Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37f0effb-9d60-3b35-b7a6-9d0754f41ef2.roa
File:                     37f0effb-9d60-3b35-b7a6-9d0754f41ef2.roa (raw, json)
Hash identifier:          oo8LfActwbsbyZWaVWVV6FuKMyS512c1tZQdviZGRWE=
Subject key identifier:   94:51:06:E0:73:6B:FC:CA:A8:33:CE:8F:3A:0C:D8:0B:E4:3D:24:BC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847DC64BA4BE0043906BA2E2780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37f0effb-9d60-3b35-b7a6-9d0754f41ef2.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     20940
IP address blocks:        23.213.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:ba:4b:e0:04:39:06:ba:2e:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=cc6c4a73-c2ad-415e-a30a-56c371ed10f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:79:ba:4f:71:5e:c7:1a:41:9f:34:da:6a:5d:
                    b8:db:76:d1:8d:75:55:81:e8:7a:b2:45:23:54:14:
                    08:8b:02:f7:f0:b2:99:81:a2:19:d3:72:1e:0b:09:
                    28:9c:32:7e:0f:a6:86:9a:85:66:a2:6b:c5:25:9d:
                    c0:4b:49:a7:a7:49:a5:56:ae:ca:61:51:ce:74:01:
                    c9:8f:6e:a1:6d:cb:b0:51:a2:68:09:da:81:09:74:
                    1a:fc:be:8a:44:66:94:8c:8b:3e:39:af:4e:ee:dd:
                    db:6d:f0:f3:94:e3:a9:3e:80:e2:b5:9f:fe:c6:c9:
                    9e:9f:f1:45:3b:02:2c:f9:c4:68:10:3b:76:34:f9:
                    6b:3f:f7:46:75:72:83:db:e7:60:ec:4a:4b:60:fe:
                    e4:e7:a1:70:8b:9d:b1:52:8e:ff:2c:f8:6e:07:81:
                    af:1e:f7:08:85:c0:18:45:97:2a:4f:9b:ec:c6:6e:
                    7d:df:12:3c:3c:ff:2d:51:a6:23:8d:13:50:9d:2c:
                    46:20:7f:74:3b:92:dc:0e:92:ff:87:5f:56:0b:ca:
                    a5:de:a8:7d:ac:d5:ba:4c:fb:6d:97:90:ae:56:87:
                    cd:53:95:12:86:37:58:c2:bf:1d:98:52:f0:5b:27:
                    8f:a8:7b:dd:50:51:13:48:74:26:15:e8:f4:ba:b7:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:51:06:E0:73:6B:FC:CA:A8:33:CE:8F:3A:0C:D8:0B:E4:3D:24:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37f0effb-9d60-3b35-b7a6-9d0754f41ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.213.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:57:a0:57:a6:b2:15:58:a5:15:3d:c5:bb:06:21:72:64:35:
         4d:d7:af:89:b0:8d:f6:bb:82:25:ce:87:17:e1:06:b5:09:39:
         d0:83:c9:1e:c0:35:e0:35:7a:e7:a6:a6:d9:0a:7b:28:2a:e6:
         37:22:7a:99:44:ac:4f:56:71:65:0b:9d:8e:02:59:d6:7c:fc:
         c0:3a:7b:f7:60:6b:28:e1:65:82:c0:03:5f:97:23:95:6d:e4:
         64:81:97:f9:10:b0:ba:dd:2c:46:2e:b3:06:48:ed:5d:c5:d4:
         7b:7f:32:39:05:c1:b8:41:d0:45:ff:e0:de:18:f5:b3:fa:13:
         a2:81:76:03:6f:43:5d:c9:7a:35:bc:70:16:c1:a1:a5:1f:b5:
         72:49:ae:ed:87:ba:27:2a:26:1e:e6:24:96:a0:fe:89:46:76:
         83:4c:cf:ea:7a:cf:92:f3:ef:04:f4:22:87:a7:e5:68:0f:9d:
         4f:8b:51:0b:38:e5:b0:4f:e6:ea:47:46:bf:b8:29:57:f1:98:
         63:31:05:26:46:14:20:94:bb:36:a1:c4:7a:b5:1a:98:1e:6a:
         f6:ad:23:e8:44:74:bd:da:06:7e:f0:6d:e8:fc:ce:05:9f:70:
         9a:88:ab:0b:cb:83:8b:ac:dc:67:5a:e4:0e:dc:22:4d:c3:72:
         ee:ee:f9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:36 2024 by rpki-client on console-fra.rpki-client.org