Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4663ffe4-7de3-3ad8-8151-d42f65416357.roa
File:                     4663ffe4-7de3-3ad8-8151-d42f65416357.roa (raw, json)
Hash identifier:          s3Gr9+y63CeJ04cZfnX5hGZ7ao3RugJHpffXyLsTCx4=
Subject key identifier:   49:57:2E:9D:01:69:0C:7F:D6:FF:97:2C:87:55:C6:92:E6:69:0D:41
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858496CE477F7FA7A25714848BBC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4663ffe4-7de3-3ad8-8151-d42f65416357.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        23.59.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:77:f7:fa:7a:25:71:48:48:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=d635dc18-83e0-48df-a31e-88259040dba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:95:ba:81:e6:cb:45:b6:69:8d:59:77:31:57:
                    93:73:60:12:5f:de:5e:2c:d7:a5:85:ef:c4:9b:44:
                    0b:30:95:22:02:b2:e2:80:b9:d5:12:38:06:a9:ad:
                    a9:16:30:ef:57:48:3f:ec:a2:2c:46:88:77:dd:4c:
                    74:a5:66:c9:df:4a:84:fc:91:47:82:e2:54:4d:7f:
                    a3:0f:e4:6f:3d:58:fd:75:8c:c1:67:ac:8f:33:fc:
                    65:ba:c3:27:62:2a:e2:46:84:ba:c2:60:b3:e0:a9:
                    52:6e:65:3f:e9:5d:f2:4a:2b:d3:8e:ae:d1:cd:a9:
                    9f:c5:84:be:2e:9c:a8:6d:27:13:3c:ad:0d:35:66:
                    c6:f0:86:19:74:6e:f3:a5:86:cd:f7:fb:ae:cc:8d:
                    ed:ab:5c:ff:0c:6a:3b:a7:50:f1:b1:9a:02:bc:f5:
                    dd:db:21:8a:ae:c6:55:25:e5:03:a0:41:70:47:4b:
                    c3:cc:3e:79:f9:5c:5b:74:42:60:48:03:a1:9d:26:
                    ed:3f:44:09:35:0b:23:b7:68:96:aa:90:07:3c:37:
                    90:cb:39:33:8c:1f:dc:0a:1e:11:77:77:be:77:33:
                    fb:84:f2:ca:5f:7f:57:c7:47:43:e2:ce:fa:1d:a9:
                    00:7f:5a:2a:db:74:5e:db:10:cd:df:84:b0:a6:4b:
                    5e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:57:2E:9D:01:69:0C:7F:D6:FF:97:2C:87:55:C6:92:E6:69:0D:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4663ffe4-7de3-3ad8-8151-d42f65416357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:68:92:55:fc:cf:90:26:67:47:92:e8:19:59:3b:f0:55:4d:
         d5:30:3d:03:08:ca:bb:b1:ce:0a:bc:b3:11:46:a9:4b:c0:89:
         3e:67:b3:43:fc:e8:6b:eb:46:86:28:c2:f2:ae:d2:f7:3b:93:
         51:75:50:db:19:16:89:69:eb:9d:bc:58:4d:06:f4:01:f2:73:
         e2:68:01:e8:4c:16:3e:60:21:9a:7b:63:e6:96:ba:42:f3:a1:
         4f:b2:c4:33:54:04:4f:57:16:47:72:28:bb:0f:05:89:af:13:
         b3:e6:8c:a9:6c:0f:c0:65:b5:86:5d:d9:ea:f2:55:eb:d5:e8:
         9e:87:6e:b3:45:f3:54:47:ba:1d:05:2c:fe:05:a9:fa:96:66:
         aa:8b:36:51:dc:c2:dc:e4:38:f1:20:f0:28:e5:2a:e5:9a:36:
         78:f4:76:d6:ea:ef:b7:98:ce:62:26:fb:6f:a0:58:0b:98:01:
         2e:99:61:6a:13:1f:ce:5d:11:8f:99:3a:95:34:82:76:33:48:
         9e:07:f8:53:58:d8:30:34:89:56:18:dd:1f:f7:48:d7:e1:a8:
         7f:c7:2b:b6:cd:8a:d6:ce:b4:a8:0b:54:f0:a5:dd:ce:90:b1:
         6f:5c:ff:ef:e6:6e:39:64:02:5c:ba:f6:d8:fb:5e:3a:a3:2a:
         76:c9:58:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:07:49 2025 by rpki-client