Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c31a468-e60d-3d1c-9a08-c18714e05b79.roa
File:                     6c31a468-e60d-3d1c-9a08-c18714e05b79.roa (raw, json)
Hash identifier:          OsMfJBhAOfsuiQeoKXtCVA8NTh4Xp8Ihk5BjO9o3/7Y=
Subject key identifier:   D2:77:6D:0E:3F:29:7B:F1:D1:EC:92:38:3F:27:CD:95:C5:14:7F:70
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847600BA778E0935E280A268FFC
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c31a468-e60d-3d1c-9a08-c18714e05b79.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     20940
IP address blocks:        23.72.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:a7:78:e0:93:5e:28:0a:26:8f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=76cade87-1189-4742-a591-57558caa9067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:5a:d8:02:02:0b:08:75:e3:e0:64:a6:82:
                    c4:c0:e6:1e:5b:29:75:9d:7e:9c:8b:19:5d:1f:a0:
                    74:8a:af:d0:4f:db:15:ae:54:d8:24:8b:36:c5:93:
                    4b:20:ac:c6:c9:0d:ed:d7:e1:9a:63:db:de:09:69:
                    2f:a3:f0:67:c8:ab:71:1a:14:10:67:97:88:7e:21:
                    de:e2:ca:cd:82:95:ce:5e:53:f2:d3:50:b2:6c:56:
                    a8:05:ea:68:c4:18:99:93:e7:6d:3b:8b:62:a7:8a:
                    ea:08:de:ff:15:1d:7f:63:a5:cf:d9:e4:db:32:49:
                    33:fc:7a:c7:22:76:ac:5f:36:55:49:f5:06:32:92:
                    c0:c2:38:1d:0c:77:ff:36:cf:25:2f:80:93:ae:ff:
                    8b:d3:d5:5a:f6:cc:68:e6:91:9d:98:99:90:37:4b:
                    52:73:f3:51:f5:47:fc:76:14:d9:7b:14:08:f1:44:
                    f2:6c:20:21:0a:28:39:1d:4b:de:4e:8d:cd:b1:60:
                    af:62:a7:83:c9:c2:37:b9:56:7c:bd:47:57:85:f6:
                    22:e3:f4:e4:f4:7c:fe:7e:01:27:3d:2d:6e:97:61:
                    9d:7a:37:d9:e8:4e:ab:79:02:2f:b6:1b:0c:b0:e7:
                    5b:e4:8f:0a:9c:4a:34:7f:7f:a3:60:94:85:32:91:
                    13:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:77:6D:0E:3F:29:7B:F1:D1:EC:92:38:3F:27:CD:95:C5:14:7F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c31a468-e60d-3d1c-9a08-c18714e05b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.72.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:77:fe:b7:c9:f3:d4:c4:f4:ec:9a:76:57:b7:a3:68:d5:cb:
         28:13:8e:e9:1c:61:2f:61:be:85:a7:49:9e:c5:b1:24:c8:99:
         e1:e9:d6:d2:4b:07:16:65:ea:ec:e3:86:82:f7:f6:38:6d:6e:
         d1:c6:7b:df:88:8e:d4:32:c0:1e:4c:bd:b9:9d:6c:72:e6:f9:
         6a:a5:3f:68:cd:96:ae:e9:7d:cd:ab:aa:86:7c:d4:03:bc:65:
         d1:23:92:31:5e:dc:9b:ac:c9:0d:d6:82:83:0e:0c:8c:98:96:
         1f:02:2f:fc:8f:12:8b:e9:bc:1b:f1:3b:ea:a9:be:9f:5f:fc:
         3b:b7:a9:24:91:f0:5e:74:94:20:6e:43:13:d1:fd:11:32:28:
         ac:66:bc:5b:76:43:bd:be:4f:34:e1:f0:90:03:ce:40:25:59:
         f7:66:36:e5:3a:a1:e4:51:51:09:d4:2f:86:db:35:e3:35:bb:
         d9:32:d9:16:63:a0:57:91:94:7d:3f:a0:f4:15:cb:8a:d0:63:
         89:8f:01:9c:1e:df:b0:b6:10:b5:c3:63:61:77:e0:87:28:9a:
         f9:0b:1c:b7:9d:18:06:37:42:94:bd:df:41:3c:b1:fe:e3:bb:
         41:ae:24:15:93:87:27:0e:5c:58:82:7c:bd:45:6c:97:83:16:
         36:27:c2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:58 2024 by rpki-client on console-fra.rpki-client.org