Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26b45a18-c84e-3173-b988-d7dca9fb7cc4.roa
File:                     26b45a18-c84e-3173-b988-d7dca9fb7cc4.roa (raw, json)
Hash identifier:          xcLYLgluG6f/nsKQBSllrGWKOwq7dAJIIVhUp958QnY=
Subject key identifier:   F3:27:30:2A:E6:2B:5A:D9:AE:3D:52:0A:FF:94:EA:85:83:81:88:33
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584765A0FC18870D1CDDB0258FB0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26b45a18-c84e-3173-b988-d7dca9fb7cc4.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     9829
IP address blocks:        23.6.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:fc:18:87:0d:1c:dd:b0:25:8f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=56a795e5-8724-461a-a3f9-e63475c6fcec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f7:55:e3:e4:9f:dc:a2:0e:da:4a:bc:8b:36:
                    21:ae:c2:13:1d:47:c9:2b:86:c2:a8:98:94:60:5c:
                    52:bc:e9:28:2e:d1:45:19:6d:bc:61:c6:76:51:b0:
                    24:9b:02:04:46:2e:1e:a0:a4:77:74:e0:ed:67:2e:
                    05:6b:ac:86:f9:34:e8:42:35:2f:97:eb:c8:36:91:
                    ad:cc:94:c2:c0:4c:c8:10:14:ab:c7:d8:0b:1c:5f:
                    f9:fe:ac:85:df:d3:fe:e1:f1:74:cb:27:a7:0d:82:
                    c2:4c:ec:46:44:11:de:f8:30:74:96:28:e9:7c:f0:
                    1d:52:ab:47:42:57:ac:97:0b:bc:fe:1d:2f:a2:25:
                    c3:04:5e:01:73:fe:d9:1e:8e:68:b5:99:b1:c1:e7:
                    76:d2:12:75:d4:03:99:69:80:27:38:eb:c9:d5:c6:
                    58:1d:14:f8:cc:34:80:00:a0:bf:8b:6a:aa:dd:c5:
                    0b:5f:4c:6b:87:23:5c:91:0a:04:aa:01:dd:82:91:
                    d1:0c:13:dd:d5:39:93:4e:4e:d8:b7:79:c1:c5:64:
                    c7:06:34:8c:68:a4:68:cc:ef:96:3a:bf:bb:17:2c:
                    9c:49:bf:85:cc:ea:9c:fc:9e:2d:14:9b:e9:ae:99:
                    2c:0b:2d:83:5a:1c:63:33:4e:f2:f4:6f:d1:19:96:
                    7b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:27:30:2A:E6:2B:5A:D9:AE:3D:52:0A:FF:94:EA:85:83:81:88:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26b45a18-c84e-3173-b988-d7dca9fb7cc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.6.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:25:9c:89:bf:dd:1f:76:ae:d1:6e:4d:cc:db:af:62:4a:74:
         49:a1:e2:10:53:15:8e:3a:d2:a3:c9:48:c5:d0:ea:96:bd:e9:
         1e:0e:61:62:0e:24:36:4a:ec:e4:0b:fc:f7:92:bb:c0:12:30:
         55:ef:03:98:12:cc:9d:f2:ba:71:89:b0:25:29:1f:16:94:c0:
         b0:ee:ac:fe:b0:39:77:8e:42:d3:1c:0e:b4:d4:18:6e:a1:7c:
         e1:c1:b3:8a:17:10:97:ac:b6:43:45:73:a5:41:82:08:06:85:
         5f:23:c4:b4:1b:70:ac:9a:56:b7:12:24:7a:30:17:14:ce:e2:
         75:91:4c:9b:22:6c:77:4c:dd:5a:6b:d6:26:0b:18:cc:aa:87:
         71:b9:a8:26:c3:f7:5e:de:15:19:b9:22:d0:1f:16:ff:c1:f3:
         f1:3f:7a:36:4d:da:f1:df:fe:23:38:5a:da:27:c0:c4:82:ad:
         12:08:b6:a0:2e:17:1b:3d:16:79:21:4a:16:0f:13:25:af:23:
         86:af:54:a3:f2:01:e5:ae:b9:72:6a:c9:ab:08:1f:d2:40:53:
         7a:6b:7c:b8:e4:4c:37:ff:f0:f8:93:4c:63:db:15:12:e7:eb:
         b9:85:dd:9f:03:cc:a3:e2:fe:74:3a:d8:54:c2:94:53:fd:c6:
         22:9d:13:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:30:11 2024 by rpki-client on console-ams.rpki-client.org