Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c77beae-81f0-36ed-964e-2db1d9a6dae4.roa
File:                     6c77beae-81f0-36ed-964e-2db1d9a6dae4.roa (raw, json)
Hash identifier:          DP/WWmdz03tatepUzJAbAhyGpiD25vOKZ7OnMYVyMG4=
Subject key identifier:   88:85:48:29:9B:06:53:4E:86:E2:A2:D6:39:75:90:FB:E7:C7:90:96
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858476D891F068F55A59EB730BB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c77beae-81f0-36ed-964e-2db1d9a6dae4.roa
Signing time:             Fri 04 Oct 2024 08:59:21 +0000
ROA not before:           Fri 04 Oct 2024 08:59:21 +0000
ROA not after:            Thu 02 Jan 2025 09:59:21 +0000
asID:                     16625
IP address blocks:        23.221.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6d:89:1f:06:8f:55:a5:9e:b7:30:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  4 08:59:21 2024 GMT
            Not After : Jan  2 09:59:21 2025 GMT
        Subject: CN=88a1c110-f88b-442f-9b41-6bf7ae2ca2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:32:70:bc:3e:cd:90:4b:d5:94:f4:25:7c:9b:
                    73:2a:ad:1e:82:33:bd:61:7f:e2:7d:fa:e2:fa:d4:
                    60:e1:df:43:6b:bf:81:02:9c:c3:8e:39:86:b2:5d:
                    85:56:cd:a8:ab:c7:4d:1e:c8:65:64:76:52:23:71:
                    d0:37:8f:06:20:50:c6:a3:49:cd:58:83:eb:c2:32:
                    49:79:57:30:29:53:1e:82:df:89:69:c8:c4:36:df:
                    16:51:79:62:05:a3:86:d9:ba:0c:2d:d3:38:c7:e0:
                    75:ed:f9:3e:93:ed:0d:74:c1:ba:36:2d:08:e0:2c:
                    f7:17:2a:a2:8a:6f:61:04:4c:e5:97:c6:16:f1:c1:
                    1f:66:4b:61:0e:87:4f:3a:7d:99:3c:10:5e:6d:0b:
                    0d:b5:9e:61:92:6c:5d:59:b3:03:c5:09:ab:60:b4:
                    e7:87:ca:eb:98:ab:07:d3:6b:25:ff:a7:71:5d:81:
                    1d:ee:e9:6a:c1:0b:b6:1f:5d:5b:27:da:9f:c2:b6:
                    81:4a:cb:be:d3:ff:c8:71:c4:26:f6:ad:67:03:0d:
                    2a:a5:6d:5e:c3:84:bf:0c:0b:fa:f3:36:09:6e:b4:
                    f9:7e:4e:ce:fa:07:aa:3d:20:07:e6:87:88:79:e0:
                    75:e5:04:12:81:6d:90:5a:a0:45:28:52:ed:4e:cc:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:85:48:29:9B:06:53:4E:86:E2:A2:D6:39:75:90:FB:E7:C7:90:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c77beae-81f0-36ed-964e-2db1d9a6dae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.221.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:1e:8d:b2:10:25:b7:52:d7:cc:b3:ae:b7:7b:0f:91:35:11:
         d7:16:c1:13:ab:6e:f8:ee:de:3d:4b:cb:de:ee:52:3a:a1:53:
         a3:47:ec:ca:b9:c5:99:23:5c:2e:10:82:52:d0:5a:f4:6b:92:
         50:01:0a:03:05:f1:ff:5a:d9:0c:6b:88:63:83:ae:88:26:20:
         95:b0:7f:71:a2:b2:1c:f4:70:72:84:57:99:bb:91:f7:26:7d:
         63:40:36:76:35:6f:23:74:1a:03:a5:83:65:9f:37:18:a0:e3:
         44:5e:0c:37:9f:dc:fa:34:51:3b:52:25:d0:a4:98:f3:0f:4d:
         57:5a:0c:64:05:ae:45:83:bc:75:c0:84:dc:d5:bc:e9:9f:6f:
         81:18:a9:f5:30:aa:d1:c8:89:3b:e0:18:dd:f0:c0:c2:c6:86:
         4e:fe:a0:db:e9:2c:f8:68:66:9e:14:93:ff:6a:88:d3:31:db:
         33:61:b9:30:22:ac:78:e8:0a:ab:cd:5f:46:2a:33:33:e2:de:
         58:e7:38:8d:36:1b:de:72:71:4c:e1:1a:d8:30:d3:3f:e8:cf:
         5a:6b:12:4f:9d:41:54:11:98:c9:52:55:3d:51:ad:a8:ed:09:
         b1:c0:86:64:f5:84:9d:54:32:4d:28:18:a6:ca:f7:64:d9:98:
         05:44:4d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:32:11 2024 by rpki-client on console-ams.rpki-client.org