Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44b7230d-fcd3-3f42-9f46-acfb758b26af.roa
File:                     44b7230d-fcd3-3f42-9f46-acfb758b26af.roa (raw, json)
Hash identifier:          d2FodgTci1yqmdljHsGN8dBuP3ejsMRU6BZAklMo840=
Subject key identifier:   8E:1C:19:15:2E:4B:BF:85:55:ED:4E:C7:E7:4A:CF:FA:1B:D9:88:32
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847643B7C835D77013BD5665D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44b7230d-fcd3-3f42-9f46-acfb758b26af.roa
Signing time:             Tue 01 Oct 2024 01:00:31 +0000
ROA not before:           Tue 01 Oct 2024 01:00:31 +0000
ROA not after:            Mon 30 Dec 2024 02:00:31 +0000
asID:                     16625
IP address blocks:        23.15.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:64:3b:7c:83:5d:77:01:3b:d5:66:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  1 01:00:31 2024 GMT
            Not After : Dec 30 02:00:31 2024 GMT
        Subject: CN=c28ccd1f-22b7-4597-bd70-08a65a8bd72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:86:9d:98:f2:ac:a9:ac:f4:66:73:ce:97:54:
                    78:75:2a:55:8e:49:15:23:f5:76:a4:66:38:93:f7:
                    bb:e9:0d:bc:cc:1b:48:9e:99:79:ee:28:96:60:f1:
                    28:30:45:95:b5:12:2b:f4:98:0c:c3:63:ea:6b:7a:
                    71:ce:a8:5c:90:eb:ff:eb:c4:21:e5:c5:10:14:cd:
                    43:54:e7:40:22:50:66:7e:ad:d1:84:5e:6b:4a:96:
                    ab:38:58:6b:f1:e8:4c:94:19:f3:23:bf:34:74:43:
                    4d:29:6b:83:fe:b3:ef:de:37:11:75:e8:a1:c5:db:
                    e4:b7:9b:3f:4e:ec:69:a9:2c:cf:25:ff:ac:6e:97:
                    bb:8a:3d:6b:9c:2f:68:3c:5b:02:09:3f:33:f8:b7:
                    db:27:be:5d:56:4d:f4:14:20:f8:b8:19:5a:43:3a:
                    52:d6:72:48:fd:27:fa:ba:73:b0:57:f8:a4:bd:ee:
                    be:f8:9d:54:81:fb:9c:70:21:10:8b:ec:b7:e7:dd:
                    1a:31:94:72:02:30:fa:c7:d1:1d:30:88:a1:51:26:
                    6a:2f:66:17:7c:6f:12:ca:85:3d:ae:fb:43:2a:f5:
                    bb:d8:63:9a:34:1f:4d:50:d9:3f:a1:65:81:c7:c2:
                    2e:4f:d9:b7:92:d6:ed:36:13:28:f4:a7:0e:9e:6a:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1C:19:15:2E:4B:BF:85:55:ED:4E:C7:E7:4A:CF:FA:1B:D9:88:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44b7230d-fcd3-3f42-9f46-acfb758b26af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.15.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:5b:e3:29:cf:18:43:8b:f5:f1:e6:6b:88:10:59:46:d4:d8:
         2d:c4:0f:65:c8:32:a6:55:f8:02:67:ee:12:1c:86:de:0d:c7:
         d3:02:c2:99:38:c0:2e:cd:14:97:cb:7c:27:ad:13:f6:c9:b6:
         66:ff:6c:71:d5:9b:53:e0:5a:8e:23:f8:c7:6a:37:1b:b8:7e:
         4d:e8:be:7f:4c:49:b3:a9:e6:2f:b4:e9:81:df:bf:e5:bb:d8:
         d8:a4:63:9f:e3:fa:d7:52:b1:83:71:b2:de:57:d5:d7:be:0a:
         d3:e0:31:44:56:0f:45:0c:fb:92:0b:10:32:1d:96:af:ad:aa:
         60:97:13:94:52:86:a2:87:7b:78:21:53:92:39:5c:a2:70:59:
         28:1e:c2:c6:9e:44:8c:82:f4:1e:35:ae:ba:bd:42:05:86:b5:
         8a:61:90:ef:9f:1b:1a:be:7b:51:4b:60:8e:1e:07:f7:8e:b7:
         c4:62:21:ac:b6:df:d6:3d:87:c2:ea:86:70:5d:49:70:24:f8:
         dc:62:cf:22:7c:78:9b:e0:50:74:f2:f7:64:cf:f9:3e:43:65:
         db:75:b5:b2:ed:e9:3b:f9:dd:e0:f0:e4:8d:f2:50:c9:d9:f2:
         22:16:06:53:26:a5:ea:86:17:66:f5:89:6e:ee:99:00:a2:74:
         56:bb:f5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:20:21 2024 by rpki-client on console-fra.rpki-client.org