Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55683f0b-f842-3ba8-b2ee-5b8db083f974.roa
File:                     55683f0b-f842-3ba8-b2ee-5b8db083f974.roa (raw, json)
Hash identifier:          37Tcw7SX9oedLxq1PCap4AJNRpjpEisuDqo1BW0VrHQ=
Subject key identifier:   CA:7D:80:E7:1C:18:AD:EF:A6:6C:3C:78:3F:ED:41:53:C7:26:BB:BF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858475D40E1C9E8236ABD4B71EB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55683f0b-f842-3ba8-b2ee-5b8db083f974.roa
Signing time:             Sat 28 Sep 2024 13:00:41 +0000
ROA not before:           Sat 28 Sep 2024 13:00:41 +0000
ROA not after:            Fri 27 Dec 2024 14:00:41 +0000
asID:                     20940
IP address blocks:        23.192.0.0/11 maxlen: 11

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5d:40:e1:c9:e8:23:6a:bd:4b:71:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 28 13:00:41 2024 GMT
            Not After : Dec 27 14:00:41 2024 GMT
        Subject: CN=a3da067b-88d6-4de0-8af2-c437788470ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c4:2b:6e:b9:2c:49:67:86:5d:e0:9a:11:97:
                    48:dc:3c:c3:6a:36:0b:eb:51:78:ac:1b:f0:62:95:
                    81:1a:a6:06:16:93:d1:37:e6:cc:b6:5a:a5:86:b6:
                    6a:11:54:6a:36:71:b8:26:82:93:01:bc:47:ae:ef:
                    1c:a9:8d:53:5f:57:6c:ef:12:64:a5:95:be:10:83:
                    e0:95:d1:b0:2c:86:3d:c6:24:39:21:68:c6:8e:e5:
                    a5:af:dc:e5:28:4b:44:58:43:88:f1:54:d5:7e:10:
                    a0:35:7b:dd:cb:26:1c:72:7c:ea:31:7f:43:7a:29:
                    57:b9:51:f9:56:65:37:75:5a:1e:ad:52:f6:e9:02:
                    58:1a:5d:3f:d5:ef:3d:c6:0d:5a:88:91:2b:3b:53:
                    e0:b0:bd:9f:e9:b7:f2:f1:d9:32:7d:54:72:09:e4:
                    e8:d3:27:a8:fe:11:c5:9e:2b:b5:5b:5c:b5:7f:bd:
                    73:98:e5:90:88:48:36:55:09:86:7c:c1:c7:76:59:
                    13:dd:ff:9d:0a:e1:46:70:9f:25:98:3a:61:d1:77:
                    fd:24:6e:d2:c3:1a:8d:ab:2b:02:ba:4b:a3:35:6f:
                    c2:a7:ac:13:d7:39:08:c7:88:0c:ca:dd:2c:ca:7a:
                    b4:81:7d:ed:a3:a3:32:fc:3e:eb:de:1f:c3:34:c9:
                    ec:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7D:80:E7:1C:18:AD:EF:A6:6C:3C:78:3F:ED:41:53:C7:26:BB:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55683f0b-f842-3ba8-b2ee-5b8db083f974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.0.0/11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:25:ae:86:e0:56:b6:fa:d0:43:02:cd:ec:d2:97:ad:31:df:
         3d:70:47:59:d6:9a:3a:a0:e3:ef:7f:e2:12:ba:ee:f1:8e:2d:
         f6:d7:51:3f:13:61:40:3d:68:32:31:23:8b:69:73:d4:54:59:
         d7:df:76:0d:04:d8:f7:67:42:fc:f2:9f:65:84:61:7b:83:bf:
         88:c0:e8:aa:55:32:9b:10:59:60:7d:e1:b0:a8:91:8d:ba:70:
         dc:1e:6f:e6:21:73:0b:27:64:57:6c:fa:00:87:e7:30:80:e4:
         35:f6:6f:62:7c:d8:44:9f:ce:df:1d:28:92:95:bf:4f:a1:b5:
         0e:2b:ee:aa:c1:51:96:8f:fc:cc:d1:46:ac:32:12:8d:6e:14:
         81:51:ff:ab:dc:cd:ba:4c:f8:f6:67:2e:08:93:18:63:59:66:
         eb:60:c1:d7:f0:6a:a1:ee:bb:73:5d:df:85:a3:48:84:0b:b0:
         c2:cf:ea:53:08:4a:5c:6e:25:b4:fe:32:74:de:06:8f:3f:6f:
         b2:fa:e9:9b:86:5f:c4:1b:e6:f2:2f:62:55:fe:19:fa:90:fa:
         1d:92:d9:4d:8d:45:34:12:97:f0:d3:76:0f:56:61:b8:4c:bd:
         b0:4e:23:e5:66:d9:47:16:b2:7e:f8:2e:5c:1a:16:0a:09:f6:
         54:8b:b1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:31 2024 by rpki-client on console-ams.rpki-client.org