Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/731fc2ee-480b-3e64-8ef1-4301fe4dd333.roa
File:                     731fc2ee-480b-3e64-8ef1-4301fe4dd333.roa (raw, json)
Hash identifier:          Sc/VeNnIYYYlj+2tf97saT0R3EiK3dGTuStz1prUGZo=
Subject key identifier:   4E:22:B1:D6:C1:01:D5:27:52:2B:EE:E1:24:FC:07:EF:18:88:5E:8E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B3CC1F39A8E3A9054FE70540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/731fc2ee-480b-3e64-8ef1-4301fe4dd333.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        23.209.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:1f:39:a8:e3:a9:05:4f:e7:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=40980402-e8bc-4885-a3b4-b507d71ff8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ca:65:36:31:a2:4f:c0:1c:51:ae:96:7b:12:
                    ef:2b:4e:43:c9:ee:40:f1:1f:ee:65:61:5f:00:4a:
                    bc:b2:8d:28:f5:98:21:4b:fe:65:99:8c:f2:07:71:
                    54:3a:01:d7:ee:35:38:7c:d6:4e:63:ab:c8:c2:73:
                    38:07:f6:d1:d1:14:64:2d:93:95:76:86:f6:90:48:
                    28:ca:f8:f8:64:3c:32:10:87:ba:56:89:99:ad:47:
                    2b:94:34:c1:23:0a:53:fa:77:65:6f:72:27:3d:46:
                    2a:f3:b0:aa:1f:9d:42:db:c1:0b:36:f2:e5:39:c3:
                    52:3f:0e:22:5a:37:fc:52:f5:34:0a:48:7b:22:12:
                    3e:24:20:01:9e:b4:23:70:79:4f:7b:af:de:92:48:
                    c2:c6:30:b0:23:0b:3a:92:58:68:c4:b0:3c:0d:0d:
                    22:da:c2:de:2a:6b:51:84:5a:dd:65:90:a4:94:90:
                    fa:57:15:22:ff:5d:67:0e:a0:f8:a9:a3:c2:26:45:
                    eb:31:73:c3:d6:14:7e:59:26:41:67:a8:1b:ff:7b:
                    c7:36:4e:26:48:3c:06:83:ce:1c:1b:f4:ed:bb:57:
                    40:e8:aa:f0:19:68:39:88:22:e3:8d:47:e5:40:66:
                    06:aa:fc:ac:7c:e4:bf:4d:40:0c:6b:1d:9b:af:48:
                    46:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:22:B1:D6:C1:01:D5:27:52:2B:EE:E1:24:FC:07:EF:18:88:5E:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/731fc2ee-480b-3e64-8ef1-4301fe4dd333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.209.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:e7:de:8e:64:7a:55:84:d8:d5:20:71:0c:ab:47:a4:70:d3:
         34:7e:0b:ba:ca:3a:8a:9e:fc:67:c4:72:5b:88:29:6f:70:0d:
         c6:88:27:ab:db:26:07:aa:47:0b:a8:72:5d:2d:b8:e5:7f:23:
         a0:65:12:c7:23:41:c4:48:c5:68:9e:5b:2a:59:32:5c:f5:e0:
         fb:68:68:03:24:77:d9:fb:a5:60:96:d4:5c:55:fa:7a:66:d3:
         26:58:b0:12:d4:d1:cf:c7:bf:20:86:37:4c:86:ea:d5:eb:cd:
         ba:01:f0:81:f2:3d:37:ac:03:47:94:44:7c:1e:4b:61:10:71:
         e0:4d:37:24:da:f1:b1:f9:cd:37:39:9e:26:0d:d0:33:68:17:
         d8:19:c4:9d:54:17:27:47:2b:64:ee:42:75:3e:ec:25:4f:13:
         ec:5c:96:8d:f3:62:01:6c:f4:2a:ae:72:0e:db:42:62:78:4d:
         6d:70:76:cd:19:52:b0:23:47:93:40:47:07:ca:11:7f:53:86:
         24:16:ea:f7:8e:fb:1b:62:0b:9d:d0:ac:14:55:b9:ff:d5:79:
         a5:ed:61:09:39:56:83:71:43:b7:b8:d8:9b:40:9c:21:c1:c0:
         37:29:11:21:ab:96:4c:e4:96:10:bb:b6:ca:61:85:8d:78:f3:
         0d:29:7f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:01 2024 by rpki-client on console-fra.rpki-client.org