Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/766c93f0-e38d-3f45-a0a8-afa417386caf.roa
File:                     766c93f0-e38d-3f45-a0a8-afa417386caf.roa (raw, json)
Hash identifier:          jbHg84z4czDzRrd0Hfkd9evqRGMOwX2gFtgmUWcXjtg=
Subject key identifier:   17:C0:BF:20:7D:47:FA:B9:36:DB:13:E1:FE:D8:23:5C:35:96:E9:5A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B1017A550F7D764E382AEDE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/766c93f0-e38d-3f45-a0a8-afa417386caf.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     16625
IP address blocks:        23.192.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:7a:55:0f:7d:76:4e:38:2a:ed:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=d5a3d0c0-62e9-45b2-a8f3-d56c7c357ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:74:4c:de:92:aa:65:60:84:f6:12:ba:30:34:
                    69:d8:fe:a1:d5:2f:65:ad:38:7b:44:57:8d:58:61:
                    d8:8d:72:ee:65:64:43:fd:d4:bc:b0:7f:eb:95:68:
                    89:04:f0:31:9f:5a:ca:e3:c7:f5:72:bb:64:6a:99:
                    80:68:e7:f6:b6:39:39:3d:c9:6d:db:f7:5f:cd:a9:
                    66:5f:7d:ec:99:d2:1a:32:bf:33:37:4c:2d:44:ca:
                    8a:02:25:99:4d:a5:19:a9:b6:ec:44:fe:49:c1:ae:
                    81:9b:e8:0c:4b:43:29:fa:7b:22:50:ac:da:70:2d:
                    70:10:a1:72:1c:34:9e:91:26:f5:a0:4d:c2:9d:d4:
                    3d:3d:e3:84:e9:a0:cf:8d:c1:20:ba:27:b6:ca:33:
                    b4:53:48:39:fc:63:5d:df:27:9b:5c:97:cd:fa:2f:
                    08:b7:31:e4:53:42:01:13:4e:a0:a3:aa:8e:3d:29:
                    66:f8:45:2b:b8:e1:9f:64:35:3c:78:53:38:d9:3e:
                    33:09:f1:92:c1:e1:a8:de:f7:52:e6:26:61:e1:42:
                    51:bd:4e:d5:4b:13:cc:f1:8a:a1:6e:60:78:8a:3d:
                    25:c0:a9:1f:1e:fb:b4:bf:e6:58:7c:f5:1b:a5:09:
                    d0:32:98:ad:71:7d:69:f0:7c:77:15:78:e4:45:10:
                    17:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C0:BF:20:7D:47:FA:B9:36:DB:13:E1:FE:D8:23:5C:35:96:E9:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/766c93f0-e38d-3f45-a0a8-afa417386caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:35:54:b9:b9:22:63:2e:62:3c:99:91:c9:2b:e7:42:22:1e:
         6d:60:e2:8c:91:1c:9d:f9:ef:51:66:0e:4d:9e:0e:40:28:a9:
         e5:0f:f8:a9:d7:b2:5e:d7:95:ce:4a:87:f6:6d:cc:47:18:74:
         6c:be:f8:e4:1b:55:cd:da:c2:d5:0f:75:53:22:90:2f:90:28:
         f8:c1:08:2f:04:49:13:76:13:66:bd:12:c7:7a:15:de:a4:7f:
         03:c1:f2:20:0f:5f:69:8f:aa:a0:ff:ae:17:e1:bb:10:03:e2:
         35:e6:88:25:fe:33:97:36:f3:25:09:6c:8e:22:2f:85:cb:73:
         05:3b:47:24:c2:63:50:1e:03:ca:10:58:59:6e:0e:81:5f:da:
         21:b4:7a:1e:2d:08:be:0b:0c:af:4e:e8:25:72:2e:f7:e8:8e:
         de:cb:2f:b1:39:b5:8d:3f:17:e3:10:c8:4a:9e:4d:43:f3:d3:
         9b:e5:a4:d1:23:e0:d2:d2:d1:fc:7e:44:62:f4:18:f0:20:a8:
         80:50:a5:e9:c1:55:82:85:d5:35:a7:b2:ab:24:bc:7a:85:0e:
         22:7e:4f:6c:f8:6c:58:69:3d:b2:03:f6:d4:67:9c:da:38:2b:
         a9:cb:92:b8:77:e7:56:b4:17:fe:f7:f0:84:32:e7:de:4c:99:
         6d:be:c6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:56 2024 by rpki-client on console-fra.rpki-client.org