Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bb6dc4c-b2f8-32c7-afcb-8632accd9dcf.roa
File:                     6bb6dc4c-b2f8-32c7-afcb-8632accd9dcf.roa (raw, json)
Hash identifier:          33Sd07qFany3s/MTr5xCXPdQ6zngDifz1K7wifVK2z0=
Subject key identifier:   27:54:F6:32:1C:BC:AE:C6:50:36:CF:DC:C9:11:DF:DC:D2:9F:B3:D3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847EFEF89351C4E7CC4ACD597C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bb6dc4c-b2f8-32c7-afcb-8632accd9dcf.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     20940
IP address blocks:        23.213.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:89:35:1c:4e:7c:c4:ac:d5:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=51c5a66b-ac17-441d-bbf6-1ffef5c8859b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:72:61:c4:0e:ee:a9:f7:c7:f5:ae:f0:05:86:
                    e9:70:ae:c6:25:af:52:68:21:1e:18:4c:da:ee:0f:
                    9b:5e:30:e3:b0:0e:ea:bf:62:36:1c:fb:cc:3c:c8:
                    a8:7b:84:b8:96:a6:2e:67:61:3d:72:b1:b0:85:53:
                    71:9f:ee:02:6f:77:ef:b4:69:41:4a:6c:f2:66:ba:
                    59:2e:c7:4a:3c:b2:2c:37:9f:98:96:b1:d9:73:82:
                    df:ab:28:8c:6c:0c:2b:d3:bc:80:f8:85:da:a9:f6:
                    d8:b2:0e:57:74:b1:ed:a9:6c:a2:fc:7e:97:68:0a:
                    c8:4e:29:63:39:4d:d6:f5:5a:2e:c6:cf:2d:5c:45:
                    8f:00:ac:b8:03:07:57:a4:0e:58:47:1e:46:ea:0e:
                    37:f2:d1:b3:c1:65:b5:89:a2:19:60:06:f2:44:7e:
                    5f:9d:ec:8d:b2:5a:74:05:f6:3e:9f:e7:6b:3c:7f:
                    39:b5:86:81:74:7b:e3:fc:2d:28:08:78:2a:18:27:
                    6a:c1:3f:94:50:b3:ae:ec:74:48:e7:48:87:1f:bd:
                    e0:c8:c0:1f:d0:39:ed:2d:3a:87:c5:e6:3a:cd:21:
                    ff:06:55:17:12:01:1e:76:41:b9:3b:a3:53:2d:f6:
                    58:0f:3a:ba:ca:9e:18:88:5a:bf:0c:69:1e:a5:22:
                    33:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:54:F6:32:1C:BC:AE:C6:50:36:CF:DC:C9:11:DF:DC:D2:9F:B3:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bb6dc4c-b2f8-32c7-afcb-8632accd9dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.213.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ce:e6:b4:f0:e5:b4:fe:93:79:6f:97:06:f5:1c:8b:b8:8c:
         f5:91:8a:90:cd:e5:23:a1:0b:93:95:c9:ed:a1:c0:d3:7b:3b:
         37:14:65:24:3b:bd:4d:2d:8a:64:a3:44:7a:ad:b0:d3:41:e4:
         b6:ba:70:4a:83:9b:4c:19:35:3d:3d:a8:2c:42:7f:2b:e1:ff:
         21:62:99:6f:c0:26:23:fd:61:2f:bb:07:1b:70:a9:4d:da:f4:
         0e:ae:1e:44:d1:03:d6:ee:91:69:75:a7:f0:f3:d0:67:2d:62:
         e9:03:8f:7b:cc:fa:af:74:f0:20:8c:dd:64:1a:8f:b5:8b:46:
         a5:da:45:0f:84:dd:33:05:f7:41:6c:b3:23:12:fe:e2:32:dc:
         88:72:e4:da:9e:86:12:7b:e8:3d:ce:b5:7f:7f:7a:2b:3a:59:
         4c:96:07:a7:ec:8e:27:66:f6:da:5d:4e:24:e5:b0:a8:1c:9b:
         db:76:f7:69:89:a9:79:e4:ad:33:01:05:6f:af:a4:99:6c:17:
         24:15:88:b5:c1:f9:47:92:5b:95:3b:20:1c:37:c4:84:a5:50:
         8c:0b:b5:52:d0:cc:5b:f6:98:3a:a5:d2:89:0a:20:e0:3c:7b:
         30:11:48:af:5e:78:32:1e:3d:c7:f4:9b:1f:21:93:8d:97:0c:
         b5:24:d1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:39 2024 by rpki-client on console-ams.rpki-client.org