Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16e3837c-f709-34ea-bc34-ad71e6858a4d.roa
File:                     16e3837c-f709-34ea-bc34-ad71e6858a4d.roa (raw, json)
Hash identifier:          cn6EV4yz/4dY7NcVpi40OLQDfJnsgG5hj1xMFuYqmbo=
Subject key identifier:   BC:6C:C8:69:0D:23:87:C8:5A:97:60:6E:4A:80:1D:0E:1B:DB:36:A6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C4AA1D85D8137867ED3900F0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16e3837c-f709-34ea-bc34-ad71e6858a4d.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     20940
IP address blocks:        23.193.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:1d:85:d8:13:78:67:ed:39:00:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=d5e86877-f6cf-42e4-8837-ff1422174617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:80:ab:95:38:25:b0:8d:97:56:73:cf:22:fb:
                    5a:d6:a0:46:9a:ae:80:dd:8f:11:42:35:52:07:9f:
                    ba:03:33:01:e9:e2:e5:14:38:12:3b:79:a1:a8:4d:
                    c4:6f:56:94:67:4e:5f:19:4b:2e:fd:61:f2:15:11:
                    79:b8:28:1f:a9:51:e7:5b:44:78:7f:b4:17:96:00:
                    5d:0c:c2:8a:32:2a:60:df:8b:89:24:27:48:0f:aa:
                    e2:5a:9c:cd:c9:08:82:25:28:ab:eb:5a:a4:9f:fb:
                    07:19:d8:5f:b6:87:ce:ef:1a:97:69:38:30:d2:cb:
                    ea:28:ed:a0:62:4b:6d:60:98:a6:a7:ae:47:56:f0:
                    84:05:05:7f:bc:5e:1c:ee:34:fe:16:ab:4d:33:8b:
                    a4:5c:c6:f2:c0:b2:55:d0:e6:38:17:3b:80:97:78:
                    1c:e5:e2:69:a6:9c:19:e6:e6:0e:e3:7d:11:9f:03:
                    9a:1f:22:c4:bb:ce:9f:5a:cf:98:38:ff:81:8c:96:
                    66:dd:31:51:c0:72:a3:22:eb:50:71:8e:6f:94:ec:
                    52:8c:b6:aa:82:fe:f4:2a:90:8b:86:7e:a4:fa:a0:
                    ba:fd:ae:0c:65:2b:4c:2e:84:63:a3:10:99:85:4e:
                    6f:7a:bc:5d:1a:85:b9:40:9c:dd:22:6f:58:51:3c:
                    d0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6C:C8:69:0D:23:87:C8:5A:97:60:6E:4A:80:1D:0E:1B:DB:36:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16e3837c-f709-34ea-bc34-ad71e6858a4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.193.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:52:bb:d7:90:9f:03:b3:fc:cb:7d:03:c4:1e:b9:c2:d2:36:
         80:ee:1e:22:49:f2:3d:88:0b:68:e0:6e:30:37:38:b7:68:e8:
         1c:c0:0d:ea:03:cc:99:96:07:01:a3:f8:b3:48:0e:dd:33:3d:
         27:88:76:5f:eb:50:ae:3a:d4:5c:d9:17:be:ae:19:86:82:45:
         13:26:de:1b:45:90:ac:52:78:0d:dc:17:49:a1:58:e3:e2:4d:
         8e:69:d0:66:ca:ab:cb:35:55:d1:e8:d7:8b:fe:c4:44:43:63:
         73:84:01:ea:3d:4f:04:ef:68:67:e1:a0:b6:57:1d:87:67:ab:
         87:02:27:c4:7f:78:cc:dd:a3:46:4d:d7:d4:21:65:df:76:48:
         d1:59:19:57:5e:ac:6b:0e:95:86:3b:e9:b5:94:25:d5:02:7c:
         8b:f5:0b:51:2f:f5:cd:ad:ab:54:b8:fa:98:d3:59:df:4d:44:
         a6:d3:17:cd:c4:15:01:f9:fa:d3:b3:18:11:5a:a3:c6:1d:ea:
         f4:6a:b8:5b:7c:93:ce:18:a9:c7:72:48:f6:52:13:32:06:2a:
         65:08:46:80:2c:74:15:85:77:58:0b:03:ce:04:62:3a:e8:02:
         da:de:a3:02:36:8a:97:89:b6:d6:bd:43:7a:d5:fc:d8:b5:b6:
         a3:54:03:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:21 2024 by rpki-client on console-fra.rpki-client.org