Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cffc1fe-2b48-3a24-8257-8c1335167c03.roa
File:                     4cffc1fe-2b48-3a24-8257-8c1335167c03.roa (raw, json)
Hash identifier:          GqUCUdysFm5uMmdAqxc2cNaxjRL0Vk4dhsbuXReCuqU=
Subject key identifier:   BC:AB:48:09:01:03:9B:9E:E6:47:F6:53:06:F4:3C:DC:CF:1D:25:B8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847DF2F633CF39A781A4EDBB340
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cffc1fe-2b48-3a24-8257-8c1335167c03.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     20940
IP address blocks:        23.215.118.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:63:3c:f3:9a:78:1a:4e:db:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=a99f9e00-2e30-4936-aae8-46e6f58656ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b4:8c:6f:45:b3:02:85:cd:9f:8d:f0:69:48:
                    5c:37:60:9e:e5:d6:13:f7:61:90:1b:77:0c:8b:fc:
                    12:49:b6:18:fc:d7:83:cb:c5:ec:61:cf:37:f0:12:
                    85:17:3a:e3:fc:c7:fc:a3:cc:95:4a:b0:be:63:e7:
                    24:83:a0:9d:2b:c2:31:ad:10:af:b9:ae:0a:e9:ef:
                    06:34:82:f2:ee:0c:c5:dd:8c:4f:30:a2:4c:7c:04:
                    5c:4c:c6:ee:3f:95:63:37:c4:75:16:b7:0f:27:32:
                    95:cb:19:4f:d5:24:05:51:dc:5e:d9:7c:05:2b:a6:
                    73:da:31:7a:68:f0:2b:74:7f:c7:2e:73:50:53:1b:
                    bf:13:6a:ef:9b:7c:40:ab:74:57:f9:f0:01:71:2d:
                    ca:c9:1d:7d:8b:80:bb:3a:f2:c5:f1:7b:78:3a:19:
                    a4:88:83:d3:80:98:74:fc:d4:9d:69:ec:be:6b:89:
                    8a:78:24:a1:f9:93:9f:8c:70:2c:6d:ee:25:27:48:
                    05:ea:f2:6f:fd:53:38:88:49:03:d2:33:a6:8a:30:
                    de:dd:52:6a:65:25:32:fc:81:0f:82:a3:db:d4:60:
                    e7:f0:7c:ef:59:44:21:f9:fd:85:51:3b:a1:a2:31:
                    82:31:2d:66:cd:9e:b0:98:22:90:1c:f6:a7:0f:83:
                    24:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AB:48:09:01:03:9B:9E:E6:47:F6:53:06:F4:3C:DC:CF:1D:25:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cffc1fe-2b48-3a24-8257-8c1335167c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.215.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:53:21:cc:ed:9a:2c:2a:46:f6:1b:8c:90:93:04:58:38:03:
         09:ca:7b:61:65:45:45:e7:7a:be:c4:20:49:21:b1:4e:58:f0:
         12:69:94:1c:47:38:e8:70:0b:3b:69:9e:97:7d:45:7b:b7:7f:
         39:f9:09:34:62:6d:ee:5e:ea:2a:a1:f4:93:71:6a:33:6a:33:
         87:ef:df:41:0e:d6:72:b3:bb:30:6d:04:c2:19:7f:a8:57:96:
         c8:52:e3:5b:d0:b7:03:8e:4e:fc:d7:55:63:90:59:56:77:a3:
         e4:b3:72:9d:fb:af:53:68:a1:85:bc:d7:bf:b6:ec:c5:6f:6e:
         09:3a:49:87:46:13:30:3a:27:f3:f2:52:71:75:a5:65:fd:2e:
         4f:4c:f5:bd:f9:8e:e1:70:83:94:a5:87:11:72:45:c5:27:4f:
         21:a5:82:2e:11:79:23:9a:dc:8c:44:d6:15:bd:43:da:2e:54:
         c9:ba:e6:fa:51:af:31:3e:ae:c5:f1:99:30:bc:7e:d9:72:28:
         d7:7b:05:31:2a:e2:8f:77:d8:8b:30:35:ac:c9:29:59:c5:ea:
         30:66:2f:0b:0b:4e:55:00:9e:e8:c5:d8:f9:e6:06:62:25:ca:
         52:d5:b7:06:b2:88:6b:03:7f:0d:c0:1e:3c:cf:13:5b:71:1f:
         7d:33:91:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:45 2024 by rpki-client on console-fra.rpki-client.org