Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa
File:                     5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa (raw, json)
Hash identifier:          ub6JarhHCbhDbIxRQ7FYPVhve+FoXeBykZvkXv6bMRE=
Subject key identifier:   62:51:AE:9E:46:EC:8B:30:CD:22:8A:C3:24:D3:BD:D4:43:34:E5:20
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F432858472F30721D6024956C185ADC00
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     7782
IP address blocks:        23.235.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:72:1d:60:24:95:6c:18:5a:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=8bb8badd-9920-4d12-bc5c-c6f9d5ad391a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a7:64:83:05:b8:1b:9e:a9:c1:5a:90:46:44:
                    d9:3f:ee:94:95:b0:d4:cd:e7:40:e6:b6:72:6f:5e:
                    be:2f:21:41:b0:43:9c:29:d0:df:37:d5:c8:a9:cd:
                    11:1b:eb:a8:00:06:e3:33:d0:2a:81:45:db:e7:ab:
                    2e:a6:c2:3e:ab:5b:f6:ce:7a:56:a0:fe:ed:9f:24:
                    d2:3d:7e:90:6c:3e:bf:29:7b:7e:e5:4e:02:90:b6:
                    42:74:97:bd:17:9b:03:fb:95:45:2a:22:7a:1d:1e:
                    09:2f:9a:b6:4a:d6:00:e1:01:b8:1d:68:01:c0:d6:
                    5d:16:0a:de:03:06:78:a8:c6:0c:11:ee:ad:dd:32:
                    84:87:0c:82:32:40:90:56:8d:3c:60:51:a2:8e:c5:
                    5e:0e:c7:00:ea:5e:0f:c9:2c:67:72:dd:68:b1:fc:
                    3b:c8:72:9d:98:40:de:a5:46:2d:3d:17:a0:43:42:
                    60:3a:44:55:4b:d9:97:91:50:19:5e:ad:f6:58:b1:
                    af:1a:dd:a1:d4:d7:1e:da:f9:0c:85:c8:8a:92:d4:
                    70:49:73:5d:ec:95:d9:a5:05:7c:45:de:e6:eb:ac:
                    d6:43:b9:92:67:8e:19:0a:c3:3e:89:e1:3d:72:78:
                    6d:4c:20:1d:52:3d:13:84:b5:34:ef:43:99:8f:0c:
                    db:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:51:AE:9E:46:EC:8B:30:CD:22:8A:C3:24:D3:BD:D4:43:34:E5:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:99:f0:ee:5c:7f:20:77:8c:1b:d2:8f:5c:45:cd:25:71:aa:
         51:43:5e:4b:b5:93:fb:04:11:c6:24:f2:e6:5f:5b:67:62:36:
         e4:92:0b:50:70:07:dc:b9:89:54:c9:8c:59:59:f7:61:88:75:
         53:6f:b8:a3:5d:70:3a:44:6f:a6:a5:e8:29:bf:74:a6:ba:35:
         8e:90:fa:3f:d2:92:26:31:37:e9:89:41:76:ce:cf:a4:97:16:
         0f:0d:9c:ae:5c:a3:11:77:28:ce:06:eb:fa:65:d8:13:6e:5b:
         6b:3b:44:90:fd:f6:ac:aa:a9:49:73:3d:57:bb:5d:2f:e5:18:
         82:e3:0f:9b:a7:6c:62:ce:fc:eb:ab:65:db:3c:92:78:77:77:
         a8:4e:3f:8b:60:53:60:18:7b:de:e1:41:8e:7c:23:49:d9:b6:
         d9:10:73:fb:6e:60:02:b3:20:53:33:e4:f3:de:f6:cc:df:f9:
         ce:28:6d:33:8c:84:8b:bc:ff:2b:6e:73:2b:5f:b3:23:ef:e1:
         27:58:6a:01:d7:22:63:fc:f7:97:4a:57:8c:49:98:af:b5:40:
         2a:20:2c:2e:ce:6c:5a:da:34:1e:65:2e:af:86:64:92:7d:a9:
         46:20:af:86:e9:a2:de:7c:9d:e6:6b:fe:67:77:52:88:b8:28:
         08:c9:e8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:47 2024 by rpki-client on console-ams.rpki-client.org