Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50e463f1-f142-3adc-a93b-96e8fa8ab21c.roa
File:                     50e463f1-f142-3adc-a93b-96e8fa8ab21c.roa (raw, json)
Hash identifier:          ijihLm9kVV4fuDOsvu6tnVwu+6hsOhYE+zz8RA1fSP8=
Subject key identifier:   ED:36:1E:63:4F:6E:0C:1C:4D:E9:3E:69:49:27:F3:82:6B:7D:10:7D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B3CC1E45B266125025004638
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50e463f1-f142-3adc-a93b-96e8fa8ab21c.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     35994
IP address blocks:        23.205.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:1e:45:b2:66:12:50:25:00:46:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=618c3019-a74f-4776-8ebb-6538946d17fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:56:40:b8:8a:26:54:3f:5b:01:4d:86:fa:8e:
                    79:f8:f2:03:6c:a3:5a:c1:ca:09:ef:1d:5a:ff:4f:
                    80:a2:f1:66:13:68:6e:8f:23:5f:3b:7c:f3:bb:9c:
                    a1:49:1b:75:82:1b:86:86:be:31:69:48:e9:98:d9:
                    9d:60:be:8d:54:24:1e:31:dd:21:04:54:dd:85:28:
                    2a:72:ac:80:0e:65:02:d8:76:02:02:bf:e8:fb:3b:
                    a9:73:e7:92:f0:68:e5:90:9e:97:37:cb:1a:8f:5f:
                    86:4b:46:49:85:69:91:c9:a2:e4:61:c7:40:40:d3:
                    9f:1b:65:9a:41:9d:70:cd:b0:4c:1f:98:a0:99:ff:
                    47:50:9c:79:d2:31:ca:9b:8d:3a:04:37:e4:28:ab:
                    47:b2:98:a1:7a:4d:8c:63:38:6d:6d:a8:20:27:12:
                    18:d8:38:88:6a:eb:c1:4d:39:5a:a2:9b:f8:d7:bc:
                    76:8a:fb:e9:c3:59:ba:9a:e2:5f:8e:f1:9c:32:15:
                    01:68:fe:a2:ba:d0:2c:71:7a:de:03:60:4c:3b:39:
                    5d:b5:27:93:cc:d5:32:49:8d:df:b9:f3:6e:03:2a:
                    0e:46:96:44:55:3f:6a:98:fe:ad:a0:5f:e3:73:92:
                    c3:b3:23:58:f8:3d:f4:2f:fe:a7:a2:bf:4a:46:10:
                    01:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:36:1E:63:4F:6E:0C:1C:4D:E9:3E:69:49:27:F3:82:6B:7D:10:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50e463f1-f142-3adc-a93b-96e8fa8ab21c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.205.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:c3:24:75:ef:e8:56:20:ea:08:a9:9e:be:e2:8f:cd:ad:de:
         69:8f:c5:0a:88:0c:6b:c8:d6:a7:02:33:ca:67:9b:5b:b8:47:
         ba:e7:9e:0e:7e:b1:44:59:31:d4:29:24:f4:f1:11:80:fd:54:
         e5:71:ee:32:9c:6b:ca:fa:64:f0:a9:5c:80:07:15:87:c7:f4:
         c4:b3:f2:79:96:df:4d:aa:1e:d2:5d:45:e3:64:e9:62:74:ce:
         bc:d9:35:6c:34:41:30:95:3d:de:c8:33:12:d4:69:ec:16:dd:
         82:95:82:72:ac:94:5c:be:31:a1:d1:c2:e1:48:67:49:e5:6c:
         b8:dc:43:e2:43:31:93:9b:57:bb:d7:3e:0a:d6:c7:57:91:bc:
         df:91:9e:25:6a:78:8d:91:bf:7d:45:7a:43:be:b7:27:99:7d:
         23:fa:46:e0:f8:a6:95:c6:a9:5c:d0:4b:e6:07:f2:fb:22:fb:
         5a:59:76:9c:e7:11:39:d2:79:fb:bb:24:82:f5:fb:be:ac:9e:
         ca:4a:2e:ff:a1:94:99:cf:cb:93:f2:c6:90:0b:3c:31:b7:cd:
         94:3c:f6:f1:b8:1a:66:e5:ca:ff:e3:ea:b8:67:06:47:03:e5:
         8b:8e:ca:c7:64:85:e0:ef:e9:a9:ce:33:8e:0b:f5:04:73:88:
         7b:07:af:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:47:00 2024 by rpki-client on console-ams.rpki-client.org