Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/4069fe48-9a8a-313a-a323-cc2a49626f35.roa
File:                     4069fe48-9a8a-313a-a323-cc2a49626f35.roa (raw, json)
Hash identifier:          cNC6ecB6mJHM/VHj8L0n1bTK3eRbvOMQuqV/+DlOQGI=
Subject key identifier:   7D:C4:3E:D6:D0:FF:4C:0C:54:DD:88:73:4B:41:16:19:C0:15:52:EF
Certificate issuer:       /CN=5eb94df3-be39-4e1b-b39a-730deb2999f1
Certificate serial:       010D0C9F4328584816A34FD45201A43F8C1FCD00
Authority key identifier: AA:71:C0:14:37:F4:47:E4:FA:73:5F:AD:CB:90:70:E0:C1:56:66:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/4069fe48-9a8a-313a-a323-cc2a49626f35.roa
Signing time:             Tue 03 Dec 2024 22:43:43 +0000
ROA not before:           Tue 03 Dec 2024 22:43:43 +0000
ROA not after:            Mon 03 Mar 2025 22:43:43 +0000
asID:                     32768
IP address blocks:        23.29.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/5eb94df3-be39-4e1b-b39a-730deb2999f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/5eb94df3-be39-4e1b-b39a-730deb2999f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Dec 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:16:a3:4f:d4:52:01:a4:3f:8c:1f:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb94df3-be39-4e1b-b39a-730deb2999f1
        Validity
            Not Before: Dec  3 22:43:43 2024 GMT
            Not After : Mar  3 22:43:43 2025 GMT
        Subject: CN=9004f80e-d2c2-4183-bee3-19096a9c0ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:24:58:13:f9:9a:10:ab:a8:1d:cf:35:fe:5e:
                    14:97:52:81:95:07:ff:2c:83:aa:a5:05:83:9f:3d:
                    82:ea:be:c0:93:35:9a:70:90:b5:f3:69:61:04:f7:
                    0a:d2:c5:56:e9:65:de:68:88:b2:52:28:d3:b2:32:
                    61:53:d9:ee:f1:13:46:49:f0:9e:8a:bf:52:88:25:
                    cd:a2:59:52:ec:4b:a5:dd:42:60:4f:ba:10:70:9f:
                    49:00:66:12:43:ec:e7:48:8f:6b:eb:ed:71:86:a4:
                    56:58:d1:1a:7d:ae:9a:99:c2:2a:23:e3:bd:aa:5d:
                    a2:d9:0f:44:15:20:d2:7f:fa:28:3d:0a:2b:b8:99:
                    23:33:71:0c:7f:3d:2d:73:ce:ad:71:77:db:1d:15:
                    3b:22:be:cc:d9:70:d8:75:25:4d:58:d0:ab:a9:6f:
                    9a:97:c9:ef:cf:de:b8:74:b7:16:34:d9:6c:d6:c3:
                    e5:c1:6c:19:8d:b9:ab:03:38:ba:3b:c1:4b:37:3c:
                    13:00:7a:11:60:1c:d3:36:02:f8:7e:fe:89:82:22:
                    23:5d:06:89:3b:ed:6a:eb:db:6c:a0:b3:8a:5b:63:
                    3b:20:63:ad:22:22:9e:04:d2:ea:1e:fc:b3:44:1a:
                    02:fa:dd:9a:15:5f:93:f0:aa:fe:39:3e:17:ce:fb:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C4:3E:D6:D0:FF:4C:0C:54:DD:88:73:4B:41:16:19:C0:15:52:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/4069fe48-9a8a-313a-a323-cc2a49626f35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/5eb94df3-be39-4e1b-b39a-730deb2999f1.crl

            X509v3 Authority Key Identifier:
                keyid:AA:71:C0:14:37:F4:47:E4:FA:73:5F:AD:CB:90:70:E0:C1:56:66:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.29.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c0:dd:94:c1:fc:af:6a:e2:82:35:fc:d8:28:e8:f5:64:63:
         6b:67:16:74:e4:cb:d4:f1:c8:9e:65:24:45:85:f4:b1:54:f6:
         7d:4d:2b:0e:bb:c4:a3:14:f6:96:f4:cf:ad:ec:51:67:2d:d4:
         e5:b1:85:69:93:0d:89:23:f9:3e:2d:16:74:81:6b:e4:51:1c:
         60:ea:e3:7f:06:a4:3a:08:34:b7:bc:2c:eb:e0:12:a6:f8:f5:
         70:91:fe:4d:83:df:a8:33:de:49:28:d8:8a:75:b0:f4:10:38:
         7f:5e:1c:64:e1:8a:a5:52:22:7d:68:bc:51:ce:40:a9:3e:91:
         63:2a:34:f5:45:0f:27:79:c3:b3:7d:27:e6:6d:a7:0b:28:eb:
         e7:02:66:b2:b9:af:0d:3c:1a:0b:0c:dd:db:a9:04:f8:66:dd:
         57:19:1e:19:78:c8:0d:90:d6:9f:50:37:15:6a:42:36:71:1a:
         df:fb:f5:19:d0:41:cb:cb:0a:38:ec:98:b8:83:46:d1:2e:42:
         98:f1:a9:e6:98:1b:eb:56:dd:85:ac:ec:b6:98:c1:20:73:6c:
         7f:64:67:93:be:67:0e:15:ae:51:e8:df:ed:20:c1:62:c8:3b:
         46:5f:9c:7c:19:89:9c:89:d3:bc:96:40:f8:98:2e:b1:f0:da:
         55:ab:f2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 06:13:59 2024 by rpki-client on console-ams.rpki-client.org