Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b59e483-af63-390a-b234-703b07da92d2.roa
File:                     2b59e483-af63-390a-b234-703b07da92d2.roa (raw, json)
Hash identifier:          cSieNEQ3wvqx/MMlSvahfQ3n8bppgQ5Ylmc0aAbhgVI=
Subject key identifier:   2C:CC:3A:89:0D:E5:DA:75:F0:3B:32:EA:BC:AF:29:A1:13:72:A6:EF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584714C207A214A2942A8B4B602C
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b59e483-af63-390a-b234-703b07da92d2.roa
Signing time:             Mon 02 Sep 2024 13:47:04 +0000
ROA not before:           Mon 02 Sep 2024 13:47:04 +0000
ROA not after:            Sun 01 Dec 2024 14:47:04 +0000
asID:                     20940
IP address blocks:        23.213.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:14:c2:07:a2:14:a2:94:2a:8b:4b:60:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  2 13:47:04 2024 GMT
            Not After : Dec  1 14:47:04 2024 GMT
        Subject: CN=d4deccaa-a89a-4eab-8d10-95c413d2601a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:0e:1e:21:1b:96:76:b3:2a:84:29:c2:54:
                    cd:7f:44:6c:18:92:36:52:be:35:1f:31:d7:5c:b6:
                    1d:c4:fa:69:df:90:f1:d9:4b:04:36:46:c6:00:98:
                    11:e8:17:de:64:eb:56:7b:c0:e8:1a:c4:b9:91:d1:
                    35:67:18:15:df:07:cc:05:d2:e8:03:ef:eb:d9:15:
                    21:5f:81:45:e5:3e:b9:89:f5:26:a3:54:a9:a4:41:
                    76:bb:9f:af:ce:02:3f:43:22:8f:e4:a5:9b:78:8b:
                    1a:37:bd:18:aa:3c:f5:b3:72:e4:3c:93:3c:4e:b8:
                    a2:88:86:c5:3d:65:46:ae:bf:0d:72:ed:b8:e2:d4:
                    ef:bc:02:e5:7c:59:76:38:f1:17:cf:97:25:22:07:
                    24:96:38:d9:70:c6:b4:9a:ef:a9:47:b1:88:6c:c3:
                    fa:80:88:2e:a8:c4:49:dd:ae:49:4f:9c:36:db:9a:
                    42:f3:6d:43:ed:0c:f6:08:8d:a1:b7:70:25:e5:39:
                    28:12:c9:79:ae:9f:df:d0:c1:a7:27:f4:3d:a8:43:
                    e0:c5:7e:e2:22:fa:c5:0c:f9:c5:f2:36:76:2d:1c:
                    0e:00:c3:5b:3c:dd:5e:93:bc:89:1e:eb:b7:f2:25:
                    00:78:f4:9b:08:f4:37:aa:b0:83:2a:8a:08:3f:18:
                    17:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CC:3A:89:0D:E5:DA:75:F0:3B:32:EA:BC:AF:29:A1:13:72:A6:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b59e483-af63-390a-b234-703b07da92d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.213.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ab:b8:e1:1a:74:62:11:b9:de:63:d9:ca:8f:ee:cb:11:f6:
         75:9d:5e:b2:61:be:b7:51:d9:ba:59:4a:3f:f1:96:e2:45:e8:
         aa:77:ea:94:32:0f:8c:30:c1:ec:01:41:aa:38:7a:2c:86:bb:
         34:ab:17:6b:d5:16:2e:3a:68:2f:07:d3:a1:f4:a1:4c:ed:80:
         c7:4c:39:06:81:a8:c1:58:40:5d:d5:52:4c:22:9c:78:9b:a2:
         42:6f:68:44:5e:92:f5:aa:1d:0e:c5:c2:53:fc:aa:50:ee:a9:
         ec:04:af:2f:61:29:07:53:a6:95:c3:43:17:c0:58:44:bd:69:
         0f:19:65:91:39:33:df:99:7f:e1:70:ab:b2:04:e3:8f:09:23:
         47:a5:20:32:9c:f5:16:35:91:4c:85:cb:0f:f2:9b:e8:25:75:
         5a:c9:21:e6:ca:58:4e:66:6d:20:01:61:27:93:fe:04:69:6e:
         db:c3:cf:b5:db:7d:cd:32:d3:ef:bc:2c:74:46:6f:a5:fc:d5:
         3f:5c:b0:19:ad:a8:97:13:18:10:6c:65:32:6d:c6:c2:e4:13:
         3b:87:ae:35:61:97:4f:b0:8e:59:39:2e:18:4a:e8:32:70:61:
         13:4a:49:e7:4e:fe:d7:3d:b1:56:0a:59:a5:c6:55:04:11:15:
         17:fe:af:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:30 2024 by rpki-client on console-fra.rpki-client.org