Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c14b3cb-57e2-3ee4-9ebb-674381835a69.roa
File:                     2c14b3cb-57e2-3ee4-9ebb-674381835a69.roa (raw, json)
Hash identifier:          fxxgkNECXtm4EFQgxFVMhBiHB/X3RdKs/0aQ54FH95A=
Subject key identifier:   66:E3:C0:28:52:1C:8B:40:E2:87:42:E8:83:24:18:56:81:46:6A:C7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B1017AA20E90B09EAF69EE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c14b3cb-57e2-3ee4-9ebb-674381835a69.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        23.194.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:7a:a2:0e:90:b0:9e:af:69:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=6213f102-99d8-4b48-9a53-5adcecc298ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:54:4c:84:ba:98:9f:7b:b8:f0:3d:85:ec:
                    5d:f8:92:fe:f5:5c:47:63:4a:4f:0f:05:98:8f:48:
                    c8:3c:5d:77:97:64:84:f4:42:50:00:b4:85:08:36:
                    df:2e:0a:08:76:0e:e1:10:05:3c:a9:10:79:d6:9b:
                    29:83:f5:9b:62:b5:6b:07:52:37:e0:da:fd:c7:0c:
                    24:f7:72:1f:5d:2b:82:50:3f:86:33:dc:64:4a:e2:
                    3e:3d:21:80:78:94:e6:9c:d2:cf:18:4e:66:43:8c:
                    d9:34:0b:9a:c5:f6:15:16:af:30:6c:c4:c7:1b:33:
                    e9:f7:2a:81:f1:2d:d5:a6:93:87:72:88:2c:21:a1:
                    ef:c2:c4:4b:76:ab:8f:24:f3:53:f3:02:6f:7a:33:
                    8b:84:ee:63:aa:8c:7b:60:26:0b:ad:8d:89:fd:9e:
                    53:f4:75:6e:9b:b2:84:0d:16:af:6c:eb:42:53:1b:
                    05:0e:e5:29:ae:b3:d1:dd:a1:bf:e1:63:23:46:1e:
                    e6:d0:d2:5a:59:3b:24:52:7e:21:7d:ea:46:2e:a8:
                    c0:15:a9:d2:c8:8c:06:66:01:0c:74:07:a1:32:cc:
                    e1:f6:d2:dc:15:97:1e:73:0c:c6:cf:5d:3d:6a:79:
                    d9:9e:b0:92:cd:27:9a:3f:00:f6:e9:9b:1b:0b:01:
                    fe:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E3:C0:28:52:1C:8B:40:E2:87:42:E8:83:24:18:56:81:46:6A:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c14b3cb-57e2-3ee4-9ebb-674381835a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.194.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:3c:ea:1b:84:8f:d2:48:bb:e2:f4:e9:77:05:c3:91:83:17:
         cf:d0:3b:90:52:14:05:d3:dc:a5:0c:5b:14:ef:2a:c3:01:bf:
         15:5c:46:12:81:13:50:39:be:75:12:e3:ea:aa:2e:68:e4:7a:
         18:9d:39:65:df:e2:21:8e:33:41:54:73:93:d9:d6:c5:36:78:
         28:61:21:c8:f9:b2:e0:21:2f:2e:d9:36:c2:b1:b3:ef:98:e1:
         26:24:24:4f:1e:56:be:07:fc:da:1b:60:0f:37:5f:64:bf:da:
         bf:2a:b0:5d:9a:f4:d1:67:2c:50:92:1a:2a:4e:48:58:c8:05:
         53:4b:c5:c1:57:6e:c8:2e:de:ac:d4:a6:62:e6:7f:cc:3b:a4:
         9d:9b:a9:6c:c5:81:85:ca:d9:14:dd:bd:4f:d1:5d:d1:34:3e:
         e8:a1:50:a5:da:75:b0:62:f6:14:ea:b7:6a:08:bd:a0:3f:3e:
         4f:6a:ac:60:2e:9f:23:d1:11:a9:41:e9:d6:78:89:46:23:64:
         39:de:51:c1:a4:db:75:38:f5:47:0b:7b:4a:40:72:06:5e:20:
         15:a0:01:12:9b:fb:ea:e8:b0:33:76:6f:70:22:bd:de:a7:73:
         89:85:fb:90:e0:7c:cb:c4:60:a3:b0:87:c5:3e:ea:9d:8b:80:
         0b:ca:ff:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:30 2024 by rpki-client on console-fra.rpki-client.org