Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ba38731-e254-3980-ade3-0f1947ffc32a.roa
File:                     1ba38731-e254-3980-ade3-0f1947ffc32a.roa (raw, json)
Hash identifier:          w44xSoDKlrw27q6aoD6lOkyM8aElGSADM29EYzFfvqE=
Subject key identifier:   72:73:48:04:A4:9A:B9:28:C5:88:CA:07:B9:FB:77:5A:1D:BB:03:0C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858471A409F8C517B5E42BE8D9C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ba38731-e254-3980-ade3-0f1947ffc32a.roa
Signing time:             Wed 04 Sep 2024 13:01:10 +0000
ROA not before:           Wed 04 Sep 2024 13:01:10 +0000
ROA not after:            Tue 03 Dec 2024 14:01:10 +0000
asID:                     20940
IP address blocks:        23.207.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:40:9f:8c:51:7b:5e:42:be:8d:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  4 13:01:10 2024 GMT
            Not After : Dec  3 14:01:10 2024 GMT
        Subject: CN=8067f0c3-db13-4385-b76e-697bb3ec5b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5a:d4:46:fa:9b:8a:7e:54:ae:ee:29:23:0c:
                    52:19:26:c7:1c:bc:f8:25:8d:97:7d:ed:1e:48:f3:
                    46:8c:00:91:f9:34:d6:66:aa:95:82:84:4a:b1:7a:
                    7d:8d:a7:03:48:97:cd:66:22:42:f7:13:57:37:85:
                    af:b3:37:11:53:f3:58:e4:97:d1:fb:64:55:bd:39:
                    e7:35:fa:78:21:5d:58:4d:83:99:1a:2b:86:05:56:
                    8e:d7:9a:3f:ae:4f:07:2c:68:30:66:23:13:37:88:
                    ba:c1:1a:5a:e9:79:d1:ff:a0:b9:cc:88:48:57:f8:
                    28:50:f7:5b:51:ce:45:be:b1:a8:02:d1:0d:e6:ce:
                    55:9c:03:f9:c6:b8:49:86:c0:11:4a:ad:41:18:c7:
                    9a:a5:f2:cf:09:19:76:d5:e2:90:f0:89:7b:30:fa:
                    fc:76:74:9d:27:db:80:39:1f:5c:fd:f9:22:c1:47:
                    10:5f:9f:25:22:7b:fa:20:9b:80:0e:7e:cf:4b:fe:
                    17:d9:64:98:bd:12:f0:29:c3:4e:e1:c5:9f:df:89:
                    03:3b:2b:9b:3a:66:a6:f4:e6:06:95:2f:c5:06:69:
                    d1:9d:c8:7a:33:1d:5c:ea:ce:bd:ec:ee:36:fc:94:
                    0a:bf:5f:6c:c8:be:d5:6a:4a:e6:57:bf:c4:b1:86:
                    7c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:73:48:04:A4:9A:B9:28:C5:88:CA:07:B9:FB:77:5A:1D:BB:03:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ba38731-e254-3980-ade3-0f1947ffc32a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.207.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:6f:7c:9a:f5:ab:ea:7c:46:1a:32:f3:05:14:da:e9:1c:6f:
         da:d3:42:52:d8:55:e4:29:a4:df:23:4b:b9:3b:31:f0:95:03:
         22:0e:20:88:02:9f:ab:66:3a:33:02:55:69:4c:eb:c5:ec:c7:
         4a:69:81:61:8b:5e:69:50:93:cf:1d:a2:b4:68:b9:be:ce:59:
         40:4d:c8:ad:61:a8:c5:38:f1:62:dc:66:64:e9:80:d9:11:12:
         d8:7a:df:4e:97:9b:e6:28:f7:fb:54:5a:2b:ee:33:f9:29:cd:
         2b:4c:e2:74:de:ee:f4:b5:2c:e9:77:eb:fe:4c:46:bc:8f:4c:
         7b:4a:44:c0:aa:c0:77:fd:39:2e:06:6c:ed:94:34:3f:7b:df:
         11:9b:10:ae:a5:05:0a:ac:81:64:41:76:15:b7:eb:62:83:f2:
         4d:93:25:0a:a7:67:ff:97:c8:63:34:da:ec:65:38:10:47:a8:
         dc:28:b8:5f:4b:d0:68:9b:0e:8e:6f:3e:99:5b:b5:d4:a8:10:
         8a:a6:df:5e:5f:3b:ad:50:b5:f0:fe:01:fd:f8:55:8a:bc:c2:
         df:34:bc:72:67:f9:f9:3d:32:cc:66:3a:66:aa:a6:a7:8c:24:
         d4:da:a7:88:71:f5:43:96:8f:18:6d:0b:1b:e9:68:b5:9a:31:
         41:fa:85:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:03 2024 by rpki-client on console-ams.rpki-client.org