Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55b3e0cc-ba37-39ef-bb97-e3b5bc466d1d.roa
File:                     55b3e0cc-ba37-39ef-bb97-e3b5bc466d1d.roa (raw, json)
Hash identifier:          vbQQlJ2ucFCgoyvfyLDA4CnH9oe6nW8/lG1xYO+BbVY=
Subject key identifier:   F1:31:79:29:96:B6:93:77:24:AB:4B:7D:21:E0:A2:B2:9E:F2:DB:94
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858475D40DE375E53DA499E98FF80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55b3e0cc-ba37-39ef-bb97-e3b5bc466d1d.roa
Signing time:             Sat 28 Sep 2024 13:00:41 +0000
ROA not before:           Sat 28 Sep 2024 13:00:41 +0000
ROA not after:            Fri 27 Dec 2024 14:00:41 +0000
asID:                     16625
IP address blocks:        23.52.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5d:40:de:37:5e:53:da:49:9e:98:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 28 13:00:41 2024 GMT
            Not After : Dec 27 14:00:41 2024 GMT
        Subject: CN=f1dd4489-e29d-43e1-ad83-bf10b742d93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:58:47:f3:d8:77:51:0e:a4:a5:62:d4:7c:
                    d2:ee:30:2c:1d:e9:d4:0f:5a:c4:07:be:7a:04:d0:
                    bc:2b:02:c5:6c:9f:04:98:3f:e4:01:0c:f5:69:44:
                    a9:48:3a:fe:3f:bb:b7:2b:87:fa:b5:18:41:1b:36:
                    1d:26:58:7c:e0:10:be:58:db:fc:ab:74:52:c0:5c:
                    dd:22:0f:95:14:b5:8b:54:0e:1f:13:c6:a0:86:57:
                    42:2e:c2:93:95:23:aa:11:11:46:7b:75:0b:af:b6:
                    b0:7f:5e:e1:c8:79:1c:a1:ca:ea:a5:02:a5:83:9a:
                    37:06:64:7c:e7:8f:be:56:9f:d6:4b:96:38:09:04:
                    d9:35:32:88:26:ee:7b:3b:20:63:22:4b:58:83:17:
                    1e:d7:28:13:22:d5:14:32:a8:bf:3e:1f:c0:2f:51:
                    e3:f5:d5:42:5e:1c:40:23:27:5f:a8:f3:c5:bf:1e:
                    31:c5:ca:62:8a:f2:ca:4a:90:e3:18:72:5a:6b:14:
                    59:1a:4a:86:64:53:1d:0c:31:e5:65:ce:8b:a8:e3:
                    9e:a6:02:b8:82:fb:31:b1:d1:c8:e3:44:1f:64:f3:
                    8c:21:3e:b7:cc:16:c9:e0:81:66:8e:20:bf:ef:77:
                    7a:0c:67:4b:6d:97:f9:1c:18:34:e8:d6:ee:5d:10:
                    43:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:31:79:29:96:B6:93:77:24:AB:4B:7D:21:E0:A2:B2:9E:F2:DB:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55b3e0cc-ba37-39ef-bb97-e3b5bc466d1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f3:d1:fd:ea:74:a9:62:59:ad:ca:32:31:5b:4c:05:c8:9e:
         4d:b8:6a:54:81:ed:c7:bb:99:a0:28:7c:0a:21:2f:d3:c7:e6:
         e0:de:d9:d5:65:15:46:7a:bf:dd:d0:01:19:4e:cf:50:22:90:
         0a:99:bb:ab:ae:cf:ba:42:e9:e0:0e:9d:ca:24:5c:af:a6:51:
         92:e6:ba:22:ec:9b:fd:4a:c7:75:70:e8:7e:e4:20:35:ee:54:
         f6:ae:e5:a0:e7:c6:c5:1b:65:ae:59:e6:d2:a6:8a:82:93:13:
         96:46:7a:11:52:44:af:8d:00:8f:b6:14:76:5a:4f:3a:a8:eb:
         8d:c8:4c:6a:43:60:1d:2a:e9:58:14:eb:af:30:c3:9e:6f:56:
         36:5b:b3:b3:df:91:76:cb:64:27:85:b2:6c:ed:c7:f0:10:c1:
         1e:75:2d:fb:7d:28:d8:ad:f6:f0:8e:0f:e6:ce:fb:b6:1b:1a:
         fe:d1:73:a0:c2:cf:90:0a:e7:1c:40:fc:9c:6f:b0:c4:7f:27:
         9f:cd:c6:61:97:2e:fb:c9:3c:30:76:f1:dc:7f:e1:6d:be:5a:
         89:d5:87:2c:9c:c3:2d:de:fc:98:4e:8f:67:ce:35:7e:d9:95:
         a7:b9:87:76:ac:f8:34:37:71:fb:35:6a:ec:b7:57:89:ee:bc:
         4d:d7:b2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:43 2024 by rpki-client on console-fra.rpki-client.org