Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9f8b62e-82f8-3233-a426-49d82df0f41f.roa
File:                     c9f8b62e-82f8-3233-a426-49d82df0f41f.roa (raw, json)
Hash identifier:          XBPnMyYScxvKH72Ym/+nemFv1qYg/iu8qdo3aaM1OWs=
Subject key identifier:   8D:E5:BA:78:58:FD:15:FC:85:8C:0D:19:7E:87:F3:14:A9:0E:F6:C6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584765A0FD20934EB559EF11C700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9f8b62e-82f8-3233-a426-49d82df0f41f.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     16625
IP address blocks:        23.12.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:fd:20:93:4e:b5:59:ef:11:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=c742ae64-a9ee-4e04-a404-b6bb10769dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:44:b7:f6:be:09:8b:cb:d1:92:67:8b:25:
                    1f:b1:db:34:27:00:b9:a8:30:95:28:ea:ca:a4:79:
                    6e:42:48:a9:4c:53:49:3d:1a:54:61:7b:08:e3:78:
                    aa:51:08:d4:57:b2:57:c7:6f:ed:0a:5c:3e:dd:40:
                    cf:ad:30:b0:e5:54:a4:de:a0:46:f5:8d:47:03:42:
                    d1:36:f1:dd:db:a3:33:b4:90:d1:0a:f6:c4:e3:98:
                    5b:4e:66:10:71:35:a1:51:ef:60:f2:bb:ba:30:28:
                    ab:48:ec:5e:92:44:59:87:68:89:73:a2:fa:73:e7:
                    c3:2b:fd:e5:92:94:80:e0:10:75:b9:3a:75:54:0d:
                    f8:31:d2:d1:56:8c:39:ab:25:f3:a9:f5:a8:cc:73:
                    df:5c:7d:b2:8d:6a:81:e3:ba:08:a6:9f:09:0f:5e:
                    0b:b8:cc:a2:65:24:fc:00:93:b7:06:fc:e7:3b:ef:
                    ff:f0:99:f8:bd:08:29:e6:18:57:15:99:ae:cf:65:
                    ea:80:6c:13:a1:d8:55:f8:3b:ed:77:48:4f:f9:69:
                    de:34:a7:ab:e4:9e:8f:2b:39:c0:49:01:e1:56:f2:
                    b0:d6:e2:40:17:de:c6:d7:fa:c5:b8:24:33:3e:f3:
                    a3:06:b9:65:94:b9:24:04:b7:18:15:ab:ec:58:46:
                    b1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E5:BA:78:58:FD:15:FC:85:8C:0D:19:7E:87:F3:14:A9:0E:F6:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9f8b62e-82f8-3233-a426-49d82df0f41f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.12.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e4:b5:c7:bb:2d:b0:b8:a3:34:bc:5f:c1:2e:9c:36:7e:12:
         58:f8:f4:12:db:a4:80:29:a6:c4:d9:5a:84:91:11:54:41:fc:
         d7:01:7e:02:96:23:60:b8:46:b1:54:0b:d0:c0:81:23:73:8e:
         93:77:05:84:6a:50:f1:27:6a:e3:16:f0:44:d2:a1:4b:81:4b:
         0c:f5:d8:be:bd:a1:dc:a5:1b:78:33:53:85:50:c7:e7:fb:63:
         fd:17:63:58:5e:65:85:e4:62:08:b4:eb:ad:cf:5f:1b:ca:fb:
         10:cc:74:ae:88:e3:68:d3:af:ff:2d:f2:09:18:74:1e:7c:8c:
         a6:59:ed:31:c4:c1:de:d1:9c:9f:dc:bd:5b:e2:68:9e:f8:f6:
         43:36:43:6c:86:da:0d:d1:f3:96:19:b0:56:45:4e:6a:a2:4f:
         1a:89:65:97:b1:e3:8a:96:d0:cc:36:ae:72:51:77:68:01:fb:
         c0:f5:b5:09:ff:fc:54:69:29:01:68:6f:45:c9:e6:ca:af:81:
         97:d3:0e:e8:b6:07:05:96:ab:dc:23:cb:40:f9:37:03:fc:35:
         6a:fd:c8:e4:04:cf:9d:fd:6e:62:f7:74:6c:77:e0:f6:e3:2a:
         0a:77:53:d9:c1:8f:17:fa:5a:d0:79:09:84:8c:a8:4d:4e:4d:
         6b:1d:02:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:30:33 2024 by rpki-client on console-fra.rpki-client.org