Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e19318d3-3b64-398c-8446-9f7e1aa6c65e.roa
File:                     e19318d3-3b64-398c-8446-9f7e1aa6c65e.roa (raw, json)
Hash identifier:          Hm0cvkVxBxbZKhrOT+jHo3YkeA78WOLWqpXOtqPnAH0=
Subject key identifier:   4E:A8:56:C3:F8:F5:3D:EF:AE:33:7B:ED:27:91:E7:D9:E8:67:3C:A4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C8DA00891EF297648A196BC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e19318d3-3b64-398c-8446-9f7e1aa6c65e.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     16625
IP address blocks:        23.200.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:da:00:89:1e:f2:97:64:8a:19:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=d02b1f5a-5c2a-46bf-9e6b-14b3e22adca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:68:e0:16:cb:3d:06:de:db:6c:d5:4e:a1:6b:
                    e8:0a:8b:6b:1b:13:7e:74:c3:a8:2e:d6:3c:86:26:
                    1e:af:87:1a:76:5c:c4:9e:8f:dc:9e:fa:08:4a:6a:
                    15:cb:05:42:f5:d4:af:f2:74:c6:51:fa:c1:ff:20:
                    d3:2b:66:5e:f4:4b:b3:d5:47:09:cf:08:9e:dc:89:
                    84:2a:a7:d8:95:a3:0e:85:79:37:19:4c:65:fe:fc:
                    d2:92:1f:9c:97:50:c7:53:73:14:5e:27:51:3e:24:
                    9f:97:75:5c:a0:39:e2:28:ed:c4:e3:6a:86:4a:cc:
                    99:8a:fd:1d:2a:e8:fe:03:47:38:60:8d:2b:2a:29:
                    72:a1:59:f3:2d:b8:db:12:2b:cf:93:0c:d3:3c:d9:
                    8e:28:6d:2b:16:21:18:8b:3a:6f:0e:24:21:1b:5c:
                    a9:2b:70:fb:a9:e0:f6:7f:90:8b:8d:1b:2a:5f:56:
                    fe:20:7f:79:6b:41:b5:66:b5:a5:2a:b3:c7:79:0e:
                    df:b0:fa:82:ba:e9:bb:df:da:15:7a:b3:2f:ca:69:
                    5e:47:5d:7c:52:5c:49:e5:e5:61:f3:90:f8:51:75:
                    51:af:8e:af:03:5a:17:c6:14:60:ba:47:42:a6:91:
                    c2:10:61:cc:d4:d2:89:a2:8d:18:1c:40:0d:ec:06:
                    01:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A8:56:C3:F8:F5:3D:EF:AE:33:7B:ED:27:91:E7:D9:E8:67:3C:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e19318d3-3b64-398c-8446-9f7e1aa6c65e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:e0:f5:73:dd:c4:43:38:09:c4:ae:59:f4:fa:1b:1e:d7:b1:
         f0:52:33:cf:c4:f2:c0:b9:8a:7d:ce:be:c4:fd:25:e3:5a:f4:
         0a:6b:b5:bd:0a:46:5b:5a:05:6f:da:bb:02:1d:f8:5b:9a:ed:
         56:1a:a6:79:ea:c7:05:c8:b6:5a:fc:20:42:0b:67:d9:1f:1e:
         78:4c:f0:1f:4a:41:c0:6c:3f:3a:ff:10:1b:98:95:7c:d0:72:
         13:a3:d0:0a:3c:83:09:f1:52:a0:8c:c3:c5:19:9e:ff:b3:22:
         a2:7b:d4:b6:03:c6:1e:cd:48:15:72:7d:24:f2:fd:33:92:08:
         ab:1b:a5:33:aa:e3:e7:03:e1:62:91:c4:76:b6:0e:7e:fe:f7:
         b2:b6:d5:38:96:11:a3:00:c3:4a:66:b1:2d:02:78:84:17:50:
         ee:2a:4b:24:26:94:3c:bd:93:c3:5b:e1:f4:b5:07:c9:ff:a2:
         09:bd:56:40:ad:78:18:83:dc:33:de:2c:f5:45:32:9f:ca:72:
         67:7e:e0:db:d8:c9:79:12:98:26:76:a1:23:82:76:c2:81:d7:
         7c:4b:9e:71:bd:99:54:df:c7:65:fa:5e:6f:2e:8d:d6:4c:04:
         5d:e0:f3:42:dc:9e:0c:1f:6b:67:23:13:34:86:9f:4a:aa:7b:
         bc:5c:77:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:07:06 2024 by rpki-client on console-fra.rpki-client.org