Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bdacf97-9378-30a8-9d61-f9bd4fdec1be.roa
File:                     7bdacf97-9378-30a8-9d61-f9bd4fdec1be.roa (raw, json)
Hash identifier:          Q7iBVH185WttxwKE+eEymVmhc1MPaGExuKKoNIPfiTo=
Subject key identifier:   74:6F:43:74:28:B1:B3:BB:4F:62:84:7C:CC:35:A1:F4:12:86:CD:2B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847D99A0256C2E1F3FF4F397D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bdacf97-9378-30a8-9d61-f9bd4fdec1be.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     20940
IP address blocks:        23.204.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:9a:02:56:c2:e1:f3:ff:4f:39:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=a49f3fb6-7b5f-423d-9a27-b84c1aa605ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:34:f7:eb:6d:01:ba:7d:28:84:43:9d:be:
                    8c:d0:fa:94:ad:27:e4:b1:3a:dd:75:af:59:1d:f6:
                    62:98:64:63:dc:24:1b:78:75:8e:1f:59:b3:a8:a5:
                    88:58:6d:8c:17:56:ba:cf:ac:c1:1f:74:e8:77:2a:
                    fd:41:29:d5:7b:91:fd:f8:a5:6e:d5:bf:a1:f7:92:
                    b2:8f:ec:a3:a3:ab:dc:3c:77:47:53:d0:c9:3e:07:
                    64:a9:a4:e2:f9:f5:78:7f:fb:e9:11:98:8e:5e:fb:
                    5a:1e:35:18:4a:af:ce:a0:11:45:de:e0:2d:6f:02:
                    ab:60:33:7c:d7:08:45:1c:8f:19:e8:e8:6c:46:68:
                    ef:d0:e0:6d:9b:20:19:3d:8b:b7:5c:d9:a8:3f:c9:
                    79:38:0f:9e:d6:13:84:49:b2:f0:26:2a:e6:f2:1c:
                    d9:cd:e4:a5:53:4c:7c:7f:85:50:fc:7e:c8:36:48:
                    b2:a0:70:41:63:2c:5a:d0:88:b4:d4:e8:2e:73:2a:
                    56:90:49:56:02:aa:a4:76:e2:39:70:d9:5b:e5:c4:
                    e3:61:5b:a3:fb:59:86:61:c2:20:8d:bb:eb:ee:8f:
                    49:98:4d:04:5b:37:02:53:d0:d4:b6:c2:37:81:c1:
                    88:73:ee:45:5b:2e:ce:35:1d:56:0e:c1:d9:dc:8b:
                    2d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6F:43:74:28:B1:B3:BB:4F:62:84:7C:CC:35:A1:F4:12:86:CD:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bdacf97-9378-30a8-9d61-f9bd4fdec1be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.204.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:b4:7e:d4:f8:34:e7:dd:6f:1d:ce:3d:11:d9:48:e2:57:b8:
         c5:8f:bc:cd:32:11:84:6d:1b:95:12:92:b0:a5:98:be:0d:9d:
         04:d7:11:82:6d:4c:9a:8e:02:fd:ca:d1:13:f3:d2:fb:b6:e4:
         78:b6:57:1e:b3:e2:7c:61:0f:84:2d:ed:47:97:1d:81:8c:fe:
         66:01:82:aa:69:37:97:bb:c0:04:5e:3a:42:ec:c9:1b:8f:6a:
         11:56:83:af:2d:a6:ae:b0:5b:d4:7f:74:a3:ac:ee:9a:4d:81:
         a2:14:71:4f:ab:63:87:c6:50:1b:91:de:77:2e:89:75:66:b4:
         a5:55:be:94:74:81:b1:38:f0:f1:d4:0f:f3:48:92:d7:6f:6a:
         30:ff:55:64:fa:89:fa:45:92:70:71:4e:3f:22:0e:f2:18:d8:
         65:d8:f7:b6:03:ef:50:30:6f:59:a7:2a:50:ba:b5:fe:4b:7b:
         a0:df:83:25:a4:2b:9d:07:2b:23:53:6c:bf:41:83:5b:d4:df:
         2a:33:17:d7:94:20:05:0d:1e:7b:ce:4e:24:25:82:0d:e2:66:
         90:36:af:86:41:97:c5:01:87:a1:d2:a6:dc:6a:ff:60:26:76:
         25:d2:b3:aa:ab:f6:3e:6d:c9:68:f6:77:69:2a:36:bf:b6:2e:
         fd:8b:81:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:05 2024 by rpki-client on console-fra.rpki-client.org