Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6373c5e8-2d9d-311e-94b5-3ce851c42eda.roa
File:                     6373c5e8-2d9d-311e-94b5-3ce851c42eda.roa (raw, json)
Hash identifier:          rmOVA4N0xvKIBMhbrWSEuh1K9o4CyJsEFufY0cQGW7Q=
Subject key identifier:   BF:91:7F:44:10:0C:E2:54:C8:93:60:40:16:C5:EB:E7:8D:40:5F:11
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858488F10889EC0F34F400AE54840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6373c5e8-2d9d-311e-94b5-3ce851c42eda.roa
Signing time:             Thu 16 Jan 2025 02:00:39 +0000
ROA not before:           Thu 16 Jan 2025 02:00:39 +0000
ROA not after:            Wed 16 Apr 2025 01:00:39 +0000
asID:                     16625
IP address blocks:        23.62.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8f:10:88:9e:c0:f3:4f:40:0a:e5:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 16 02:00:39 2025 GMT
            Not After : Apr 16 01:00:39 2025 GMT
        Subject: CN=21fd839b-1160-45cc-8fca-0ec465e814de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8a:57:9f:e6:65:26:5c:1a:4f:98:3f:00:ba:
                    f1:96:a1:52:f0:41:f8:63:9b:e4:2b:4b:0f:a2:9a:
                    e0:92:8f:c4:0e:d5:63:d5:42:15:9b:45:93:85:01:
                    13:42:43:9b:01:a5:46:34:a3:89:36:62:e8:53:49:
                    d7:e9:c0:c5:37:e0:d6:3e:fe:3c:1a:48:d3:cb:68:
                    1c:4f:c5:8a:e4:0d:b1:46:a1:16:57:a1:93:17:e3:
                    7d:60:c3:93:4b:73:68:b2:cb:78:50:67:69:57:0f:
                    b4:47:c6:17:2e:a7:b0:91:5b:6b:3a:c7:a5:6a:6f:
                    a4:d4:8d:42:98:18:5e:3d:3b:6f:fd:ff:42:6a:76:
                    06:7a:c2:00:f6:ab:84:95:90:fa:39:22:4f:35:ca:
                    02:cc:ad:67:46:50:15:35:70:fb:a2:5c:dc:a4:0b:
                    7d:0d:4d:08:d2:ee:f4:0f:86:0f:60:15:ea:e8:43:
                    29:79:2b:f8:83:6f:11:02:a4:90:b0:b7:a0:f8:27:
                    34:8e:0b:6b:f6:91:91:ec:e9:d6:93:15:67:50:98:
                    32:d7:14:8b:f0:fd:de:15:7d:ea:52:00:98:ed:74:
                    d3:05:20:91:4b:f7:23:23:00:a2:dc:da:89:ee:91:
                    79:9c:c4:88:8e:7a:5e:84:40:8a:a2:df:2c:00:4c:
                    6d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:91:7F:44:10:0C:E2:54:C8:93:60:40:16:C5:EB:E7:8D:40:5F:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6373c5e8-2d9d-311e-94b5-3ce851c42eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:20:35:01:d2:d3:9d:01:3a:37:86:08:6d:0f:99:a0:bd:e9:
         95:2a:c6:37:70:61:b4:4b:c0:33:9d:08:53:7d:98:99:82:97:
         c7:d5:8e:15:66:50:04:84:d5:2b:18:99:c3:ac:85:1d:ee:8d:
         2f:08:d2:28:2f:d8:24:f0:46:aa:4b:d3:f2:54:45:db:66:03:
         fe:66:0d:79:b8:c1:2f:7d:2c:4f:8d:7c:11:6c:c9:2d:19:d2:
         77:b2:18:0e:83:0d:e8:d8:a4:d0:15:f9:92:39:92:08:69:18:
         53:cb:3e:66:18:8b:d6:9c:04:91:ac:2b:ca:5a:d0:28:8d:60:
         f0:2a:39:eb:65:cf:fe:a5:b3:d1:ce:f1:e3:4b:51:0f:bc:09:
         24:c3:89:de:26:ba:70:31:ef:35:2e:1a:28:70:8b:ca:4e:4a:
         72:f4:0b:02:8c:10:47:b7:bf:31:8d:f2:0e:18:bd:24:1c:01:
         ee:81:1c:0c:3e:60:ed:7d:81:97:77:75:8e:85:5c:9c:32:7d:
         26:36:d9:2f:93:ed:70:6b:1c:dd:72:32:1e:d2:ef:5d:ca:11:
         38:bb:bc:7c:2f:32:d5:d6:65:27:fe:da:e1:e1:bd:6c:36:9f:
         e8:da:59:e0:5c:ba:ea:e0:98:56:31:d1:f9:09:42:99:99:09:
         26:54:d4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:59 2025 by rpki-client