Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bea5479-84c8-31ea-99a6-1739e63fc063.roa
File:                     4bea5479-84c8-31ea-99a6-1739e63fc063.roa (raw, json)
Hash identifier:          TVPAdb/Bzt79SRvSYdGHUdeDHcMCOEvRL+Zw6bd7fOo=
Subject key identifier:   2C:34:24:94:37:10:AE:EA:06:D8:7D:35:22:59:35:9E:41:25:C4:0D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858479AABF99FAA694C415D8677C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bea5479-84c8-31ea-99a6-1739e63fc063.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     16625
IP address blocks:        23.38.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:f9:9f:aa:69:4c:41:5d:86:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=7ce4d043-67f7-4238-8d5f-245391328774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b3:23:2f:58:af:9f:5d:8f:42:53:fd:51:87:
                    e2:ea:e8:d1:c2:7e:9e:ae:49:95:4c:35:82:db:6d:
                    f6:e9:df:51:1d:61:76:fb:4e:d5:a5:97:be:62:54:
                    ea:4c:2d:98:26:3b:02:92:7c:6d:27:ca:fd:2b:e0:
                    f4:74:a4:f4:21:0b:9a:7b:d8:9e:6b:57:42:0b:96:
                    6d:9e:d4:87:65:bc:32:a1:64:33:e1:1a:b8:8f:99:
                    5a:fa:ee:de:f7:5e:15:5d:ae:e0:29:ed:d3:8e:58:
                    41:f2:95:1f:87:a0:ad:cb:8e:d0:03:a8:9f:b7:f4:
                    d9:26:a7:90:46:b1:63:72:a9:ca:93:8e:c4:33:2d:
                    c2:eb:9a:3d:79:97:9a:5c:4e:c2:ea:4d:52:08:af:
                    9a:5d:e2:dc:10:c7:cc:41:08:2a:68:75:57:b5:9b:
                    0f:a1:b3:b5:a4:12:0a:b0:75:8c:00:89:42:7d:a1:
                    5d:61:8f:3e:d6:59:32:10:70:d2:1a:26:df:e4:b7:
                    07:0a:2b:59:d8:79:96:34:ce:55:24:c6:c1:bd:e4:
                    d8:67:3b:31:b0:d7:4a:16:a4:53:77:1a:7a:c2:7b:
                    fd:2c:c8:c9:ed:cb:98:66:4a:47:a6:10:ba:54:98:
                    e5:42:d4:d1:2b:d3:51:dc:76:1a:ff:a5:f4:44:5d:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:34:24:94:37:10:AE:EA:06:D8:7D:35:22:59:35:9E:41:25:C4:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bea5479-84c8-31ea-99a6-1739e63fc063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.38.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a4:0d:51:bb:8f:bd:b0:e4:9a:d3:0c:4f:cd:1b:d2:eb:17:
         57:5d:ca:71:99:32:cb:d9:2b:4b:b5:70:c1:79:e4:e4:ec:7a:
         b8:4f:3f:87:9a:a5:7d:29:2f:44:ec:86:54:ca:e9:c9:6d:b3:
         26:25:2c:c5:ed:ee:d8:32:f5:e1:e8:52:90:50:5e:d5:92:5f:
         59:d2:ec:c6:b0:66:ba:4b:77:bd:da:b4:c3:ce:73:c4:64:6c:
         cb:f3:6c:9b:f2:ed:a2:1b:68:9e:f8:cb:f1:a4:d4:5d:db:44:
         86:94:06:16:7b:62:a8:8c:e1:c4:be:79:30:b3:27:d4:1d:9b:
         18:28:ef:05:76:77:a2:22:30:d3:cc:66:8a:e3:ab:34:c7:10:
         3e:19:57:37:c9:df:ad:b3:53:77:9b:9d:6e:dd:67:46:f9:0f:
         06:5f:76:3d:fe:b2:ae:de:1d:b8:02:13:5c:a8:7a:d4:ae:8c:
         55:77:75:cf:55:76:91:b6:97:e9:96:fe:a8:7d:14:a8:74:14:
         60:74:78:85:95:f3:60:91:b3:b5:54:fb:9f:85:6e:23:e5:5a:
         4e:0f:a7:23:ba:31:a3:c7:9d:5d:59:4f:64:73:93:5d:86:2e:
         11:bb:48:46:3f:e4:5b:11:25:84:e3:73:c6:ae:8a:80:3e:00:
         e1:88:1b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:38 2024 by rpki-client on console-fra.rpki-client.org