Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149f387-6400-383b-bc89-e70cdbcca4c8.roa
File:                     2149f387-6400-383b-bc89-e70cdbcca4c8.roa (raw, json)
Hash identifier:          hMk5h1oA7oBSUoqrPHbKwyKMTsvE+HpInpVOCtvjfYo=
Subject key identifier:   C6:43:26:6E:11:7D:69:D8:73:26:6F:75:8D:AF:8B:92:97:EE:33:80
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C8D9EE399663675AF024A580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149f387-6400-383b-bc89-e70cdbcca4c8.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     20940
IP address blocks:        23.200.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:ee:39:96:63:67:5a:f0:24:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=60b08269-0c83-449f-acbd-b00a872cbfb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:8c:9d:8e:69:8b:f3:7a:13:14:a4:cd:a7:
                    38:06:85:e7:30:e5:9f:76:97:c0:c2:31:0c:ea:b2:
                    20:ac:d5:45:55:4e:70:b2:ae:5e:ec:ad:4d:b1:1d:
                    9d:84:d8:4b:d8:96:28:61:0d:b0:c9:bd:5f:c0:39:
                    9a:19:d4:8e:0e:b1:c0:e5:61:dc:37:66:2c:69:49:
                    25:c2:ba:0a:9d:a6:d6:e7:04:c0:66:d3:00:f7:54:
                    67:52:12:17:48:48:e2:ce:0a:67:44:42:d5:72:14:
                    ab:09:44:51:0e:21:b5:51:1a:b4:6c:2c:d1:6e:d1:
                    c9:96:be:99:1b:06:bc:47:e6:0d:4f:36:00:35:c6:
                    c6:58:bd:5a:35:c3:09:b2:39:87:37:40:b1:72:7f:
                    02:ab:4e:9e:7d:cd:d7:03:77:91:1f:10:49:b5:96:
                    33:4e:b0:78:48:51:ac:3a:0a:df:78:76:99:b6:b0:
                    48:e0:eb:04:da:2f:1c:38:4c:37:a0:7c:ac:a6:31:
                    20:69:b7:75:b3:8f:cd:aa:60:f7:79:c2:fa:d6:3c:
                    7f:61:03:e7:a8:d9:18:bf:37:62:f4:99:b7:72:53:
                    20:0f:85:7c:bf:dc:b6:cc:88:e9:0a:f8:73:ab:3b:
                    f7:8f:85:ef:48:be:b0:e3:e0:6f:57:cc:43:a0:1b:
                    7c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:43:26:6E:11:7D:69:D8:73:26:6F:75:8D:AF:8B:92:97:EE:33:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149f387-6400-383b-bc89-e70cdbcca4c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:5b:7a:c6:9c:3a:f9:ae:13:c5:56:40:0c:5b:ec:54:e5:8c:
         8d:12:b8:4f:f4:3c:8c:50:60:e3:4a:c7:68:90:24:f2:7b:9a:
         71:2f:af:ab:54:5b:a5:89:6c:5b:d8:49:d7:0f:2d:5c:85:55:
         72:a3:71:9a:7a:f2:f0:f6:0c:67:5b:6b:c5:30:3f:e9:15:8d:
         c2:62:96:6e:6a:66:f2:64:b9:74:6e:3f:23:c1:c0:b4:51:f8:
         ae:52:03:33:74:f1:ad:02:23:32:f3:ec:fd:e0:ce:31:61:2a:
         19:fc:82:23:a5:f1:d1:e2:26:30:af:33:dc:72:ff:74:c6:a1:
         7b:e1:24:6b:0e:a1:3c:37:51:5f:56:5a:9a:07:ce:b3:0b:bd:
         11:a3:93:f6:70:fd:29:36:63:01:c2:a7:d5:ef:e6:2c:3e:8b:
         ef:47:bc:52:c1:81:6a:0b:10:94:48:3a:32:32:3e:1a:8d:04:
         fa:9a:56:7f:2c:df:ce:b0:6c:3f:4a:29:97:27:26:0d:d4:ab:
         f0:32:5a:46:9a:5c:2c:a7:39:84:70:13:d4:6e:27:a4:46:09:
         02:a5:d8:32:aa:d1:83:7c:1c:df:10:09:70:f0:06:d1:84:ae:
         af:a1:32:9d:69:f0:a6:5b:e5:1e:96:c7:f7:72:9c:77:b3:09:
         a8:44:71:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:26 2024 by rpki-client on console-fra.rpki-client.org