Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/167902a4-2a5a-374e-a6bc-96e8517d4e24.roa
File:                     167902a4-2a5a-374e-a6bc-96e8517d4e24.roa (raw, json)
Hash identifier:          cm0x2KkAKH8/1E/xmGE6EoQtsWk1SYikCSYljAeTG9A=
Subject key identifier:   48:78:13:A3:FA:00:6C:F3:80:CE:7A:71:AC:62:F1:A1:3B:FD:25:C4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36DE1E8FF175AFD57C5340
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/167902a4-2a5a-374e-a6bc-96e8517d4e24.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.57.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:de:1e:8f:f1:75:af:d5:7c:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=cbc3011e-2fc6-4b42-9d52-c87599465a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:87:ef:f9:0d:b9:f3:a9:db:93:bc:2c:47:f5:
                    ef:20:60:60:76:ec:65:21:72:6e:33:6c:aa:92:e3:
                    06:55:15:eb:a1:37:68:75:75:62:c9:fd:25:6d:cb:
                    d3:6b:bf:32:50:bb:67:01:af:80:ec:88:bc:59:35:
                    8e:d2:c9:2f:34:4c:23:05:54:26:2e:83:17:7a:54:
                    5d:8a:e9:d4:ce:be:28:90:74:3a:b6:8f:38:97:10:
                    32:fb:27:be:fb:ed:75:45:d1:83:ef:8d:ab:34:30:
                    72:8b:53:45:3f:67:5a:2c:47:1c:63:12:2d:3f:7e:
                    88:06:56:c3:40:05:29:5d:90:ac:c8:b8:45:2b:f3:
                    c5:ae:8c:df:e3:9d:92:ab:92:06:ef:28:83:8b:d1:
                    9e:72:de:ad:99:81:38:27:6a:bc:e8:73:72:a7:50:
                    42:0a:31:29:e5:cd:53:95:0e:6a:1e:10:fe:21:b8:
                    75:df:fa:f1:41:f1:88:a1:6e:35:0c:e4:55:3a:a7:
                    30:3f:65:92:08:74:40:ce:6a:0b:f9:03:f8:0c:9f:
                    95:a4:7c:4c:12:58:35:7c:a9:e2:5b:47:c4:26:f6:
                    f5:69:d9:59:28:00:e0:d1:b5:1d:c0:fa:c6:a3:fe:
                    96:b6:77:cf:91:8f:cf:92:2b:73:42:14:9a:e1:94:
                    0b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:78:13:A3:FA:00:6C:F3:80:CE:7A:71:AC:62:F1:A1:3B:FD:25:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/167902a4-2a5a-374e-a6bc-96e8517d4e24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.57.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:32:de:8e:90:70:3d:cc:ea:da:90:bb:7c:56:ff:12:15:b8:
         20:8c:a4:f5:af:91:6a:eb:b1:d1:c2:93:6d:01:a3:20:43:fb:
         6f:d3:55:ef:d4:52:c6:f8:0c:51:b5:a4:a2:dc:a1:2e:0b:fd:
         ce:57:76:33:29:a4:e0:4c:d5:e4:b1:13:81:4a:f5:ea:a7:2d:
         a0:da:1a:f9:df:17:64:32:8d:c9:59:50:0a:40:4f:b3:e9:ce:
         a9:0c:43:8f:dd:86:f2:9b:b5:e3:e5:4d:9b:c0:73:f1:8a:b5:
         9f:7d:a6:12:fa:bd:84:70:bc:e2:db:a6:05:99:d5:70:a0:5b:
         6b:02:a5:0e:80:f6:bc:80:e3:25:52:cd:0e:d8:39:17:8b:01:
         63:d6:d6:dd:30:b9:22:ce:aa:e4:6a:aa:52:c2:4e:98:7e:6f:
         8e:f7:a8:16:06:e9:83:f5:cd:22:9c:4e:f6:38:b2:48:c2:9e:
         fa:d6:26:7c:a8:d6:32:57:c8:0b:e1:f1:f8:d4:0d:f9:ba:8b:
         ad:9a:0b:4e:76:b5:40:a1:62:8a:61:3c:46:4a:02:45:a6:c4:
         67:bc:ea:c8:85:af:fb:bc:36:f9:ad:bc:da:94:ec:fd:10:ef:
         52:8e:f3:9b:d1:53:c6:70:28:94:23:4e:f0:8b:1b:7f:86:26:
         2d:f3:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:02 2024 by rpki-client on console-ams.rpki-client.org