Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa62e02-af27-329c-951f-b7bee0b1db13.roa
File:                     4aa62e02-af27-329c-951f-b7bee0b1db13.roa (raw, json)
Hash identifier:          2qw4/lwOop+v3O4/F+pehjeMY7Ha+hHpuqkBc1xuOiY=
Subject key identifier:   F0:7B:76:22:F8:99:EE:2A:A2:A8:03:B7:8F:09:EA:D3:5A:E0:C0:71
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CA3F964EFEC1DEEE11DC9000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa62e02-af27-329c-951f-b7bee0b1db13.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.202.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:96:4e:fe:c1:de:ee:11:dc:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=0fc2b21c-e658-47c9-beae-826545c7d7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:41:74:94:e1:6f:52:87:0f:71:bf:9a:0b:b4:
                    f0:f1:34:71:9f:4a:19:2b:2b:0e:cc:cb:ce:65:2d:
                    19:05:f0:44:3a:8a:d3:95:ee:5a:2a:36:db:eb:37:
                    f8:5f:02:64:b4:e6:12:c4:d0:54:ab:3e:6b:ca:9d:
                    e4:1c:fa:65:7b:86:22:4c:11:a7:71:45:23:a2:c6:
                    23:57:1d:b5:d7:ec:97:e9:19:32:f7:2c:c4:cd:0b:
                    36:e4:19:bb:03:f5:15:80:51:f3:60:0b:d1:83:28:
                    ce:97:a4:43:d1:ea:56:43:52:bb:e3:d3:93:ed:9b:
                    8d:3e:6c:c8:85:f7:1b:2e:25:3e:0c:9a:5e:2e:28:
                    16:44:3c:c0:ef:a9:59:39:b5:f1:aa:01:8d:65:07:
                    66:e7:bd:66:92:fc:72:5e:fa:0e:27:ed:42:3d:bb:
                    88:5a:d5:3e:77:dc:d7:5d:61:a6:12:ef:ce:a3:dc:
                    06:0d:ed:88:00:24:0c:d6:63:ee:d2:6b:b7:d6:aa:
                    61:5b:b0:97:c5:72:f7:63:2e:0b:c5:68:98:df:9b:
                    a6:73:35:6d:ae:7b:d3:91:57:36:4b:dc:2d:97:8e:
                    d2:fb:b2:47:ad:f3:32:67:bb:b7:ba:ee:21:4c:21:
                    e2:4c:cd:65:8e:1a:a2:91:06:70:c8:74:85:a5:84:
                    af:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7B:76:22:F8:99:EE:2A:A2:A8:03:B7:8F:09:EA:D3:5A:E0:C0:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa62e02-af27-329c-951f-b7bee0b1db13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.202.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:a6:b9:90:f8:0d:55:68:6f:9e:4c:c0:62:ce:35:2e:e3:02:
         d2:a7:04:7d:83:e4:ef:a2:5a:93:2c:1f:c9:5a:b8:91:7a:c4:
         91:f7:ca:b9:aa:b9:2b:ae:f6:50:18:fc:33:2c:49:69:b7:90:
         70:d0:74:43:51:40:09:9b:39:0c:1f:3a:ff:b8:d8:15:45:7f:
         f8:08:ac:3f:d0:ec:30:9d:ea:44:16:e8:41:c3:08:ac:b5:fe:
         25:19:69:e0:69:18:83:83:59:8d:15:0e:d9:c9:2e:97:94:9c:
         e5:b6:40:2e:67:06:4a:0b:5d:64:44:0e:db:4b:d0:01:b2:47:
         ed:dd:95:03:0d:64:5b:fa:88:d2:a2:56:a4:75:01:2f:bb:ca:
         e2:03:0f:42:de:d6:d7:d2:e9:51:51:5f:8d:d9:34:5c:dd:29:
         f1:d0:bb:ce:4e:cc:11:a2:f1:d5:14:80:cf:33:04:50:59:a6:
         6d:3e:37:5b:16:d7:f8:33:91:b4:cd:5b:e8:68:f2:35:1d:b7:
         16:35:07:99:b7:b5:1d:1d:e9:95:64:a4:72:13:71:1a:3b:b3:
         54:6a:68:4c:fc:f4:33:e1:e0:55:c8:ae:57:b0:b9:d9:59:04:
         62:2a:50:fa:e5:7a:f5:3c:e9:f3:f1:f6:0a:05:6d:b4:b3:de:
         da:f3:03:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:31:59 2024 by rpki-client on console-ams.rpki-client.org