-fra.rpki-client.org