Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63cf71cb-e3c2-36b3-b761-afa1515e83f5.roa
File:                     63cf71cb-e3c2-36b3-b761-afa1515e83f5.roa (raw, json)
Hash identifier:          j9Mc2+yAhPDYbL+IsiqcTns4CKxhlOmqzfwrg2kkfU4=
Subject key identifier:   12:A3:4D:98:DE:5F:26:29:FB:B8:83:0D:F4:6F:2F:40:3C:F6:BE:F3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584742BB4F736E7DEA87BE5EB000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63cf71cb-e3c2-36b3-b761-afa1515e83f5.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     35994
IP address blocks:        23.194.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:4f:73:6e:7d:ea:87:be:5e:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=3b6005ee-47c5-4bd5-99ff-f5932e3e2d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:50:ba:e0:2b:85:c4:1c:ea:b1:17:56:8a:
                    5c:8e:d2:cd:fc:49:61:9d:30:20:55:d9:03:fe:87:
                    df:15:07:30:1d:52:61:83:46:21:18:5e:f1:32:fd:
                    5d:d9:7e:af:b3:c5:df:57:cb:f4:ca:0b:10:25:49:
                    db:c5:23:d0:b5:7f:b7:f5:59:97:a4:d1:74:2e:f3:
                    9a:b6:65:84:e7:64:9b:04:49:dd:3b:89:29:34:a6:
                    ab:4c:4c:d1:bc:aa:31:de:76:7f:cb:82:cf:f7:64:
                    78:ca:79:7e:74:bc:8e:3c:af:f9:f3:bf:04:86:49:
                    5e:10:47:47:7d:3d:08:d2:b1:ad:14:b1:55:b6:19:
                    be:0c:ba:84:3b:e6:0c:58:20:1d:15:8b:3f:3c:4d:
                    24:2f:ec:fd:7b:a5:83:60:38:5d:6f:97:cc:b9:c7:
                    53:9d:fb:4a:38:a6:67:65:b4:6c:2f:28:42:af:96:
                    73:13:01:29:72:ed:18:d0:ce:59:fc:bb:38:13:04:
                    6f:13:78:16:2b:81:04:81:65:3b:f8:dc:24:3e:69:
                    f7:2b:19:5d:c9:4b:04:4f:cb:62:a8:75:de:c2:62:
                    f5:75:33:37:16:09:56:c6:34:21:84:20:80:5d:bf:
                    aa:9c:2d:6b:b8:92:9b:5f:49:0c:e3:ac:b7:05:1c:
                    9a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A3:4D:98:DE:5F:26:29:FB:B8:83:0D:F4:6F:2F:40:3C:F6:BE:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63cf71cb-e3c2-36b3-b761-afa1515e83f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.194.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:d3:33:28:84:de:0f:0c:42:ee:5e:cc:5d:f3:4c:c4:c7:92:
         00:62:1d:aa:b2:c3:63:6d:5e:6a:24:84:fb:89:28:1d:a9:fa:
         00:d8:82:9c:9e:72:ae:ad:5b:fe:e4:7d:bc:54:0b:bb:f6:3c:
         0f:26:29:f8:96:68:3f:48:52:41:e9:97:61:f0:3b:59:d8:e2:
         8c:6c:71:17:70:9d:b8:bd:69:8f:22:28:1f:2c:7e:9b:83:98:
         d1:97:14:03:40:51:62:1b:9d:01:c6:ce:63:3b:11:3c:b7:1d:
         ab:7f:cb:1f:ef:f8:e8:8b:88:15:9e:d3:59:22:3a:5e:59:8b:
         00:3e:53:43:af:a2:2a:82:c8:42:28:59:30:09:91:7c:00:8a:
         fb:70:7b:ed:69:fe:e6:01:a3:c9:cf:3f:21:4c:59:98:50:89:
         b0:6d:53:38:66:97:81:a6:2e:81:cb:6c:b1:69:19:c3:70:07:
         3a:ed:75:77:f7:a9:07:13:ae:95:e5:7e:39:78:95:5c:48:10:
         af:94:df:0b:9d:bb:8d:a7:31:7e:61:76:1a:3e:bd:86:5a:6b:
         62:ad:04:e9:47:60:7e:69:91:dc:33:f8:12:9f:bb:51:d8:26:
         ef:a3:bd:f6:61:3d:48:f1:ee:40:79:99:a3:87:62:bf:06:cb:
         c0:ae:81:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:49 2024 by rpki-client on console-fra.rpki-client.org