Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c2f77c0-348c-3666-91cc-ce035d38f5cb.roa
File:                     6c2f77c0-348c-3666-91cc-ce035d38f5cb.roa (raw, json)
Hash identifier:          uS7Qrkzmx9FgaxgqR4DmRY8p/Qeso+lnCLc+6CLQZQA=
Subject key identifier:   04:75:5E:31:1D:77:8C:F3:0F:2B:CC:AC:D9:BB:03:49:43:05:95:7B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847DF2F5D2322F913C2F69D3AB0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c2f77c0-348c-3666-91cc-ce035d38f5cb.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     20940
IP address blocks:        23.215.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:5d:23:22:f9:13:c2:f6:9d:3a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=0ab08a00-f64d-49ae-9cdd-1f2ee6860f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a0:46:12:23:7f:4e:fe:ad:94:dd:1f:66:e7:
                    fb:9e:e9:0a:8b:66:6f:10:23:af:1e:4d:1d:32:8d:
                    ee:3a:a2:e1:63:04:fc:1d:df:e3:60:cd:59:32:9a:
                    ff:ef:a5:9b:da:78:70:3b:af:7f:4b:2d:fd:f9:78:
                    c9:74:ef:5f:b0:34:a4:a6:cb:01:9c:33:fd:30:15:
                    3e:c7:0c:eb:df:20:93:9a:a8:ea:b1:4a:c9:05:ec:
                    1a:6a:fe:3b:c4:22:51:a8:3c:f2:25:db:99:22:7d:
                    d9:13:78:46:c5:e0:2b:28:1b:46:27:e9:67:0f:ed:
                    d1:9c:3f:c5:2e:08:8b:65:7d:de:05:51:53:f2:97:
                    02:19:66:ed:fe:d8:65:9a:80:9b:d9:d7:73:7b:cd:
                    66:2c:45:e6:84:fb:85:44:64:8d:b6:f2:51:68:f3:
                    1e:6d:7e:48:4c:05:1b:9f:59:f3:d7:6e:e9:e7:ae:
                    93:6f:af:1d:dc:32:5e:45:70:68:74:a4:63:74:16:
                    ed:31:f4:e1:fe:c6:eb:88:c3:6b:da:90:e2:5a:39:
                    47:ef:17:2c:8e:b5:d8:23:26:06:57:b1:15:56:1e:
                    ac:a0:9a:55:14:f4:21:83:61:99:d8:47:dc:2a:83:
                    e7:39:f7:01:dd:9a:94:e8:74:5d:d1:72:c0:64:36:
                    82:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:75:5E:31:1D:77:8C:F3:0F:2B:CC:AC:D9:BB:03:49:43:05:95:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c2f77c0-348c-3666-91cc-ce035d38f5cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.215.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ab:71:fd:cd:92:f8:ab:67:00:49:48:f8:84:dc:05:83:74:
         02:63:3d:98:b3:8b:e0:8a:22:d4:d4:c1:4d:38:3d:d4:84:ff:
         af:8f:31:cd:f6:77:3b:a0:a3:20:fb:4a:18:63:5a:e9:ff:57:
         e8:c3:84:ed:35:c0:6f:4b:43:de:42:13:58:e8:cb:25:2e:62:
         39:0c:62:8a:bc:24:5f:56:20:a0:14:c3:49:96:eb:91:15:76:
         9b:5e:99:99:8a:46:a4:60:78:18:89:97:50:27:fd:ed:38:bd:
         9b:39:e8:8f:1d:2e:c0:46:94:d4:88:85:a5:d5:53:69:d5:90:
         49:30:da:73:c6:9b:0d:fa:a4:25:47:02:bb:69:b8:6e:c2:09:
         12:24:2c:b4:ec:73:70:43:cc:ac:0b:a0:e7:78:a6:d1:58:d6:
         85:4f:f1:d7:f8:06:2f:00:12:6c:0b:89:a4:4d:d1:5b:03:9d:
         cb:40:88:51:f8:45:c3:b1:01:25:38:cd:88:17:f6:75:e8:45:
         dc:3e:21:f5:53:ee:02:bd:05:69:eb:ab:ce:f4:ba:70:f0:9b:
         92:a7:3a:29:60:66:70:67:b9:16:23:99:6c:47:ff:06:ab:25:
         e6:eb:bf:ec:24:f0:52:bd:e7:17:fa:a8:bb:53:0f:d8:44:bb:
         da:27:8c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:58 2024 by rpki-client on console-fra.rpki-client.org