Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c0f936a-2433-3cf7-a3ee-2f5c1b3925af.roa
File:                     0c0f936a-2433-3cf7-a3ee-2f5c1b3925af.roa (raw, json)
Hash identifier:          +wZA/f1n2e2sR6JX/Y/I04TLL58o3QGl8qtTYPm9YuU=
Subject key identifier:   46:CF:70:14:82:0A:40:F2:CF:B1:A5:00:6A:12:6F:9B:EB:1C:61:D6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C8DA01D4E61224C4B0F68A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c0f936a-2433-3cf7-a3ee-2f5c1b3925af.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     20940
IP address blocks:        23.200.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:da:01:d4:e6:12:24:c4:b0:f6:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=178bc9b1-4f94-45e5-8b66-33dd9d26d8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ae:f4:39:fb:b4:b2:01:0a:30:bf:88:05:fe:
                    a6:66:4c:94:62:ad:6e:00:9c:ba:53:d1:28:86:93:
                    f7:2c:8b:72:2f:d6:a4:09:7c:b3:d8:24:55:85:d4:
                    81:b6:b8:e9:81:56:7d:e9:b2:f6:22:b0:2d:6d:de:
                    e2:34:16:19:2e:03:e2:ae:08:a7:05:3a:ad:e8:cb:
                    1e:80:40:10:9f:f8:d4:4f:00:95:b1:fb:f1:ea:5d:
                    ef:ea:6f:49:83:65:62:02:96:9d:89:a6:9e:1e:37:
                    a1:81:3d:d7:08:5f:a4:c8:8e:36:f3:63:49:6f:2a:
                    db:02:5d:b1:79:9e:65:a4:b7:d5:7a:81:fc:97:8c:
                    91:92:4c:95:d9:d5:8a:fc:b7:37:62:92:89:9f:a8:
                    ac:68:c7:68:95:25:f2:94:43:fa:60:3f:c8:29:fa:
                    6a:89:67:a6:52:c8:f1:49:9e:5a:97:c1:1e:6f:1c:
                    b6:a3:d6:78:75:a7:72:cc:36:6c:3a:53:b0:5d:65:
                    53:ec:6b:f2:9f:7d:02:02:df:31:71:b0:4c:bd:5e:
                    42:6f:9b:de:f5:b4:11:44:5a:d9:c0:90:4c:16:7b:
                    ce:f3:e9:6f:b6:96:ec:8e:0c:82:94:9c:c8:ca:27:
                    08:52:3f:6a:62:39:1d:e6:a9:32:34:8f:89:83:ee:
                    9b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CF:70:14:82:0A:40:F2:CF:B1:A5:00:6A:12:6F:9B:EB:1C:61:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c0f936a-2433-3cf7-a3ee-2f5c1b3925af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:44:0a:b1:87:e6:2f:d9:16:2d:6c:f1:75:42:61:71:a2:80:
         d3:14:f6:7e:33:0a:6c:39:dc:4f:3e:5e:5d:7b:45:2a:78:ca:
         8e:43:98:76:ed:a6:d6:6f:ae:01:f4:23:9c:19:c2:e6:28:ca:
         f6:6c:b0:f4:eb:d4:de:40:fc:51:10:93:88:57:65:5e:fc:1c:
         72:28:89:d3:fa:1a:28:cd:bd:0a:3b:f5:d2:95:05:92:e8:bf:
         eb:0d:62:47:66:63:f3:ef:84:0e:3d:49:96:08:f0:b3:0d:d4:
         74:43:1d:16:3a:db:4d:63:60:66:87:94:7b:9d:55:bb:b1:9b:
         df:a3:5a:1e:6d:6d:0b:ff:f2:4c:bf:ee:c3:a5:11:5b:66:21:
         12:da:08:f0:a8:0b:b1:5d:97:be:8b:12:f5:b3:ef:9b:c8:a0:
         cf:2e:4f:89:64:28:42:6b:40:48:14:14:15:aa:37:61:dd:d7:
         1b:4e:73:f2:9c:c7:92:58:ea:c7:f4:9d:37:bd:8d:55:83:aa:
         f6:4f:cc:c9:0c:37:f1:fa:58:2a:7b:91:56:c7:90:26:3c:f3:
         67:88:be:fe:b9:86:4d:61:05:94:f0:b5:c3:c3:d0:14:67:d4:
         e6:2f:fe:92:46:b1:07:bb:1a:04:50:13:f9:34:46:6b:f6:4a:
         08:76:fc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:17 2024 by rpki-client on console-fra.rpki-client.org