Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/b6bdc6ff-ac51-300f-8948-308bb0783629.roa
File:                     b6bdc6ff-ac51-300f-8948-308bb0783629.roa (raw, json)
Hash identifier:          rRi2K0Wlibwut9aLSdMXFV77gdLKcAv3eOIGutg39Ro=
Subject key identifier:   FA:12:36:D0:00:D5:F5:62:77:CF:94:E8:5A:47:64:12:F1:27:EA:9A
Certificate issuer:       /CN=daef5cc1-9697-4016-a7b1-84106520128a
Certificate serial:       010D0C9F4328584742BB576FB25E9944D4026C00
Authority key identifier: 53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/b6bdc6ff-ac51-300f-8948-308bb0783629.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     36318
IP address blocks:        23.160.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:57:6f:b2:5e:99:44:d4:02:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daef5cc1-9697-4016-a7b1-84106520128a
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=088a4417-f2f6-4bd3-8dc9-0c7594582790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ca:33:b7:11:b7:7d:63:16:6c:ca:91:0c:c9:
                    84:9a:29:fd:ac:4b:14:fa:38:68:fa:06:e2:98:dc:
                    01:cd:de:8e:7d:f1:74:37:16:94:df:14:d0:58:b3:
                    99:17:16:e9:b4:e2:dc:d0:ac:6d:02:95:32:4c:0d:
                    67:2c:ab:0b:7a:0b:ce:58:1a:49:ab:8e:9d:1f:2e:
                    81:68:e1:8c:45:8d:c2:08:9e:ed:f7:e5:0c:53:ac:
                    f0:72:6e:f4:0a:55:6c:98:9a:ad:86:cb:76:ad:c4:
                    19:10:a7:99:35:8a:b4:e0:08:90:41:35:a3:6b:54:
                    88:a2:2d:e5:5e:e8:51:36:f9:61:31:41:90:63:d1:
                    f9:e1:82:b6:19:d4:c9:b4:98:0b:f2:e8:95:9a:fe:
                    22:1b:38:82:17:99:c4:5f:9f:c2:3c:b9:82:d4:d5:
                    34:4f:18:98:93:e8:87:cb:72:24:33:99:40:0e:40:
                    54:02:06:6f:46:62:6c:79:6d:fa:05:fb:6b:9f:27:
                    ec:ea:3e:46:89:16:8d:5e:a3:25:4b:76:f4:b8:ca:
                    04:a0:93:31:83:73:bd:f7:10:db:26:b1:30:98:1d:
                    d9:38:13:54:fa:4a:01:49:07:02:d7:f9:a2:75:88:
                    56:08:50:73:07:ed:dc:20:c3:0e:db:e5:30:a4:ec:
                    49:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:12:36:D0:00:D5:F5:62:77:CF:94:E8:5A:47:64:12:F1:27:EA:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/b6bdc6ff-ac51-300f-8948-308bb0783629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl

            X509v3 Authority Key Identifier:
                keyid:53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d5:cf:ce:1c:db:2c:c4:62:bb:29:ff:08:03:9e:7b:10:5c:
         b6:73:24:5c:97:dc:92:19:4e:ed:8a:ae:99:b2:42:88:50:39:
         d5:8e:fb:fd:3e:f2:36:b8:10:df:14:be:a6:63:3a:dd:e0:7b:
         c6:bd:86:70:58:4d:23:75:fe:60:72:6f:45:a9:9d:e0:51:3b:
         77:e9:7c:18:b1:df:80:94:01:72:d5:e1:34:2c:b5:f3:60:b7:
         61:ec:d5:31:86:8f:cf:e6:6f:39:77:59:d3:3e:61:86:39:b4:
         e3:86:9a:3b:ff:2e:b9:77:d2:08:ac:f2:b1:37:34:56:3a:a7:
         aa:ab:6c:b4:3d:e6:c5:73:7b:6c:ec:89:13:9a:99:e6:57:8d:
         bd:99:7c:4d:d3:54:d3:5b:b5:c4:2a:cb:0c:32:76:dc:7f:b8:
         b4:8e:a7:ee:0a:cf:36:cd:d7:ea:91:67:ce:95:9d:9c:7e:20:
         b3:28:08:ad:4d:fd:92:5d:68:c9:28:a5:3d:4e:e6:5b:6d:16:
         24:18:dd:ab:95:e2:83:f1:29:b5:a6:12:b8:a9:4c:82:62:cc:
         b2:0c:31:2c:50:89:36:63:b0:60:64:68:1e:e1:84:6b:4b:cb:
         ef:ab:4e:d8:d5:64:c5:cf:a1:fd:6f:2b:42:67:70:c5:bb:f7:
         d2:44:6c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:03:54 2024 by rpki-client on console-ams.rpki-client.org