Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18cd9c3c-897c-3180-8bc0-5d73a29c37ed.roa
File:                     18cd9c3c-897c-3180-8bc0-5d73a29c37ed.roa (raw, json)
Hash identifier:          NTtFHJmkKg/EHL+vY/atPe/SAa+cLz55cu9JcOw2AdM=
Subject key identifier:   37:B1:16:A7:04:03:36:36:A8:C3:75:9B:04:26:26:1C:F7:CE:8B:9B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847DC64C4D21D0AD7F7D0B98700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18cd9c3c-897c-3180-8bc0-5d73a29c37ed.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     20940
IP address blocks:        23.213.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:c4:d2:1d:0a:d7:f7:d0:b9:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=dc79fcaf-3f62-44e8-8161-0c83c51b9a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:6b:bf:de:ae:0a:cf:32:df:d6:3e:7c:6b:
                    f8:0b:9a:70:6c:00:27:a9:3b:2c:08:48:92:c0:20:
                    37:d2:ba:ff:cb:fc:64:a5:10:01:0b:59:2f:e4:66:
                    3f:2a:bb:ea:db:52:94:93:cd:b8:17:28:d5:29:96:
                    ad:c8:db:20:f0:35:97:48:91:94:c2:af:ce:0b:f8:
                    23:56:41:1f:32:0d:c4:3c:20:06:da:cc:01:e1:98:
                    21:1c:99:92:c5:8e:3b:73:aa:b2:b9:10:ff:69:74:
                    5a:25:16:61:1b:47:5f:3b:84:26:e3:16:2d:fa:0b:
                    2a:99:fe:7a:b9:91:00:8e:db:04:d4:29:bc:15:b7:
                    8d:da:7f:33:6b:ee:4f:b9:ad:ec:4b:e5:be:bc:38:
                    11:5a:ff:a5:59:aa:84:a5:89:1c:92:4d:04:34:bb:
                    ee:18:af:93:b7:36:3f:d8:2e:0a:74:ba:11:7f:aa:
                    17:31:1d:26:18:2b:38:2c:3b:9c:18:aa:11:ab:33:
                    1f:d0:eb:56:43:9d:34:cc:63:0d:42:ae:5d:9e:91:
                    1f:39:ae:23:3b:57:ac:82:97:9a:bb:03:3c:f2:e8:
                    e1:7b:e0:df:9f:0b:1e:95:64:d2:11:b3:fa:7a:26:
                    50:90:ea:f5:4c:74:a1:b3:78:59:02:7e:3f:c7:71:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B1:16:A7:04:03:36:36:A8:C3:75:9B:04:26:26:1C:F7:CE:8B:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18cd9c3c-897c-3180-8bc0-5d73a29c37ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.213.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:f6:c8:d5:a5:03:46:5c:13:35:5b:0b:09:de:fa:b9:b1:d8:
         71:f3:79:32:9a:40:c5:a2:95:2c:08:e9:59:78:51:db:fe:80:
         0a:6c:91:7a:e8:ac:aa:e1:a5:0a:02:36:82:87:9d:2d:19:01:
         c9:eb:94:c8:97:52:fb:f1:03:ec:33:52:93:3e:df:db:16:be:
         25:f8:9a:28:9a:17:a0:1c:8e:d4:31:77:c8:51:2f:b3:cd:5f:
         f5:77:cc:0a:7c:9a:09:45:25:63:d3:16:65:ed:a3:c0:cb:f4:
         23:92:26:0a:b8:ca:56:e7:cf:7b:31:c7:54:01:9c:41:17:93:
         5b:4b:c8:92:a6:39:33:f8:f7:ab:e8:99:a4:bb:55:22:85:e7:
         e2:be:2b:a4:20:df:e8:a0:6d:72:61:72:bd:87:0e:36:cc:db:
         9e:c6:8c:0a:a0:34:1d:38:fb:ea:d9:10:6e:60:bd:5f:06:f8:
         ff:e1:19:4f:b6:15:f7:2f:04:e4:92:cf:8c:ee:98:28:c5:d6:
         a5:33:55:55:64:a4:29:4e:11:5b:b0:cc:c4:67:15:10:86:0a:
         e2:b4:fc:72:b7:8e:22:fb:34:03:f2:e2:b2:33:83:e1:02:23:
         01:c2:1f:79:6c:57:85:80:0e:8b:61:fa:a0:fd:d4:ab:f9:73:
         8e:95:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:03 2024 by rpki-client on console-ams.rpki-client.org