Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cdbca4-5b9c-38aa-b890-8e62d4d357b7.roa
File:                     32cdbca4-5b9c-38aa-b890-8e62d4d357b7.roa (raw, json)
Hash identifier:          bz6lZ5xlyEI8qh217Tzb5Lov5WFeL6JDsK2CrydhKK0=
Subject key identifier:   6C:EE:FE:BC:88:C3:39:9B:99:77:96:2F:AC:1E:13:1A:F5:04:11:50
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36D129722890C3DCE9E1C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cdbca4-5b9c-38aa-b890-8e62d4d357b7.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     35994
IP address blocks:        23.58.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:d1:29:72:28:90:c3:dc:e9:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=f65dbb6b-7860-4f7d-a3b1-0c188313408b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:84:ed:15:92:4d:52:b8:d9:6d:bb:7d:81:
                    f3:69:c1:6d:5c:ba:45:c2:6a:cc:4c:d8:0d:77:ed:
                    2c:06:a4:59:b4:7d:4c:e7:76:61:9a:04:30:62:c9:
                    7b:26:9a:a0:a7:35:25:1c:74:a3:c6:85:a2:38:d3:
                    db:7f:37:55:c9:73:cf:6b:08:6b:2e:de:d3:bf:04:
                    f7:cf:87:09:c6:0d:fd:8e:96:fe:29:4e:1f:7d:81:
                    f0:99:a9:93:77:43:f4:0b:a3:5d:de:b3:f0:0c:75:
                    bf:b8:9c:90:77:1f:1b:9a:fc:18:3d:21:a6:30:20:
                    9c:9b:9b:69:bc:82:17:39:e7:9a:08:43:e3:c5:1f:
                    5b:24:40:ef:b2:6b:57:b6:35:08:d2:f9:fc:5b:07:
                    94:44:eb:0e:77:fd:3b:aa:b4:da:4b:b3:f3:3b:a2:
                    44:48:4b:90:10:76:50:bf:67:ed:6e:a8:52:b4:db:
                    ea:1c:37:88:bc:50:9b:ba:6a:fd:d7:52:d0:9b:b4:
                    8d:6e:2c:84:5b:e4:99:6f:bc:0e:48:ec:55:36:83:
                    87:21:fa:e8:b8:76:96:c2:d3:83:15:57:d3:50:00:
                    5c:8f:42:b4:96:5e:05:a2:98:20:d1:23:b5:61:5c:
                    69:9e:c2:95:ec:47:46:69:95:62:31:9d:58:4c:45:
                    6b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EE:FE:BC:88:C3:39:9B:99:77:96:2F:AC:1E:13:1A:F5:04:11:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cdbca4-5b9c-38aa-b890-8e62d4d357b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.58.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:42:b5:02:5a:27:0e:94:0b:36:9d:45:ff:c5:3a:9a:ca:24:
         d2:d6:6f:da:4c:9e:bc:ea:3b:3f:42:8d:d3:fc:2f:35:ec:5c:
         b8:54:48:98:36:09:79:44:5d:0f:18:2d:6e:5d:98:fb:fd:4c:
         7a:ca:f7:a0:40:6f:15:40:e9:e6:20:a0:8f:ed:94:a4:37:2c:
         74:49:d9:de:3c:27:7f:1e:50:48:7b:ec:34:13:5f:59:57:89:
         54:04:d1:30:cb:b2:4f:97:58:3b:d5:6a:6b:bc:71:df:9e:22:
         66:d0:35:db:6e:65:09:a6:4f:1d:af:96:49:90:43:ab:09:26:
         a9:38:2a:d3:02:6f:82:47:bd:b9:bc:80:8c:f1:2e:d8:df:5a:
         81:b7:01:70:cb:7f:99:53:5f:44:94:c8:00:16:1d:15:a1:8e:
         a9:cf:f7:ab:e7:b5:92:09:f4:e4:1f:dd:1b:f5:be:3d:cd:fb:
         47:1e:f9:46:35:d9:20:e6:ff:ba:c7:39:05:4d:5e:21:16:ca:
         4e:07:37:61:8b:51:55:c3:b1:d2:2a:40:fb:69:c8:61:d9:62:
         08:64:81:fe:14:46:bd:60:3b:7c:c1:bc:b2:b1:51:5c:3b:a9:
         34:aa:60:ac:98:b0:fa:18:e1:d3:b7:c2:04:0b:56:a1:87:79:
         15:58:58:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:28 2024 by rpki-client on console-fra.rpki-client.org