Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aee78fd-0fd4-30c0-b57a-d533b312b5e5.roa
File:                     4aee78fd-0fd4-30c0-b57a-d533b312b5e5.roa (raw, json)
Hash identifier:          2VyPjIU2i5cRyfKgrHog2SxTj63DmzBZqS/2FNayDbo=
Subject key identifier:   18:63:CE:F9:2D:41:95:D5:F7:DF:43:5A:FE:D5:1B:0E:BE:83:F6:C4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36CD4C1FB1CCC561E89E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aee78fd-0fd4-30c0-b57a-d533b312b5e5.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.55.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:cd:4c:1f:b1:cc:c5:61:e8:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=0cbac5b0-8079-4822-8e93-89bc191aee8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e8:a3:32:5e:fa:d6:6f:1f:f0:34:ae:e8:6f:
                    00:87:91:70:5a:94:68:78:c9:e1:d0:93:71:c4:48:
                    f4:39:67:d0:6f:f6:6d:8e:8e:3b:73:3f:50:e0:0f:
                    c6:75:28:57:85:e7:eb:82:6b:22:24:34:30:c3:72:
                    82:58:33:54:43:f8:3b:ad:29:b7:66:f4:e0:d5:5a:
                    c4:2b:dd:f2:24:15:ba:40:4e:95:19:74:6e:fe:21:
                    e7:bc:93:1c:75:a5:0d:2c:c7:f4:e0:7c:5c:eb:b4:
                    6c:cc:28:ec:c8:76:d8:b5:7a:38:18:89:42:66:a5:
                    74:71:39:2f:86:80:cc:79:0a:6a:d2:31:18:8d:b0:
                    ed:de:b7:99:bb:39:be:37:08:54:26:ba:9f:c5:9a:
                    ef:7c:8c:2c:04:5a:5f:df:42:aa:9d:28:88:53:2e:
                    a8:f9:0f:84:10:c9:e9:9f:e3:49:6a:bc:99:9b:69:
                    86:fe:ef:29:15:98:a5:06:1b:92:b6:6c:59:1f:d4:
                    71:d7:1d:44:79:74:77:47:1c:cb:38:9a:53:f8:9c:
                    c2:ea:49:42:65:00:41:53:10:b8:64:a0:87:18:ae:
                    3a:d6:00:72:7a:52:0a:b8:7a:75:04:c0:08:48:35:
                    db:03:2a:fd:52:fc:b8:84:87:7c:9c:d8:9c:5c:a9:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:63:CE:F9:2D:41:95:D5:F7:DF:43:5A:FE:D5:1B:0E:BE:83:F6:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aee78fd-0fd4-30c0-b57a-d533b312b5e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ed:e9:a2:f0:fa:59:14:61:ec:0e:a7:d9:f9:70:ca:99:dc:
         83:b8:1b:97:d0:e9:94:95:87:46:2b:b7:c1:17:03:c3:fd:78:
         ae:13:31:44:65:fc:75:84:c4:2b:2e:41:6a:8b:62:3b:cf:86:
         ef:fe:a2:e0:8e:99:4d:3a:92:5f:e5:e7:e7:5d:bd:4e:c1:ee:
         50:be:8b:f4:1d:5b:41:45:91:93:33:c0:bb:69:db:f4:6b:ab:
         1b:ad:5c:c4:1f:b1:df:99:9c:66:12:9a:73:ba:fd:87:b7:4f:
         81:01:83:f1:a8:ad:bb:cc:6c:2b:78:49:14:d3:0e:28:51:a0:
         e9:0c:cd:d0:0f:d8:45:60:fd:36:e8:97:22:51:cc:94:cc:0b:
         db:41:7e:4b:e6:78:bd:92:45:33:61:dc:ee:14:d7:9c:d5:3b:
         66:d6:30:a3:c0:04:20:46:b6:d3:7f:f7:3a:c5:09:16:cd:a0:
         9d:11:41:7f:ce:b9:4c:00:58:31:d2:b9:50:ea:71:84:95:13:
         2d:48:ee:f1:b9:ba:5b:f2:50:42:95:6b:1e:6a:08:41:5b:7c:
         78:99:c5:3d:53:b7:90:ec:37:e2:ad:46:81:87:15:b6:95:bc:
         ec:b6:a7:f7:31:a8:51:63:2b:e4:d0:d9:62:48:1b:a3:8e:da:
         bd:31:8d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:26 2024 by rpki-client on console-ams.rpki-client.org