Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d8f658e-3779-3059-800e-bb027f336e34.roa
File:                     5d8f658e-3779-3059-800e-bb027f336e34.roa (raw, json)
Hash identifier:          5BwhSRMB6UV2Hb/rmheVmrFtlqRoWGcH/rPXcQ0pPnI=
Subject key identifier:   DC:57:C1:65:9D:D6:48:89:8A:72:D2:BA:AE:30:95:19:4C:42:37:6F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584988CF6E365A982D1328558300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d8f658e-3779-3059-800e-bb027f336e34.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     16625
IP address blocks:        23.202.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:6e:36:5a:98:2d:13:28:55:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=190cb735-3594-41f6-8354-24c5c818d020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b3:63:02:ea:24:6b:7c:3d:12:90:c1:12:0c:
                    b3:67:42:5f:46:41:6c:73:a9:1f:9e:da:17:bd:b2:
                    94:1f:fe:90:94:ec:ad:84:9c:c6:42:f1:8c:ee:5d:
                    c1:57:54:0e:ef:50:25:12:8a:37:65:65:86:30:bc:
                    1f:d9:1f:49:04:72:7f:71:dc:e3:b9:67:4b:c1:39:
                    3e:70:d6:12:14:dc:e7:12:45:fb:74:b2:cb:5c:e3:
                    73:76:48:44:43:b8:a6:e9:c3:d6:45:5a:53:ac:6a:
                    6e:9b:01:d4:5b:6a:b4:58:fb:4e:4c:1a:c0:41:c0:
                    05:36:2c:38:b5:75:e8:a8:20:59:e8:34:2f:c0:e6:
                    0a:f5:4e:38:c3:ad:5f:5e:e7:ab:96:1e:b4:92:1f:
                    05:47:17:2b:90:a1:2e:df:ab:f8:c7:eb:1d:69:da:
                    d9:42:d9:f1:41:eb:ef:37:28:6d:ce:3e:24:b6:14:
                    8f:98:ca:76:48:23:9a:d8:aa:55:3b:db:20:fe:92:
                    54:e6:68:79:95:b0:4c:9e:5f:28:86:1c:f5:d0:22:
                    e3:66:5b:02:df:d5:2f:06:c1:39:77:dc:0d:c3:2b:
                    61:27:55:3d:aa:51:90:e1:9f:3f:7f:0a:02:2f:08:
                    ff:10:4f:d4:f5:37:fc:c1:4b:cb:9a:7e:d5:c0:1f:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:57:C1:65:9D:D6:48:89:8A:72:D2:BA:AE:30:95:19:4C:42:37:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d8f658e-3779-3059-800e-bb027f336e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.202.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:8f:dd:2e:b4:8d:01:19:86:1a:31:dc:b0:c6:e0:a7:cb:94:
         b3:81:47:8b:ad:2a:06:b0:20:20:72:37:02:74:04:5b:e3:54:
         5d:db:e3:81:f8:6a:94:e8:1d:6d:c5:80:e3:e1:87:08:c1:b1:
         d5:5c:e8:5f:fc:7a:19:c3:34:ad:d9:a1:e1:95:db:55:da:68:
         4d:cc:9b:56:2d:d8:28:37:38:99:fa:3c:3c:f5:e1:f2:48:64:
         fb:74:10:d1:d3:ca:2d:52:dd:10:0b:7c:25:64:2c:b5:f8:3a:
         5d:09:8a:64:cd:57:9a:d4:33:f8:e3:a1:ca:db:14:f9:3c:5e:
         e9:62:ea:68:a8:f9:1d:2a:16:a0:1c:d9:03:7b:8e:e3:80:fb:
         9d:47:d1:fc:98:6f:f2:79:d2:37:86:33:50:63:dc:c1:87:7a:
         68:bf:5e:0a:39:a8:92:78:ac:b8:86:62:8c:50:2f:26:fa:4f:
         61:9d:59:78:70:fa:8c:82:39:03:82:02:06:5f:74:a6:9d:c6:
         62:e2:00:da:f8:49:16:01:8e:c6:36:2b:08:d8:ab:42:b2:a4:
         ee:dc:66:c9:c2:f8:61:ff:28:cb:88:67:02:2a:86:76:ec:2e:
         64:28:8b:6a:68:3e:5b:0e:f7:3e:60:f1:56:c5:d3:a5:16:74:
         f5:05:c1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:18:11 2025 by rpki-client