Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/e5b29350-97e8-3c9d-8af3-e08fba14e907.roa
File:                     e5b29350-97e8-3c9d-8af3-e08fba14e907.roa (raw, json)
Hash identifier:          8CmW0k3saa5rIWfzdhgMPbyog/lpvbmKuSWZGrX+3xg=
Subject key identifier:   5D:A1:AF:29:1D:AA:7C:19:69:27:F0:16:C2:BC:1D:1E:C1:19:71:BF
Certificate issuer:       /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Certificate serial:       010D0C9F43285847362B543A247198B3AF8A9990
Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/e5b29350-97e8-3c9d-8af3-e08fba14e907.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     397131
IP address blocks:        23.170.32.0/24 maxlen: 24
                          2602:fe6a::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:54:3a:24:71:98:b3:af:8a:99:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=6ae6d1b0-6a8b-4a7e-9f91-aa66d4796f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:08:e0:9f:21:04:bb:ec:80:43:96:d5:12:4e:
                    e5:9e:17:77:c7:c7:ec:af:55:af:80:8f:c5:b2:45:
                    18:46:04:41:ce:9d:37:a6:93:8a:65:65:a8:74:ea:
                    df:c6:f9:d2:4e:52:41:cf:f6:12:d3:36:61:c0:8d:
                    f5:87:2e:3e:fc:6c:95:10:8b:c5:42:c3:c0:a1:50:
                    18:52:1a:2b:78:56:58:2f:5f:6d:d7:54:7f:ed:83:
                    2f:91:7d:d1:ac:6a:c8:1e:02:2c:5a:5d:60:a4:2b:
                    43:9a:1c:e2:bd:33:5d:00:a2:f9:ab:40:da:78:2a:
                    66:c3:17:46:5f:f6:19:99:96:fd:3b:92:5e:8c:01:
                    f7:f9:55:7f:7b:39:13:da:cc:c6:2d:2f:ec:91:9d:
                    06:aa:2b:26:da:98:58:0d:f0:9a:4e:e7:8c:1f:2b:
                    74:f1:17:6d:b2:d0:59:fe:cf:47:d8:0a:70:74:01:
                    00:25:4f:e1:a7:91:c8:55:6d:6f:30:27:eb:95:db:
                    97:e1:d2:41:1a:30:9e:91:d2:b9:b6:03:00:49:af:
                    94:2c:2b:17:77:fc:48:1e:d4:43:63:75:3c:c4:16:
                    d0:2b:e6:e0:c1:2e:a4:99:51:65:59:81:34:58:7d:
                    92:29:fb:ed:69:09:0e:8c:4e:0a:f8:e5:69:16:f3:
                    76:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A1:AF:29:1D:AA:7C:19:69:27:F0:16:C2:BC:1D:1E:C1:19:71:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/e5b29350-97e8-3c9d-8af3-e08fba14e907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl

            X509v3 Authority Key Identifier:
                keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.32.0/24
                IPv6:
                  2602:fe6a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:1c:69:14:9b:8d:69:36:eb:c1:f4:59:2c:08:df:a4:f1:4e:
         e3:08:c8:3a:81:8e:0c:86:f4:da:35:36:a3:6c:27:53:36:fa:
         b7:da:cd:22:2e:46:2c:c9:37:d6:f4:54:79:cc:d5:e9:74:f2:
         cc:35:3a:94:e8:d6:0d:f3:d9:b8:75:36:df:d8:cf:b8:b1:9a:
         d1:83:cb:d4:5f:db:72:45:88:9a:14:57:20:64:e3:e3:01:f2:
         cb:56:a7:5d:a9:54:e4:e5:ab:d9:e7:f6:90:73:6a:69:44:cc:
         14:b8:f6:8c:55:11:7a:63:69:21:64:25:e7:98:f1:e0:a8:01:
         49:65:46:7b:99:41:3c:1b:e4:a0:ee:f9:21:e3:50:01:83:d6:
         1f:ce:88:f0:02:6a:96:65:b8:c8:50:9a:16:8f:a7:14:a1:8a:
         c6:0b:a2:28:15:97:34:3d:12:16:73:c5:c9:96:69:3a:f9:83:
         47:56:d4:99:0e:d6:8a:05:c6:fb:38:48:16:fa:29:f9:cd:c8:
         c3:f8:c2:24:78:ce:4a:a8:65:00:b2:cb:a1:c8:22:b3:22:63:
         be:e8:db:b0:e9:c0:11:8b:34:eb:ec:77:ef:a4:e5:2a:9b:70:
         63:12:11:50:e1:81:a4:f7:80:21:69:28:ad:2a:74:95:6b:5c:
         3a:22:eb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:47 2024 by rpki-client on console-ams.rpki-client.org