Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/697bb870-1724-3b14-8d08-e42e4c4c46f4.roa
File:                     697bb870-1724-3b14-8d08-e42e4c4c46f4.roa (raw, json)
Hash identifier:          KPOBfLWBl775XSPX6PgC1DmehXJ0Of9cIq3NTUr0BZM=
Subject key identifier:   10:27:55:12:B5:A1:A1:67:D6:3C:D4:63:DE:4A:D6:85:15:2C:EA:B1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B9617F0A532A2E87C4B2C580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/697bb870-1724-3b14-8d08-e42e4c4c46f4.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.192.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:7f:0a:53:2a:2e:87:c4:b2:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=368ba54a-ef7c-418f-8645-a11074348ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6b:f0:97:c0:90:a4:ea:ae:16:2f:83:89:ad:
                    5b:7c:e4:b6:a1:04:bb:5a:09:cf:44:41:2b:29:e7:
                    6f:3e:ab:5c:14:20:6e:41:3e:3f:49:f1:9d:64:c7:
                    0d:01:41:da:f0:65:f6:57:8d:4f:c9:a6:06:26:75:
                    1b:a0:52:82:28:f4:79:82:5b:b7:88:37:39:51:50:
                    fb:83:06:3b:43:b0:5a:7a:32:df:7c:33:3d:9e:d3:
                    94:3a:2e:05:b4:3e:e8:39:a6:67:5a:b3:b5:94:36:
                    78:12:c4:29:f0:93:33:3f:b9:da:c7:69:43:da:9e:
                    f2:52:52:c5:6a:d8:9d:78:e9:ff:28:4f:7e:78:74:
                    e8:b9:84:f3:4c:27:10:22:a5:5d:0e:24:95:40:7f:
                    a2:22:f5:6b:de:70:77:cd:e4:a2:01:b3:db:85:c7:
                    85:69:85:45:6b:e9:0e:fa:73:3d:55:3f:6c:b1:86:
                    a3:96:02:61:f7:6c:fd:5a:22:da:14:0f:98:9f:7e:
                    f5:1c:77:30:be:f7:cf:ed:5c:31:7f:ef:24:48:90:
                    22:8c:61:bc:e4:81:f3:f2:4c:71:b3:d2:fd:e7:97:
                    c3:16:b6:ee:a2:10:37:1c:ac:da:5f:7c:ef:ad:92:
                    03:36:4d:40:07:6a:a5:a1:27:e0:90:7f:ad:6d:2c:
                    a1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:27:55:12:B5:A1:A1:67:D6:3C:D4:63:DE:4A:D6:85:15:2C:EA:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/697bb870-1724-3b14-8d08-e42e4c4c46f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b8:32:b3:8f:32:a7:3f:6c:51:fd:fc:df:a2:04:b8:09:8c:
         e1:d9:b7:25:26:26:1a:b6:82:dc:34:cb:98:7a:22:68:73:3d:
         78:e3:30:94:63:a1:d3:cb:af:c2:94:e6:18:00:e9:a8:04:62:
         24:10:52:11:12:c8:8c:a1:a4:57:6d:6f:45:2d:4f:7d:bd:05:
         3a:f9:a3:ab:c0:56:64:1a:70:25:57:0b:4f:1f:2e:96:b2:58:
         bc:64:77:23:b1:1f:4d:3d:cf:ea:ca:32:9a:f7:48:63:24:29:
         16:83:b3:32:9b:ec:ba:d5:dc:e9:48:19:45:70:03:06:7a:4d:
         37:4c:bb:00:62:12:49:ff:14:f2:cb:3b:42:42:13:69:84:67:
         22:9d:c1:9a:7b:52:5a:0f:7d:2b:20:d2:6a:2a:b1:4d:a9:dd:
         20:de:95:74:24:d2:a2:92:5d:88:f3:b7:e6:b4:e2:58:d3:f7:
         15:60:8e:2c:92:c0:e0:34:41:67:54:51:87:55:21:b6:61:78:
         a6:1e:4b:c3:55:5e:b4:3f:d3:f7:db:9f:d9:87:b1:8d:8c:81:
         d1:b2:aa:ce:8c:cb:0e:f1:74:5f:50:e6:66:09:14:25:43:b6:
         75:53:e6:8b:2c:dc:1d:80:c6:2a:15:3c:26:62:ca:6f:02:a2:
         e0:fb:16:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:51 2024 by rpki-client on console-fra.rpki-client.org