Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fb365c0-d92b-39f7-9fca-99275887e310.roa
File:                     5fb365c0-d92b-39f7-9fca-99275887e310.roa (raw, json)
Hash identifier:          Aq7eUobv1Tc3/t3GVmE/qt+Kyhvw1OedCDQ6iHnfvPM=
Subject key identifier:   D1:76:09:F3:A1:6C:53:14:46:85:6C:3C:62:41:9D:B1:0A:C6:AF:1F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C4AA278C2553788B3AE428FA
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fb365c0-d92b-39f7-9fca-99275887e310.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     16625
IP address blocks:        23.193.198.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:27:8c:25:53:78:8b:3a:e4:28:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=22f5b945-b3dd-4409-8789-418efff75b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bf:70:a9:34:bf:fd:17:ea:ef:f4:7b:19:cb:
                    e7:56:64:c3:2a:b7:b3:05:46:a1:2f:8a:a5:f7:71:
                    2e:02:ce:ac:f3:8b:fe:74:63:6e:e4:55:a4:da:12:
                    ec:21:86:f4:62:c8:3a:62:31:db:c7:69:b6:2b:e2:
                    16:20:57:f4:9e:ff:bd:f8:7a:a0:29:6c:87:71:cc:
                    af:39:1d:b1:bd:9a:9d:ec:93:9c:ff:03:01:4c:ab:
                    c0:de:9e:36:21:f4:4c:54:bd:7d:fd:e2:95:27:2f:
                    d4:0b:b7:b5:74:2d:64:a5:12:cd:92:7a:3a:37:82:
                    dd:5c:39:74:52:ae:5e:e0:d2:7c:04:c6:3d:56:58:
                    e9:4d:57:5e:78:34:92:4c:1a:d5:86:45:c3:03:a0:
                    e9:f6:8e:08:15:8a:f7:24:bc:ed:42:95:be:b5:ab:
                    7e:b0:29:f9:dd:01:ad:33:2b:cd:56:26:b0:c7:e0:
                    10:62:aa:15:81:91:d0:60:cf:23:79:17:da:12:99:
                    a6:3f:de:28:99:d5:dc:1c:0d:9b:09:d1:f9:5c:60:
                    a8:5d:de:db:7c:84:1f:9b:9d:c3:51:a9:8d:c8:e5:
                    ff:f1:54:b8:a0:59:e2:fe:11:5b:c2:33:ed:4a:83:
                    41:84:e9:8e:44:84:7f:c7:0f:e6:26:03:50:62:b3:
                    38:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:76:09:F3:A1:6C:53:14:46:85:6C:3C:62:41:9D:B1:0A:C6:AF:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fb365c0-d92b-39f7-9fca-99275887e310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.193.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d7:4d:ea:13:7a:14:76:6d:59:08:af:5c:ad:7f:fc:09:f6:
         b6:67:56:9b:0f:85:23:47:d5:06:35:99:7c:03:0f:e1:19:93:
         08:b1:d3:a9:84:71:3f:71:83:64:51:18:09:2d:7c:a6:d9:fa:
         b8:b2:39:41:d5:48:2a:33:5d:1f:17:ca:60:76:00:e4:3e:81:
         c8:cc:63:ff:1a:c0:3b:0d:fe:e5:6b:d6:8b:94:35:08:76:f0:
         aa:dd:96:c6:1d:d2:62:6d:9f:4f:9c:31:7e:b3:93:e7:80:e7:
         42:9a:b8:5f:48:4a:29:64:c2:09:95:55:aa:29:4e:a6:d9:89:
         bf:92:1b:2f:34:6c:1a:10:38:4b:c5:fb:13:28:ab:32:2d:89:
         04:8e:ef:de:65:dc:0e:54:02:43:e0:9b:c8:db:58:90:16:e2:
         82:41:d9:f2:6b:71:5d:5a:bb:18:9d:56:87:d9:58:91:52:88:
         33:dd:c5:8c:dd:e2:38:3b:c0:d9:9e:7b:d2:d6:4f:7c:64:9d:
         2e:14:b0:b6:fc:e4:d0:e6:2c:78:a5:57:46:8f:bd:c8:f2:ac:
         25:d1:73:6e:ee:80:03:80:db:39:3a:d1:27:0a:31:ab:ba:65:
         99:75:90:c2:e7:e2:b2:d4:d8:c6:63:d9:85:60:d4:5a:49:70:
         af:8b:40:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:47:06 2024 by rpki-client on console-ams.rpki-client.org