Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d64c3a2-e789-3e6b-8a88-cdce94fde92e.roa
File:                     6d64c3a2-e789-3e6b-8a88-cdce94fde92e.roa (raw, json)
Hash identifier:          UkjNdcoqRoHETwi/U6xXAv+oFMCI/vYmOxQ1eI2a+l8=
Subject key identifier:   90:C0:A5:D0:B7:39:BE:E4:A5:85:B1:DF:E2:9F:D1:74:83:2F:CD:4F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858479FE3CE0359AEAC70239F5260
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d64c3a2-e789-3e6b-8a88-cdce94fde92e.roa
Signing time:             Tue 22 Oct 2024 09:52:29 +0000
ROA not before:           Tue 22 Oct 2024 09:52:29 +0000
ROA not after:            Mon 20 Jan 2025 10:52:29 +0000
asID:                     20940
IP address blocks:        23.212.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9f:e3:ce:03:59:ae:ac:70:23:9f:52:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 22 09:52:29 2024 GMT
            Not After : Jan 20 10:52:29 2025 GMT
        Subject: CN=67ed94d1-5b00-4dbd-bb80-dd4b394891a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:16:ef:af:66:4f:ff:ad:6d:af:e1:cd:fe:
                    ab:3f:c3:41:69:77:7c:13:9b:71:54:86:f5:9f:99:
                    7c:26:26:87:6a:89:bb:54:9e:e0:f3:de:76:26:f3:
                    4b:cc:cb:42:c0:08:2b:ed:0a:fe:66:e5:b8:1b:6b:
                    c0:1e:fa:06:b1:b7:58:3b:4b:2a:85:82:61:55:d7:
                    5f:89:a1:0c:06:8c:f2:d6:8c:95:f9:e5:8c:0b:d7:
                    d2:0f:d7:1b:27:8b:a1:35:a1:92:57:76:94:11:83:
                    0b:39:03:6f:19:47:5b:c9:76:72:02:48:90:a1:bb:
                    56:ea:e8:df:dc:bf:17:57:62:e2:d2:70:60:8d:6f:
                    7c:d7:9e:de:c7:6c:99:04:bf:9c:27:7a:0d:9d:68:
                    dd:0b:a8:c3:ac:bd:bc:8d:5b:9b:9c:28:6e:b6:13:
                    4a:2b:6a:4c:5c:05:6d:2b:2f:8a:f1:f3:5e:a2:5a:
                    a2:05:07:37:75:f8:18:13:e4:82:8f:49:a1:bc:57:
                    d4:71:bf:a5:1f:5e:9f:7e:b7:79:98:44:79:ff:47:
                    d6:e1:32:0a:fd:68:bd:65:68:18:46:fc:74:16:b8:
                    58:1f:05:51:65:ed:3e:f8:e2:a8:d6:c2:b7:09:c7:
                    e2:07:97:3b:a2:29:16:5e:3c:ce:96:ab:12:62:84:
                    92:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C0:A5:D0:B7:39:BE:E4:A5:85:B1:DF:E2:9F:D1:74:83:2F:CD:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d64c3a2-e789-3e6b-8a88-cdce94fde92e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.212.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ee:ce:d9:e6:8a:f6:c5:d4:a6:a9:b9:64:83:94:d8:a2:57:
         d7:79:09:01:39:e0:8d:ca:c0:7a:32:f7:fb:56:82:c4:98:1b:
         61:cd:bb:d5:2f:92:ba:cc:36:b5:fd:93:37:5c:54:ca:93:10:
         fc:ea:0e:61:9f:0a:00:8e:03:4c:b6:27:63:de:82:ac:11:d2:
         6f:81:b7:9f:af:ad:87:44:d8:5a:7e:ad:9d:19:0d:ab:6d:92:
         ed:41:08:31:b0:66:6f:36:cb:c4:da:2b:85:65:34:42:d9:d6:
         0d:d8:2c:18:be:4f:e8:06:f1:ea:5d:a4:fb:4e:96:cd:a0:a0:
         0a:96:2f:67:2e:c4:0d:25:40:60:58:98:eb:ea:bc:8a:fa:fb:
         98:04:66:e1:75:21:60:a9:c2:dc:c3:43:3f:c8:2a:ec:46:96:
         ba:9d:a7:01:43:a7:c7:a8:9a:bb:7a:97:1f:9c:df:58:1f:75:
         4a:03:31:ef:fb:db:28:52:8b:62:fa:28:95:c7:56:fb:5a:94:
         f0:f7:df:22:d6:4e:6a:f3:2c:69:12:ef:83:49:d8:55:84:19:
         e7:50:16:c1:9d:fa:b7:60:ab:69:38:88:fd:a4:35:c1:45:50:
         1c:1d:b3:83:a2:ca:62:f5:78:d1:46:81:15:b8:9f:db:94:7c:
         00:03:80:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:40 2024 by rpki-client on console-ams.rpki-client.org