Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0138db54-46af-32ca-ade4-a4af233fb028.roa
File:                     0138db54-46af-32ca-ade4-a4af233fb028.roa (raw, json)
Hash identifier:          8wC9V0Vn7vG2EO4gMIPPScmobd/lEtFUWhAWVLlptmE=
Subject key identifier:   A9:4D:A8:0F:F8:EC:3F:3F:9C:D9:2E:9C:CA:FA:74:8E:E8:03:23:D9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858479D76CE9B62E49E7FDFC05D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0138db54-46af-32ca-ade4-a4af233fb028.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.43.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:ce:9b:62:e4:9e:7f:df:c0:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=444bed72-98a2-4ab6-8685-0e589e27693f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:58:97:cc:45:f0:24:85:50:90:41:25:5a:55:
                    26:3c:72:b5:10:ee:01:44:ec:cd:c9:6f:c9:c3:ee:
                    1f:f5:36:a0:4c:26:7d:2a:c5:4c:8c:e2:8e:fb:cc:
                    7d:fd:b6:1a:53:1d:1b:bb:7a:10:99:66:6a:76:a6:
                    6d:eb:9d:4a:37:e0:a7:2b:01:e1:5e:66:cf:e2:fe:
                    9b:ff:8b:64:d3:a0:bf:30:cb:ee:a9:c5:de:5d:d7:
                    5d:be:da:47:5a:a7:8f:8a:84:5b:26:7a:ca:c0:0f:
                    2a:4a:6a:da:06:7f:ab:40:b5:d3:a0:a5:36:52:33:
                    16:71:f2:0c:6d:19:fc:fd:a5:8c:3a:9b:71:8a:b7:
                    34:0e:eb:01:82:f6:24:e7:9c:40:c5:9f:19:02:ac:
                    ca:04:90:61:eb:ca:35:b2:2f:92:a3:a3:9f:cb:d2:
                    14:86:2a:94:aa:11:5e:f7:c7:e1:16:5e:f6:6b:2e:
                    1f:c2:0d:36:39:82:f0:97:9c:df:41:52:01:63:a3:
                    01:85:9d:25:af:d1:46:e7:00:8f:0b:fc:66:74:e8:
                    f1:77:a3:a8:5f:28:09:d0:1c:1e:4f:db:ef:a5:24:
                    31:f4:d8:e7:0d:58:45:f1:83:fd:97:14:f0:89:1e:
                    5a:54:94:2e:c6:d5:8e:7e:19:aa:2c:13:7d:3f:60:
                    09:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4D:A8:0F:F8:EC:3F:3F:9C:D9:2E:9C:CA:FA:74:8E:E8:03:23:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0138db54-46af-32ca-ade4-a4af233fb028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:59:a6:b5:e3:31:d3:23:90:5e:8a:b6:37:21:b9:47:88:1c:
         b4:7a:35:d6:f5:35:24:5b:72:91:89:2b:d7:30:ca:54:97:7e:
         17:e5:d4:ab:5d:7e:0d:9d:1d:05:5b:e0:80:06:71:ba:1f:82:
         f2:43:66:75:ae:73:ff:c4:42:15:36:1b:c8:da:a1:77:de:54:
         fb:d6:84:51:27:89:0b:d5:5d:ad:83:5f:df:3f:29:b3:2c:90:
         00:6b:42:d6:2a:41:ac:a6:a8:5b:47:4c:33:24:d8:e8:a6:79:
         55:b9:6b:ac:2e:39:ec:a1:89:a2:90:2c:c0:78:a9:f7:b8:6d:
         39:a0:f5:4a:63:ba:5e:ee:89:b5:65:53:0b:f8:85:bd:c4:01:
         ea:f4:ba:40:95:65:04:65:7b:d6:25:ce:49:4f:09:b4:93:3a:
         33:cf:af:c4:e4:b6:5e:9a:4d:71:e4:26:2b:ee:74:63:ff:67:
         d5:29:e7:1d:d5:34:64:e7:c0:8d:a2:d3:cf:a9:06:c6:00:d9:
         a1:f7:0b:df:db:55:ab:c3:f7:13:b6:c6:03:05:be:18:f5:a9:
         79:7c:dd:c6:28:97:00:d6:8d:e9:a6:ec:49:77:43:a8:69:73:
         c6:16:e3:b1:69:c6:53:1d:17:6a:91:01:38:5d:50:0d:11:bd:
         ee:cb:84:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:52 2024 by rpki-client on console-ams.rpki-client.org