Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e282d90-335d-320b-ab2b-9379e56499ab.roa
File:                     4e282d90-335d-320b-ab2b-9379e56499ab.roa (raw, json)
Hash identifier:          QArgPmA2CC8bKfn9tPOwUGVZrMaB76vWWgjvbqbpfN0=
Subject key identifier:   1B:F3:84:5C:4F:9D:44:BB:62:EA:BC:3B:78:BC:DD:B5:D9:47:2D:EE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847DF2F5DAF0AC7E3CC20E71100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e282d90-335d-320b-ab2b-9379e56499ab.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     16625
IP address blocks:        23.216.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:5d:af:0a:c7:e3:cc:20:e7:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=99511730-a688-4407-b027-b5f2acc2f474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a0:d4:b4:0e:7e:01:df:74:01:ad:a1:9d:2d:
                    00:fc:4f:a4:b6:b7:fb:b3:b2:52:b3:79:99:61:91:
                    f0:e3:73:a5:99:8b:97:6f:77:a8:69:3d:4a:8f:b2:
                    b6:57:42:12:24:2e:41:27:44:fa:07:a2:e1:cc:db:
                    36:57:00:21:5f:57:ce:5a:82:75:2d:14:0a:03:2e:
                    70:d6:3a:d1:9a:4b:9a:32:02:2c:64:44:ae:04:04:
                    d9:5d:49:92:ea:b0:26:c0:5f:5c:c5:97:b7:af:d6:
                    d1:33:ae:2d:92:fd:74:09:89:1a:16:fd:de:30:63:
                    39:7b:e8:34:37:19:be:1b:e1:40:59:38:75:7e:34:
                    7c:d7:50:33:54:51:74:f1:61:23:4f:87:46:10:13:
                    c1:bf:25:2f:e9:c0:46:e3:9f:9c:68:98:4f:fb:05:
                    11:26:13:c9:58:ba:f9:a7:65:b6:24:1c:09:8d:0f:
                    0f:ab:54:08:9c:e8:aa:4f:0c:b7:d2:94:f0:dc:dc:
                    75:99:ae:da:e8:3b:64:cc:8e:d6:14:44:4a:0b:4f:
                    28:54:52:28:2f:e5:a3:27:86:30:8a:bf:e2:fe:a1:
                    78:ec:db:2f:b7:9a:d1:ed:0d:1c:4f:09:56:df:9c:
                    96:54:31:f4:e6:08:93:1d:59:c5:f0:9d:94:6b:8e:
                    32:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F3:84:5C:4F:9D:44:BB:62:EA:BC:3B:78:BC:DD:B5:D9:47:2D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e282d90-335d-320b-ab2b-9379e56499ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.216.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:9c:85:f0:b0:51:84:fc:32:b5:84:21:ca:0a:a1:f2:5e:90:
         d0:34:4f:f5:8e:ed:73:25:88:4f:02:b9:32:9f:f3:5e:67:41:
         b6:6c:29:47:ff:03:43:fc:bd:7c:c7:19:e7:dd:4f:c9:23:c5:
         6e:81:fc:19:33:fc:bc:59:9a:a2:25:96:0e:68:0f:fd:5c:0e:
         a7:ab:57:ce:93:e0:bc:a4:98:5a:47:fd:03:4a:58:f1:af:5b:
         85:8c:91:b9:7e:f0:ad:11:bc:81:8b:23:73:31:2c:0f:21:ed:
         a1:be:4e:08:d1:b8:d1:dd:c8:de:e2:f3:55:60:72:88:ef:b2:
         17:68:58:90:3f:7d:80:dc:7a:cf:32:ff:c1:d9:c2:11:75:ec:
         19:6c:22:24:91:78:5d:15:37:f9:03:1c:11:be:f8:bc:bc:d3:
         f0:17:aa:aa:53:a0:db:4b:fa:10:98:8b:a1:e8:01:bd:f2:35:
         db:6c:c9:9d:51:57:64:41:43:20:c2:98:25:4c:96:0f:c3:03:
         7b:45:e2:2d:da:95:42:e6:d7:ee:f8:60:44:2e:fb:bc:2d:a7:
         f9:7c:17:c9:54:e7:b7:90:22:da:09:2e:8c:72:56:a2:9e:73:
         4e:60:5e:47:fc:74:d0:57:6b:42:b6:33:ca:d6:b7:b6:ee:c6:
         f8:b9:1e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:46:55 2024 by rpki-client on console-ams.rpki-client.org