Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/060043ca-4105-3b3b-b7e1-9d2009bd7beb.roa
File:                     060043ca-4105-3b3b-b7e1-9d2009bd7beb.roa (raw, json)
Hash identifier:          OqT0E6UzKD3cILeMC3tnyhQwPQua19czmBvwP2/gWNM=
Subject key identifier:   6A:75:36:B2:47:C6:48:65:D8:20:60:09:41:4B:16:AE:B7:F7:C1:56
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858474850B9BA09C9044E34846B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/060043ca-4105-3b3b-b7e1-9d2009bd7beb.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     35994
IP address blocks:        23.210.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:b9:ba:09:c9:04:4e:34:84:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=ceff9444-e0d0-4a8e-8ccf-b8df7faf07f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ce:eb:87:8d:bf:96:84:45:cf:49:7e:6c:5b:
                    b4:64:46:75:26:91:d8:9f:15:74:1c:63:a5:26:3a:
                    c5:fd:b9:6a:5e:56:50:37:34:bf:d3:c6:5f:93:6a:
                    1e:ab:5e:21:78:65:0d:9b:93:7a:85:ee:1f:7f:ff:
                    64:dd:1e:67:cb:e8:21:57:b4:1d:10:c2:a6:74:37:
                    07:45:06:ea:5d:70:02:3f:89:d1:d9:62:37:5b:77:
                    80:85:4d:72:f9:dc:8d:ee:2f:22:0b:17:30:62:8a:
                    ee:53:70:ff:f6:a7:d3:21:4d:e5:8a:d7:0c:58:83:
                    19:d1:ab:ba:6f:85:b9:eb:7d:5c:f7:dc:58:75:fa:
                    86:86:08:ea:a2:5a:5d:e5:b3:9d:64:7d:ea:bc:e7:
                    92:b3:38:6d:7c:1d:2d:16:94:d1:ea:97:1e:a1:f3:
                    14:24:fa:04:fb:2c:bd:03:31:17:c3:7a:57:f8:9c:
                    90:a8:e9:79:f7:ea:bc:bd:4e:44:d2:59:4a:cd:0c:
                    a5:94:48:a9:b8:4e:ed:ac:8e:4c:ef:11:48:67:60:
                    0c:ad:a1:e5:b0:dc:0d:15:5e:74:a6:8a:7f:c7:07:
                    a2:2d:52:28:fb:d0:19:c1:28:5d:ea:9d:66:35:03:
                    5b:d7:7d:cc:31:5e:13:f3:2e:58:bd:7b:d7:88:30:
                    9c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:75:36:B2:47:C6:48:65:D8:20:60:09:41:4B:16:AE:B7:F7:C1:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/060043ca-4105-3b3b-b7e1-9d2009bd7beb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.210.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:33:93:74:2d:99:62:ba:ff:7e:7c:b3:1e:7d:06:a5:b6:de:
         5c:b5:e8:2e:ff:a7:c9:b9:f1:ae:75:b5:ab:27:d3:c5:f8:33:
         0c:ce:f4:0f:49:0f:b4:d2:ef:55:59:4b:06:ff:78:13:94:fa:
         6b:bf:43:89:2e:e6:44:e5:0c:86:3c:e3:68:ba:f1:2e:a1:13:
         40:5c:cc:63:4c:33:de:ea:29:58:23:67:e0:7e:b9:03:0c:6b:
         0a:3e:82:86:a7:62:0a:cd:82:a8:42:3f:b7:e3:9f:12:c1:e8:
         88:9f:a8:7a:d4:ad:ef:19:78:28:cf:b6:89:a8:e8:6c:a9:f5:
         26:aa:8b:ae:ee:75:d1:ab:0f:ec:0b:09:60:85:4b:51:fe:05:
         f1:f4:8f:62:c8:d5:b0:6e:d2:85:ad:bd:1b:27:70:42:e8:3e:
         78:0c:39:66:fb:d2:50:af:f8:d3:d8:7e:5a:67:f5:4d:d6:01:
         c3:5a:84:1f:de:67:79:30:75:ba:af:39:64:cd:fc:56:f7:52:
         71:ac:be:2a:9a:25:06:11:d8:40:9b:2f:59:b2:c9:f0:6d:2a:
         e2:9c:75:a2:89:44:ca:0a:d6:d5:75:d8:0d:29:b2:77:33:a9:
         3a:a2:25:ec:cf:31:27:ce:c8:9c:41:88:a4:99:8b:72:35:9b:
         37:ee:bb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:46:21 2024 by rpki-client on console-ams.rpki-client.org