Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f7d6927-14e8-3b85-90d1-c40fc9ef64fa.roa
File:                     3f7d6927-14e8-3b85-90d1-c40fc9ef64fa.roa (raw, json)
Hash identifier:          65udqbMXExAcm0hDlgAug4MMF7uasFcZiXW+CHFDBLM=
Subject key identifier:   28:D9:94:EE:E5:09:AE:C2:4A:94:B4:FB:CB:D0:FF:47:08:BE:E2:E4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847686B92DA15E1F02566FC7200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f7d6927-14e8-3b85-90d1-c40fc9ef64fa.roa
Signing time:             Wed 02 Oct 2024 13:00:42 +0000
ROA not before:           Wed 02 Oct 2024 13:00:42 +0000
ROA not after:            Tue 31 Dec 2024 14:00:42 +0000
asID:                     16625
IP address blocks:        23.0.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:6b:92:da:15:e1:f0:25:66:fc:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  2 13:00:42 2024 GMT
            Not After : Dec 31 14:00:42 2024 GMT
        Subject: CN=46af90c3-9835-47e2-b66a-04342ec71c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:99:8e:29:5f:d8:08:fe:f7:c9:54:5c:34:ad:
                    b1:9d:2d:50:20:4f:32:f9:6b:d0:bb:ce:ef:3e:3f:
                    57:b1:1d:44:62:16:39:c7:64:2e:e9:c7:fb:23:67:
                    39:a0:22:0c:e4:e6:7c:9b:0a:07:a7:c9:67:a3:ad:
                    ea:7a:c3:26:5c:ba:b1:69:cb:80:70:85:3c:53:67:
                    92:bd:63:da:76:71:5d:c7:b3:e9:52:3e:67:ad:43:
                    4e:58:a9:84:d2:2b:1c:31:e9:8d:ce:21:3c:63:ed:
                    9c:d7:eb:51:c3:c8:cb:86:f2:e2:ef:87:95:8a:2a:
                    86:6c:81:2d:6d:73:9d:e6:39:d7:a6:b7:bd:48:55:
                    7b:46:bf:97:cd:a7:6a:15:e6:d6:9b:31:55:b1:a2:
                    83:1e:42:1c:70:e0:41:d5:28:ea:cb:87:6d:04:2a:
                    87:57:22:97:e4:ce:ba:a1:2e:07:37:fe:33:d7:62:
                    66:3b:ac:f4:d1:df:4f:cb:83:c1:7e:34:64:5a:3c:
                    78:86:2d:72:f1:e3:82:0c:8b:f0:ec:4a:21:27:9f:
                    13:ab:24:32:0a:4a:42:aa:a0:2e:82:6c:84:d9:77:
                    ba:4f:66:1a:9b:27:b8:c3:09:96:78:13:ad:4a:48:
                    ba:7d:f4:b8:9e:5c:83:b5:de:f9:0d:18:70:95:b0:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D9:94:EE:E5:09:AE:C2:4A:94:B4:FB:CB:D0:FF:47:08:BE:E2:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f7d6927-14e8-3b85-90d1-c40fc9ef64fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.0.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:3c:c0:e1:de:d2:f2:15:3f:a1:a9:bb:d2:49:68:fe:86:90:
         57:05:23:33:de:a9:e4:ff:ab:4b:12:7b:45:8f:37:04:b7:32:
         61:aa:ae:34:46:26:50:5a:c9:5e:32:f8:46:fa:ca:34:56:30:
         e1:67:50:89:6f:7a:1d:05:82:0f:90:cd:0f:cd:b6:b8:24:a9:
         1b:7b:e3:f0:e5:a7:65:3b:12:a8:90:f3:0f:b9:ca:bf:12:af:
         12:2c:f7:ea:f5:ca:41:2b:d1:8d:b7:4d:65:ee:84:56:e2:56:
         5c:74:cc:5d:64:ed:16:a9:94:b7:34:b5:7f:8f:d7:ee:71:38:
         18:a3:1f:93:51:57:54:c2:77:7e:6f:c9:58:73:b3:36:39:4c:
         89:8e:98:d4:07:ea:63:ed:29:3c:5f:68:a5:a9:5a:ea:92:44:
         89:d7:e2:94:1c:cf:0d:90:25:a6:ff:e6:f5:45:77:88:1a:f2:
         c5:0c:37:38:2b:8a:3e:a4:76:f7:25:9b:0c:96:6b:60:f7:c5:
         fb:8d:7e:76:59:37:4e:f1:c1:e0:dd:73:1c:42:5f:95:44:dd:
         4b:73:a2:9d:56:d1:6d:34:e0:0a:62:9c:b3:72:15:e6:4c:7f:
         94:fa:5a:1f:80:8b:f3:d7:fc:15:37:39:aa:56:5e:40:d4:7e:
         a8:80:44:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:31:56 2024 by rpki-client on console-ams.rpki-client.org