Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45d558a8-2b9a-3543-825a-26b2468ad9e1.roa
File:                     45d558a8-2b9a-3543-825a-26b2468ad9e1.roa (raw, json)
Hash identifier:          sR892u2NsX7gMYacoGN5f0PaTrkUa5+oDtVHSad9pm8=
Subject key identifier:   93:EC:D3:61:D8:05:62:11:6F:61:52:A3:9A:2C:DF:E3:4F:F4:6E:2C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858475D40DFEAA3CFC90E94BD6060
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45d558a8-2b9a-3543-825a-26b2468ad9e1.roa
Signing time:             Sat 28 Sep 2024 13:00:41 +0000
ROA not before:           Sat 28 Sep 2024 13:00:41 +0000
ROA not after:            Fri 27 Dec 2024 14:00:41 +0000
asID:                     16625
IP address blocks:        23.222.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5d:40:df:ea:a3:cf:c9:0e:94:bd:60:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 28 13:00:41 2024 GMT
            Not After : Dec 27 14:00:41 2024 GMT
        Subject: CN=c8d18c67-9f52-4440-9f46-f20983915263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:5d:38:97:02:08:a1:9f:13:dc:2a:2f:9d:
                    c9:8e:00:68:d7:3b:87:eb:b7:8b:1a:69:00:2b:5f:
                    16:4d:bf:96:cc:bc:5e:cf:8c:81:f5:ca:ac:c2:00:
                    37:19:29:2a:68:ac:d7:b6:ff:b2:f3:89:76:22:1d:
                    2b:e7:74:08:68:06:a2:38:3e:94:dd:87:1a:a7:a7:
                    f1:6a:6b:5e:3e:f2:dd:36:ec:81:74:48:86:ea:a1:
                    04:95:4e:1b:28:73:f5:99:ab:c6:61:78:ac:cb:43:
                    3a:d8:4f:eb:c3:c2:a0:1b:b2:7f:bc:0b:6d:c3:12:
                    d3:7d:6c:56:bd:80:69:c3:3a:3e:32:22:49:34:dd:
                    cf:f6:77:29:c0:cf:24:71:00:a2:c3:43:87:d3:e2:
                    e5:57:f5:46:dc:ca:e2:63:f1:b3:48:55:a3:ce:34:
                    67:ae:37:0f:0d:a2:ee:76:eb:0c:f7:48:15:79:e2:
                    d0:96:10:ce:39:b3:fa:f9:d4:23:e9:36:47:a7:1b:
                    41:7c:6b:14:bf:23:cc:40:0a:43:0f:04:62:e0:c3:
                    74:ed:d6:84:fe:c9:e5:ad:a7:8b:a2:c7:23:ac:45:
                    d8:5c:ec:8d:74:92:80:41:87:dc:4e:0d:97:31:1a:
                    ec:7b:f5:49:e6:72:f9:2d:03:d2:e0:c4:4a:54:cd:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EC:D3:61:D8:05:62:11:6F:61:52:A3:9A:2C:DF:E3:4F:F4:6E:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45d558a8-2b9a-3543-825a-26b2468ad9e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.222.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3f:1a:c6:05:3b:18:e3:52:6f:0a:ec:b7:dd:0f:47:d8:84:
         5f:d2:3f:dd:98:6f:7b:6d:f6:12:4f:ca:c4:83:dd:8e:d9:c3:
         cb:14:25:b7:da:05:69:74:72:0d:c2:d3:66:d8:9e:5c:dc:2d:
         9b:1e:b4:cc:0e:b3:a2:e5:d6:48:47:fc:41:2a:48:3c:ab:72:
         0d:e6:d8:a1:45:2f:d8:58:92:32:8d:6d:e2:78:6e:fe:ee:6a:
         8c:8a:b1:78:a3:ec:35:8c:83:8c:d5:20:63:b4:ad:ba:d3:fc:
         03:1a:35:d7:1b:2f:31:1c:ef:0d:a6:b5:be:61:3a:b1:fb:ae:
         04:1b:66:c7:dd:e9:bf:b8:e0:12:7b:67:b9:1d:f5:3e:47:1f:
         e3:2e:af:aa:df:67:ad:8c:a4:fa:9f:56:f5:b9:a0:4e:c3:ee:
         d9:20:59:2f:56:68:ab:a2:48:a9:09:cf:c1:b4:7b:42:c2:5e:
         ae:92:f4:5d:1d:a3:c1:db:7d:ba:fb:79:c2:2b:03:a1:95:fb:
         e5:17:f5:af:65:8d:d3:f7:94:90:16:82:d5:fe:cc:6c:37:00:
         25:cc:d4:aa:58:96:f9:bd:53:10:a2:bc:c6:84:21:53:ab:ba:
         13:1a:cf:5b:0a:76:84:fd:9a:79:54:45:6d:c5:d2:84:cf:e8:
         02:c6:ef:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:36 2024 by rpki-client on console-fra.rpki-client.org