Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/082bd197-901b-3729-92e4-fe09ae169fed.roa
File:                     082bd197-901b-3729-92e4-fe09ae169fed.roa (raw, json)
Hash identifier:          YG+W1TWIOVmFT8eTz+ws8RFBqZCrsxkxiJXlWSENnYw=
Subject key identifier:   4F:C4:63:9F:6C:41:4B:F7:4E:AA:D6:67:60:27:07:39:4D:2E:4F:3B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847600BA4172DC8CA78D9938780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/082bd197-901b-3729-92e4-fe09ae169fed.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     16625
IP address blocks:        23.75.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:a4:17:2d:c8:ca:78:d9:93:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=8eef9619-dbdd-4c9a-8bf7-78a7a8c9702f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:c1:ef:cd:67:d7:3b:cf:a1:7b:8d:d8:7f:
                    63:e9:4c:7d:98:8f:25:d7:67:b5:dd:be:b0:64:79:
                    3d:48:a5:c2:31:49:04:f6:99:1b:c7:8b:42:55:0a:
                    8e:e5:e9:95:3a:38:02:94:b5:af:dd:b2:54:c5:6f:
                    c1:47:73:60:2f:97:a3:61:bd:4e:1e:9a:32:7f:50:
                    fd:89:8b:28:ce:db:c1:b4:62:1d:bf:29:8c:33:3b:
                    c1:6d:8d:8a:18:6e:7d:ee:9b:0f:d3:cd:ac:81:49:
                    51:a3:27:b1:a4:76:9f:fa:ef:c6:e4:ef:dd:fe:02:
                    64:1c:89:04:a2:1b:61:8b:1d:10:fa:a7:77:8a:5a:
                    00:76:6e:73:09:50:07:a3:16:ae:fe:58:80:d7:b4:
                    51:e2:9d:87:96:7e:9c:71:04:b7:93:c1:b8:85:88:
                    87:8c:58:a5:f6:15:75:78:d9:8c:64:7c:1d:fd:bc:
                    da:df:7c:39:2a:2c:b6:6e:4f:86:f1:4d:25:ee:4b:
                    36:00:92:05:27:53:8e:b4:3d:1a:29:3f:21:13:2b:
                    08:37:62:d8:83:60:2a:b7:17:f2:27:dc:82:85:8d:
                    72:c0:50:51:67:84:d8:e9:20:97:27:f7:3c:39:4c:
                    ec:72:dc:36:0f:1f:7f:c5:18:01:67:d9:d3:b1:bc:
                    81:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C4:63:9F:6C:41:4B:F7:4E:AA:D6:67:60:27:07:39:4D:2E:4F:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/082bd197-901b-3729-92e4-fe09ae169fed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.75.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:40:3c:0f:68:85:48:92:1e:8d:14:35:40:61:b4:7a:8d:59:
         65:1a:aa:eb:5b:0c:b4:99:3f:62:d0:82:11:8c:1f:15:03:19:
         47:5e:be:6f:53:0f:20:2e:28:2d:f1:86:d5:d6:13:75:73:c9:
         df:b3:55:51:11:11:dc:3e:71:de:09:c4:72:66:7a:4d:a1:ad:
         69:3b:4e:6b:f1:07:d4:8c:06:f3:d5:d9:53:2d:9b:61:53:8d:
         30:43:bc:70:81:b1:60:fe:ca:b8:ba:10:f2:e5:e5:9c:39:f8:
         ef:6a:a9:83:8f:ef:0f:38:a7:b5:c5:de:57:94:a8:c8:0f:43:
         1e:43:58:db:38:cc:cf:b9:8c:69:08:3e:60:b0:55:0c:19:3c:
         22:7b:3a:f4:43:99:8f:37:37:0d:57:5f:9d:71:41:d8:1b:bc:
         6e:09:aa:b6:3c:3c:28:d1:6c:1d:92:92:96:15:ee:09:9b:71:
         62:f2:52:59:9f:a0:ab:97:20:2b:26:bd:fe:eb:ea:1a:46:36:
         27:60:b5:2b:a1:39:6d:61:9e:8d:0a:56:f4:20:bf:28:f0:75:
         df:63:92:4f:23:c8:09:97:e6:cb:7f:be:49:54:64:a7:37:c2:
         92:e6:e1:b4:b8:5d:54:83:90:d6:02:62:a0:5c:44:10:94:28:
         47:4d:2a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:19:21 2024 by rpki-client on console-fra.rpki-client.org