Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3db665bb-74ed-32ec-9cd6-db04d2b5aade.roa
File:                     3db665bb-74ed-32ec-9cd6-db04d2b5aade.roa (raw, json)
Hash identifier:          Ua7oij2fuZX30Sc3S8vYnlSA54/5ylceWerQWV/5ih0=
Subject key identifier:   DC:F7:45:31:88:26:D1:73:B9:88:A2:15:69:86:50:8B:E0:91:6A:85
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847DC64B3C03CAE4E1890035180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3db665bb-74ed-32ec-9cd6-db04d2b5aade.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     16625
IP address blocks:        23.210.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:b3:c0:3c:ae:4e:18:90:03:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=8e7ca460-2236-49a1-823a-a33b5e6e9559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:22:f2:7c:e3:38:9a:b6:4d:f1:15:d5:b7:b3:
                    ec:25:09:2e:a0:a0:00:a8:33:e0:2b:bc:9b:50:8c:
                    e6:9b:83:79:ab:a5:b6:19:0f:11:75:63:43:0a:4d:
                    02:1a:4f:3c:30:61:3b:6e:df:43:41:e0:ab:fa:d9:
                    da:59:b0:c4:3b:69:f9:24:ff:15:0b:92:92:ec:a5:
                    7e:5e:94:0e:af:04:38:3a:25:37:b3:8c:13:5b:36:
                    55:15:92:e2:90:a4:ac:96:4a:10:af:d9:33:75:fb:
                    17:a5:d9:11:6e:0d:a0:8c:62:87:06:35:58:97:26:
                    99:5c:50:66:e7:86:fe:de:9a:f1:c9:49:a4:9e:6e:
                    83:2b:e7:9d:29:42:b5:de:61:ae:54:38:ad:cb:90:
                    92:c5:ee:c8:71:ab:ba:b5:4e:72:4c:de:f0:cd:a4:
                    4e:2c:59:3b:66:83:fa:e9:3b:89:6a:ed:0a:b2:78:
                    e1:2f:df:07:bc:f3:ee:75:8d:23:19:af:54:4f:cc:
                    18:8c:05:11:05:f1:d0:d0:7d:ab:62:83:6f:d8:a8:
                    c7:e8:14:c3:68:a8:a6:32:42:f2:51:09:27:2d:78:
                    f5:9e:43:36:2e:89:a1:d3:45:da:f6:9b:12:d8:c3:
                    7b:96:e2:53:dc:b5:7d:77:dd:9f:8b:95:29:b5:41:
                    86:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F7:45:31:88:26:D1:73:B9:88:A2:15:69:86:50:8B:E0:91:6A:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3db665bb-74ed-32ec-9cd6-db04d2b5aade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.210.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:a0:41:25:67:dd:3c:45:0b:e9:f3:60:75:0d:bd:31:47:11:
         40:36:cc:a7:12:72:5c:2d:e0:85:ea:d7:5c:75:b2:e8:4d:7d:
         c4:54:d8:e3:9a:4e:92:e0:ad:c9:eb:ce:dc:71:79:8e:62:62:
         78:a8:f5:bb:4e:77:08:cb:21:cd:98:2b:6f:2b:11:60:bf:32:
         a5:96:40:84:e7:f4:48:c7:9e:83:76:bb:f1:99:c3:2b:0f:bd:
         75:5c:8b:43:65:dc:57:18:f0:14:3c:dd:e2:36:e6:72:f6:ad:
         d0:95:03:eb:ba:2b:6e:bf:19:56:23:c9:87:af:9d:1d:fa:a9:
         19:85:a8:7c:95:cf:b5:32:3b:a5:ea:db:8a:84:94:d0:e6:26:
         6f:bc:0d:87:d2:e4:c0:73:bd:bd:26:38:36:c2:8d:2f:72:13:
         29:86:d7:cf:fc:b3:68:77:f5:a8:99:4c:3b:5e:74:34:93:68:
         bc:b5:78:14:f3:28:6d:e4:77:bb:b9:c9:cd:0c:48:66:b1:da:
         ed:8a:4b:f9:52:ce:04:d2:28:69:c7:de:04:f2:f0:4e:dd:32:
         78:99:80:c5:f1:a1:15:53:45:99:db:b8:fd:e7:fb:bd:20:fa:
         cc:b4:00:02:83:68:69:89:e5:ec:34:c6:db:fd:d7:eb:ab:ef:
         e8:c0:84:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:06:14 2024 by rpki-client on console-fra.rpki-client.org