Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444ef75-c7e4-3273-828e-13da92d78462.roa
File:                     3444ef75-c7e4-3273-828e-13da92d78462.roa (raw, json)
Hash identifier:          f6XZgrN+i9wYrQPN5ucyskS8h0JA6TmuJnauQyLLolc=
Subject key identifier:   1A:13:3D:6F:CB:6B:FA:BC:6F:AB:15:5E:A8:7D:EE:97:2D:63:32:5D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858479D76EFC64974377822F683C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444ef75-c7e4-3273-828e-13da92d78462.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.45.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:ef:c6:49:74:37:78:22:f6:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=e11cf98a-bdcd-4f78-950a-67a0d6acd528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:db:29:d2:2d:c5:a2:5f:4f:8f:fa:6d:cc:
                    2d:4d:27:ba:70:ef:98:1f:01:3f:21:13:36:f4:4e:
                    66:25:c6:20:a1:ab:b5:dd:23:52:ef:ed:1b:96:b7:
                    02:1e:3c:60:03:25:ae:80:2c:ef:47:5a:31:cc:f2:
                    e6:2f:e6:91:25:97:ce:f8:0e:1c:0f:48:5b:36:49:
                    0a:3c:f4:de:5b:5e:97:e8:95:a6:d9:d3:0a:16:c5:
                    d2:63:ab:45:7a:9d:b2:6b:a0:6c:d1:fa:61:b5:fc:
                    1c:fd:5d:42:f7:42:fe:7a:92:20:ce:cf:b6:79:0f:
                    23:96:de:6d:54:42:f8:c0:e4:e1:8c:c2:be:4e:3e:
                    db:35:35:09:dc:12:b4:76:9d:35:da:11:f4:b2:ce:
                    88:73:99:60:96:04:31:ea:a9:c5:02:0b:42:3f:7b:
                    ac:33:9e:2a:6a:e2:68:7e:50:fb:50:b6:c5:a4:17:
                    03:12:7b:f3:f2:b2:90:5a:69:64:8d:e5:49:29:15:
                    32:7d:16:f2:ac:c0:b1:6d:36:2f:27:47:75:19:43:
                    aa:f7:e5:59:f1:ca:82:1e:e5:10:74:86:c6:b3:66:
                    4b:44:31:9f:f1:fd:79:19:17:e8:57:f4:d0:3f:db:
                    0f:e2:66:d7:aa:db:62:6f:43:91:a6:83:6d:27:7c:
                    b2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:13:3D:6F:CB:6B:FA:BC:6F:AB:15:5E:A8:7D:EE:97:2D:63:32:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444ef75-c7e4-3273-828e-13da92d78462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.45.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:5d:07:80:75:f9:b2:f3:c2:9b:e7:4d:86:91:e7:be:ad:9a:
         1e:72:4e:30:b0:e4:a3:67:dd:fc:22:dd:08:63:dc:00:a5:85:
         6f:06:0e:1a:b3:c2:ce:e9:6b:9e:bf:fc:33:d3:1e:c2:20:1f:
         0b:94:41:e3:00:fc:ab:5f:2c:88:b2:77:2f:c6:af:f1:e1:ea:
         5a:24:8f:76:65:6a:4e:89:43:48:fb:c2:d9:dc:89:e2:31:90:
         37:57:54:77:37:51:71:26:ec:0d:06:74:b1:a7:ac:ba:7a:28:
         d7:7a:61:04:f8:8b:1b:83:fc:1f:db:ce:a4:79:3d:34:61:89:
         0c:ac:81:91:1f:54:a0:6b:42:44:77:ef:39:8f:c3:6f:ab:89:
         9b:50:c6:21:59:8d:d8:30:b6:1f:26:6b:26:f2:17:7d:02:31:
         c8:c6:5f:f9:31:5f:1d:40:07:32:62:fa:dd:31:22:f8:df:1d:
         b5:f4:36:2a:bf:c2:9d:8a:6b:5b:9c:0b:88:56:e7:82:84:b5:
         9e:ec:d2:0e:ca:42:54:68:50:c9:d9:5f:38:23:87:81:13:ca:
         ce:74:31:b2:a6:f0:6e:25:ac:a9:b7:bf:5f:60:ff:4f:a8:9a:
         ee:89:2a:4b:50:cd:e8:74:db:6c:24:2f:6d:17:e4:76:dc:b5:
         ce:55:c6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:28 2024 by rpki-client on console-fra.rpki-client.org