Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/103fcbf7-6b42-34bf-aac0-264cde050f28.roa
File:                     103fcbf7-6b42-34bf-aac0-264cde050f28.roa (raw, json)
Hash identifier:          JRmeOHZzarHcuVa79C0q6YfbmnuoNfDPSpSEFoPNy9M=
Subject key identifier:   96:8E:9E:91:05:F8:DA:5B:34:5D:24:C5:F0:FC:DA:D0:BB:E1:23:74
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B3CC202F37092393F0903D70
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/103fcbf7-6b42-34bf-aac0-264cde050f28.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        23.210.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:20:2f:37:09:23:93:f0:90:3d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=f4b1dd40-7cea-4094-9913-aa7bd7d05196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:42:50:49:8b:37:fd:0f:d2:1c:f4:bf:55:32:
                    ab:84:26:f4:60:a5:b9:89:95:93:ea:d8:f3:ef:ac:
                    fb:41:67:a1:b0:99:91:43:fb:2c:ea:c3:2a:31:7f:
                    1d:5c:c1:84:78:03:1b:98:0c:95:56:2d:29:d0:79:
                    cd:c2:f2:5d:e4:48:b0:b3:19:43:56:b9:ae:ba:1d:
                    08:e5:d8:e4:a9:0b:4f:43:f3:c8:49:6f:16:80:51:
                    0b:93:63:e0:c2:ce:e4:4b:04:5e:38:9c:3f:3f:83:
                    5c:35:19:c7:cc:0f:8f:36:0f:81:d0:9a:09:9e:5f:
                    dc:6b:ec:35:44:14:e2:c7:8d:b4:7c:fc:4c:25:a6:
                    00:43:c7:9e:3b:eb:ce:cf:59:9b:25:f3:4d:3d:a2:
                    32:7a:15:3d:04:63:5c:03:f2:f9:e5:5a:d4:fa:a8:
                    f6:ff:e9:89:c7:bf:f8:fb:b1:6a:95:cb:bc:a6:e5:
                    49:0d:6a:25:06:e4:70:b3:0e:5d:00:c8:8c:59:8e:
                    5b:ea:6d:44:f6:e7:44:d9:25:b3:32:fd:0c:f6:86:
                    54:b9:5d:e3:68:d3:31:19:f3:cb:89:bd:b9:ca:f3:
                    09:e1:50:99:f8:a5:3c:05:43:3e:00:47:e9:18:0b:
                    7e:61:24:1d:2f:b8:a2:59:c8:45:50:e3:b7:79:b0:
                    89:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8E:9E:91:05:F8:DA:5B:34:5D:24:C5:F0:FC:DA:D0:BB:E1:23:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/103fcbf7-6b42-34bf-aac0-264cde050f28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.210.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:92:e9:db:83:90:ab:10:1b:84:1c:e4:b0:2e:3b:c4:70:3d:
         f1:28:e5:cd:6d:d5:d9:ef:e3:b9:08:2d:9e:99:87:06:fe:7c:
         95:4f:71:0e:c8:f8:f4:10:d4:37:3a:2f:2b:d8:18:85:e8:75:
         9b:00:3d:ba:b4:e0:bf:99:f1:f9:07:10:6f:27:39:61:94:43:
         c1:90:c5:bf:8d:e7:f6:88:ab:33:51:3e:23:21:d9:79:97:57:
         f4:c4:32:c5:78:94:b9:14:87:6f:c2:1c:f1:24:f9:a9:16:14:
         cf:2e:89:ac:94:25:3c:a7:bf:97:fa:04:d7:b6:15:e2:bd:ca:
         7d:d1:f1:09:8c:5b:dd:de:26:ea:0f:0c:f0:9d:75:9c:61:92:
         fd:04:65:30:4a:46:45:31:6d:75:73:82:cc:74:26:5e:75:c5:
         51:d1:9b:d2:dc:bf:e1:7a:3e:68:79:f3:d0:df:cb:5a:ab:6c:
         3c:fd:bc:e3:16:59:7c:b6:0f:e6:93:48:04:e9:17:0b:75:1a:
         48:ee:a7:c5:2f:a7:8e:9e:cb:28:0a:f5:81:d9:bb:ee:7a:f6:
         e4:68:a8:6e:98:96:89:36:b8:49:06:e9:d1:8b:88:7e:66:b5:
         ca:61:ed:45:45:d5:78:9c:e9:69:9e:40:c3:b1:16:52:22:aa:
         0d:86:57:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:59 2024 by rpki-client on console-ams.rpki-client.org