Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d66a1c8-766d-38c2-b1d3-8e26d8ed55fd.roa
File:                     4d66a1c8-766d-38c2-b1d3-8e26d8ed55fd.roa (raw, json)
Hash identifier:          A97do7nrbscGKBOz9FBKHROJhGXf3zShfKIEVnxh7oo=
Subject key identifier:   48:9C:96:85:CF:F0:6B:5A:77:BB:34:B8:7A:2C:28:47:64:F8:88:B3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B9617E860968FFCFB8ADC3C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d66a1c8-766d-38c2-b1d3-8e26d8ed55fd.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.192.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:7e:86:09:68:ff:cf:b8:ad:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=b4c97ff7-3db1-4b71-8e60-cf87607a8e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:25:38:3e:3e:dc:03:fc:70:75:c4:81:e5:55:
                    ea:11:b4:23:97:40:50:71:e0:6a:55:0c:6d:ec:47:
                    19:9a:1a:6a:c0:7c:4e:e9:c6:13:96:6b:1c:0b:43:
                    81:cf:b1:01:f9:34:6d:83:b7:a7:07:b3:f2:61:85:
                    c6:cc:57:06:47:1c:83:cb:a8:53:00:09:c7:2b:ff:
                    38:ff:64:de:41:df:28:27:55:c5:44:97:1d:e2:14:
                    65:82:60:58:65:56:7a:7c:d8:56:ae:d9:4f:8f:e8:
                    50:0e:3e:fb:6c:73:a4:dc:be:a1:13:f7:ad:5f:f8:
                    82:c1:df:0e:27:29:94:37:c4:40:f3:41:48:43:19:
                    6f:c1:1a:87:92:8f:0d:c8:30:bf:9f:f7:28:b9:d4:
                    6e:b0:d1:2b:e3:6e:36:3e:5d:0a:74:48:53:29:ff:
                    0a:bb:ce:a5:01:9e:24:ab:d1:d9:19:c1:b0:de:8c:
                    5e:9c:50:7f:fa:6f:5c:17:cf:ed:fb:c3:64:b3:3a:
                    22:05:d4:27:3c:81:ba:f7:3b:a1:bb:b6:90:71:55:
                    55:ec:77:6c:ba:47:0e:dc:ab:36:5b:a9:83:19:52:
                    9a:5f:ba:7c:2b:3b:ff:75:35:f1:64:5f:7f:a0:bd:
                    2c:6d:b9:9c:dd:ee:0c:e2:d3:97:69:a1:ce:cf:e8:
                    48:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9C:96:85:CF:F0:6B:5A:77:BB:34:B8:7A:2C:28:47:64:F8:88:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d66a1c8-766d-38c2-b1d3-8e26d8ed55fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ed:9e:dc:b3:85:67:2e:c3:a4:2a:35:db:41:91:1f:8c:a7:
         80:cc:b1:23:c5:87:48:43:5c:e0:1d:92:fc:12:af:06:80:47:
         8a:d1:ac:48:21:69:dc:75:11:36:90:c1:b7:33:5d:4f:6c:7f:
         11:6f:61:85:4a:66:52:7c:aa:83:53:0b:06:0c:f0:a7:7f:af:
         d7:d5:24:80:0f:7a:8b:78:7f:62:63:09:0b:96:b6:35:62:76:
         a9:3d:45:82:fb:93:2e:e6:35:73:24:6e:76:24:05:08:00:b3:
         2e:24:7d:d2:fd:68:ca:7a:83:dd:c9:5c:b7:c6:7b:13:96:ba:
         10:6c:2c:93:20:ef:77:91:6c:99:03:18:22:7c:89:59:c5:01:
         32:90:ef:c6:7a:f8:7e:82:db:be:e7:43:05:f8:80:82:1e:a9:
         7f:dc:cc:03:16:70:cb:93:9e:e7:51:e9:ff:da:c9:d9:55:c4:
         d5:44:ef:d3:c1:f4:b5:0e:5e:9a:79:4a:fe:2f:d4:d4:d4:ba:
         ee:2d:64:7d:f1:69:44:ff:be:3d:1e:74:70:67:85:96:00:41:
         35:67:1c:c6:99:89:87:dd:0f:f9:54:88:52:73:9a:4e:d6:5f:
         a5:97:38:ab:c8:e2:b4:ba:34:71:8e:51:ee:39:71:e9:5f:f9:
         cc:ac:79:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:27 2024 by rpki-client on console-ams.rpki-client.org