Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7814f8ea-d68e-3312-a97e-df05574f874e.roa
File:                     7814f8ea-d68e-3312-a97e-df05574f874e.roa (raw, json)
Hash identifier:          r3SRggbo372p2HSy1E42udNCZ6Hn/8cP08uLWfyDtT4=
Subject key identifier:   FA:0F:55:E5:A7:37:FE:D4:49:2A:2D:8B:58:42:B4:A0:F2:87:C0:E8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36D845CCB242E4754A9E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7814f8ea-d68e-3312-a97e-df05574f874e.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.54.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:d8:45:cc:b2:42:e4:75:4a:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=fb51418e-dcfe-4485-ad92-d730cd9f4997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3a:cf:78:91:39:fa:78:93:9f:44:fc:9f:ee:
                    a1:92:28:57:60:90:e9:26:5b:b9:98:e0:1c:77:a8:
                    72:47:0a:bf:35:41:c8:db:9d:71:56:16:5e:e0:93:
                    cd:8c:0d:86:98:42:0e:5a:3a:08:92:b7:be:76:0d:
                    68:e6:a1:d6:6d:3a:2c:1b:bf:ba:87:c2:8b:ed:cc:
                    63:32:85:ff:0e:c4:2a:c2:14:a8:be:ac:5c:5a:d0:
                    c8:d6:1c:49:81:49:28:ce:fb:51:bf:5b:9f:ae:b9:
                    8a:9a:39:c2:2b:f6:8c:ed:e6:c4:21:2f:0b:10:6f:
                    67:ec:4f:fe:4e:82:35:2d:29:a3:43:bb:14:3d:a3:
                    9d:06:f1:43:ba:7e:a4:6c:8a:06:81:66:2a:38:af:
                    97:b7:db:83:d8:b1:66:15:a3:94:c5:58:28:ea:de:
                    e6:04:62:d9:c8:fa:b5:94:ed:64:3a:75:ed:8a:1c:
                    db:a1:7a:ae:1d:a3:09:50:24:f1:44:d2:cb:ba:a1:
                    a0:84:6c:ba:ce:39:cd:df:c9:18:30:eb:43:14:87:
                    f9:0e:01:46:15:e4:26:be:d5:3a:67:e9:fa:5f:8f:
                    03:43:90:62:f8:81:e2:51:fc:64:00:fc:0f:e3:cb:
                    0d:c3:8c:39:b1:06:54:8d:90:c3:6d:a1:95:b8:e4:
                    94:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0F:55:E5:A7:37:FE:D4:49:2A:2D:8B:58:42:B4:A0:F2:87:C0:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7814f8ea-d68e-3312-a97e-df05574f874e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:3b:b6:54:4c:ad:10:77:aa:18:d3:17:fb:96:31:76:12:eb:
         a4:a6:c3:f4:80:ea:55:7f:36:27:74:c2:97:ad:94:4d:20:ba:
         b4:5d:0d:8d:fb:ba:9d:96:dd:7a:a5:a0:31:8f:fb:f5:78:39:
         66:81:e1:0b:c6:9b:87:cf:ee:8b:a3:dc:86:26:c7:17:49:d6:
         52:c7:f2:51:f1:1d:a1:41:d3:b7:fe:af:d9:6b:aa:e4:00:be:
         99:4c:35:3e:aa:7d:45:5e:29:36:fc:9e:78:2b:b1:46:79:23:
         a5:95:9d:7d:79:fa:93:ff:0c:77:0c:06:86:42:36:72:f8:29:
         0c:c6:13:b2:ff:7b:df:5b:24:8f:ff:69:da:3b:79:6f:31:9e:
         a4:63:bb:80:39:93:8a:cb:50:c8:ee:8d:97:d6:ae:ff:08:51:
         3d:31:0e:e8:9e:1a:5b:90:41:4a:f8:c4:4c:36:c5:e3:bc:39:
         00:ea:fc:3d:d5:12:ef:41:27:de:66:65:67:7e:90:16:1b:f2:
         db:42:57:ee:a0:09:c5:fb:e4:4a:5a:4e:cd:1a:15:78:55:b5:
         98:9b:ec:ce:4a:67:f7:5b:51:40:c3:00:d7:4e:05:4a:e0:8e:
         6e:25:be:95:0a:2d:e4:4f:c6:09:0f:b9:58:d6:91:c6:e6:80:
         c2:8c:e9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:47:19 2024 by rpki-client on console-ams.rpki-client.org