Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/397bee94-4c95-3a72-95c8-179db23e6229.roa
File:                     397bee94-4c95-3a72-95c8-179db23e6229.roa (raw, json)
Hash identifier:          FkxZ7MBpFbPUimZa/dDWFFsGgLEhH3EOjIdfYDKibt0=
Subject key identifier:   F8:90:D8:E9:D9:F1:7E:50:A3:8C:5C:DE:A3:04:F3:50:74:8A:5B:14
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847D999FD7054ABD223C2172680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/397bee94-4c95-3a72-95c8-179db23e6229.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     16625
IP address blocks:        23.205.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:fd:70:54:ab:d2:23:c2:17:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=7c65ed14-bb74-4abe-b586-387977860b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:78:43:55:03:6c:52:59:81:4d:d2:b5:ee:
                    77:ef:27:2b:28:62:fe:93:ba:d8:66:8e:87:a6:eb:
                    ef:53:44:38:0f:45:61:f8:24:1a:50:ca:a6:81:74:
                    66:ac:ab:d5:1e:84:ee:9a:b1:e0:cb:f6:56:c8:9d:
                    5b:6e:7e:d8:64:20:08:a9:19:68:c4:77:09:7a:24:
                    1c:86:bb:5e:74:79:43:9c:b6:6f:2d:d6:9f:87:d7:
                    a9:02:24:1d:07:b2:73:69:9a:41:5f:f6:13:21:4b:
                    68:03:54:8a:11:f0:a3:a0:d8:d0:1b:f9:8e:72:a2:
                    dc:69:d3:43:e1:9d:75:73:20:2a:69:b6:54:d4:43:
                    6f:b5:56:52:58:07:48:a3:4f:9c:9b:d5:4b:d3:8f:
                    23:f3:0a:bd:d9:25:16:2d:d4:d4:9b:67:b9:da:3c:
                    ea:d8:d3:c2:06:41:d0:50:da:6e:0b:aa:b4:31:3a:
                    09:f6:02:b7:f2:ee:85:d6:7c:d0:7d:7c:16:11:61:
                    48:2d:ea:5b:19:6c:ff:c4:a9:0a:02:bc:7f:1d:6d:
                    72:dc:79:8a:21:6c:3b:8b:d1:85:2a:83:08:6a:6e:
                    63:ed:24:03:1b:b1:ac:91:28:b3:78:34:0a:5e:1c:
                    b0:1d:4f:97:5f:1a:17:1f:e6:e1:11:f2:6b:ca:9b:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:90:D8:E9:D9:F1:7E:50:A3:8C:5C:DE:A3:04:F3:50:74:8A:5B:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/397bee94-4c95-3a72-95c8-179db23e6229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.205.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:33:48:5e:55:86:06:06:13:e6:6f:42:de:37:39:7e:f4:b7:
         f3:86:00:a6:af:55:32:87:c4:dc:3b:ff:35:8b:1e:81:7a:a9:
         85:e9:98:34:2c:de:70:94:4e:30:26:ec:d4:88:61:8d:63:89:
         cb:20:63:9a:d9:4a:f2:bf:5e:a2:f1:51:4c:09:5d:6e:68:04:
         26:99:5e:c0:1d:c3:c2:5c:13:99:7d:b0:7c:c2:d6:06:fb:ed:
         82:3e:3a:db:86:56:4c:be:48:e3:24:5f:69:be:64:8c:73:b0:
         13:a9:f7:6d:99:31:0b:cb:82:7a:58:c4:7a:55:06:6a:c9:57:
         98:f1:e9:57:26:45:15:68:8e:26:cd:d9:8e:b9:9c:8f:72:ec:
         5d:3f:51:87:f7:0f:66:20:92:ef:69:3e:c0:f2:43:9d:1f:a8:
         20:db:fe:3c:36:64:be:70:09:ed:18:da:94:02:ff:4c:9b:4e:
         51:84:ec:ad:a6:66:fe:76:20:c9:a8:e3:14:e7:1d:43:5d:9f:
         5f:31:6c:a1:04:c5:89:88:fc:4f:1d:7f:68:7a:8e:ff:ab:56:
         5b:7c:58:31:34:78:c6:3f:9d:ef:a5:c3:78:3a:db:b1:74:81:
         e7:60:40:00:9a:80:6b:32:46:79:42:bf:06:27:d5:0e:de:5b:
         2f:e8:f2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:30 2024 by rpki-client on console-fra.rpki-client.org