Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c2cae77-a407-3072-b5bd-dca8fa148810.roa
File:                     5c2cae77-a407-3072-b5bd-dca8fa148810.roa (raw, json)
Hash identifier:          Bu7PZ3011kPAIhLnMeHNDcofxht+gMFUZUAXxRdvl4U=
Subject key identifier:   50:3D:2E:A6:5C:B3:53:63:A0:75:29:B5:94:43:41:B8:6D:4E:23:6B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847EA5A09B0A7283D1737988FE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c2cae77-a407-3072-b5bd-dca8fa148810.roa
Signing time:             Mon 18 Nov 2024 02:00:27 +0000
ROA not before:           Mon 18 Nov 2024 02:00:27 +0000
ROA not after:            Sun 16 Feb 2025 02:00:27 +0000
asID:                     16625
IP address blocks:        23.219.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ea:5a:09:b0:a7:28:3d:17:37:98:8f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 18 02:00:27 2024 GMT
            Not After : Feb 16 02:00:27 2025 GMT
        Subject: CN=879a5918-35f3-4b08-b0e1-419220bd138b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:05:c1:a1:fc:52:03:17:9a:b8:c2:75:b0:
                    62:28:85:8c:43:a7:86:7c:ce:3a:9e:d0:61:51:88:
                    cb:58:7b:43:27:f3:25:27:02:fa:d5:e0:b4:d5:5f:
                    55:e8:ec:2b:66:5b:ea:ff:92:8a:60:26:dc:bf:be:
                    76:09:95:8f:42:cd:c4:f1:fa:42:a5:24:7d:c7:7c:
                    fb:ca:bd:36:67:89:f5:3a:06:b6:60:4f:0e:f4:7f:
                    7c:64:69:59:dd:71:02:22:0b:bf:70:15:d0:41:94:
                    05:f0:66:95:d3:f3:65:37:13:df:1a:28:ab:bc:04:
                    3e:c6:2d:aa:68:91:25:3b:b9:38:e8:82:f4:6c:35:
                    8f:25:b8:f7:46:48:b0:d1:48:ba:98:ff:d9:9e:21:
                    db:27:5c:38:54:2b:f6:24:30:38:30:82:49:1f:49:
                    30:d3:26:1d:65:59:1c:94:ba:95:aa:96:17:fd:0e:
                    e7:10:3e:cc:7d:cc:be:a2:0f:d7:91:c0:3c:8a:bf:
                    71:1b:28:bc:6f:62:55:74:19:a4:ed:2d:cd:56:f3:
                    9d:48:a4:8a:7c:5f:99:95:4d:a2:06:a2:9e:7d:b5:
                    bd:04:d7:40:e3:0a:4b:f7:7e:62:cf:b8:c8:2b:e7:
                    8f:ab:04:db:5a:c6:f8:b0:d9:92:fa:f3:80:89:10:
                    cc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3D:2E:A6:5C:B3:53:63:A0:75:29:B5:94:43:41:B8:6D:4E:23:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c2cae77-a407-3072-b5bd-dca8fa148810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.219.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c6:67:93:86:04:d8:ba:a7:9d:07:70:c1:f6:65:55:73:52:
         44:3d:af:40:eb:5a:b8:cc:f1:96:1d:e4:7f:b4:11:8b:56:db:
         cc:5c:36:36:32:46:80:99:e2:66:64:68:d0:27:e7:d2:36:d7:
         8f:cf:80:02:49:66:aa:62:0e:68:61:7a:f1:d4:cf:0a:7a:10:
         24:4a:d8:ab:9f:cd:4c:ac:07:99:88:72:f6:db:72:f2:65:a6:
         3f:a1:10:b4:d2:5a:8e:93:22:d4:55:39:0a:a1:d4:e9:a5:49:
         e7:63:83:fd:8f:49:da:53:82:50:e0:70:c4:16:a2:df:10:02:
         2f:a8:d6:67:cc:f6:d7:f7:60:71:d7:7c:45:65:4c:92:20:25:
         6f:c2:dd:0e:9f:9c:7d:8c:38:ed:64:63:16:b6:95:76:05:f2:
         a8:62:b0:a3:92:fc:de:3e:71:4f:e6:df:29:19:67:81:0b:63:
         a8:ff:40:cd:2d:e9:2d:d3:c1:6b:b9:56:96:b8:3f:30:37:01:
         1d:8f:05:7b:a3:e0:1b:77:a0:5b:0c:2f:49:fe:29:9e:ca:53:
         97:9b:60:3c:52:0c:ad:2a:9e:59:80:ea:41:2f:24:a5:91:cb:
         a6:60:c7:10:f9:f9:75:0e:03:c6:7d:b7:ed:3a:0d:90:fb:1c:
         de:04:4e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:47:05 2024 by rpki-client on console-ams.rpki-client.org