Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d8b2c9c-10cb-3930-bc34-7154f9d88ce4.roa
File:                     7d8b2c9c-10cb-3930-bc34-7154f9d88ce4.roa (raw, json)
Hash identifier:          ZDKexg5aWQnWeuHd6KbzVmeDY5kx6oRo0varFkgnUfE=
Subject key identifier:   19:DD:3A:B3:0B:94:0F:97:93:88:A8:B2:7E:D9:5B:D4:A3:85:65:39
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847D999FAE53DD1E5D6E06A91C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d8b2c9c-10cb-3930-bc34-7154f9d88ce4.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     20940
IP address blocks:        23.204.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:fa:e5:3d:d1:e5:d6:e0:6a:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=ce3057b5-dd72-4546-9d00-c2f83ddf7533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f0:96:16:a5:b6:be:bf:a9:98:f4:f0:d6:5a:
                    40:8d:b7:95:3a:0d:78:6a:f1:6c:f5:7e:fd:03:a7:
                    ed:e8:2a:b5:6e:cf:59:7c:f1:4b:9b:93:c1:d0:b3:
                    70:64:4d:a6:dc:04:ea:2f:10:e3:6d:14:8d:94:3c:
                    fd:ab:bd:f6:f7:bc:f6:c1:90:b0:6c:89:52:67:92:
                    08:db:f9:45:79:f7:9b:b2:b2:97:06:4b:97:49:8a:
                    cb:29:5b:57:1e:e9:0a:92:89:32:5a:d1:cf:52:60:
                    ce:a4:d7:a9:51:32:4d:38:8d:19:54:4d:75:ce:c9:
                    47:16:58:2b:f0:00:79:06:17:28:8a:40:09:5c:f3:
                    e8:3c:69:58:ae:51:49:72:7d:79:e9:e7:07:c2:c7:
                    78:3a:8d:6a:03:e6:73:fe:09:e5:d5:6a:b6:f4:bd:
                    2b:30:a3:2b:3f:5e:c0:4e:fb:b5:08:ab:14:1c:fe:
                    db:77:23:11:d6:41:4d:b2:f9:c8:37:79:89:52:4e:
                    84:cc:e0:9d:bb:b1:05:be:e6:bf:64:c3:9f:17:45:
                    d9:ea:6c:ea:c1:06:f1:4a:f2:3e:00:ab:56:f9:32:
                    35:d6:8a:46:44:a8:54:66:dc:ed:ca:dc:1b:6c:bc:
                    da:13:5e:9f:91:82:ea:b9:24:a5:bb:31:ca:32:ec:
                    0f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DD:3A:B3:0B:94:0F:97:93:88:A8:B2:7E:D9:5B:D4:A3:85:65:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d8b2c9c-10cb-3930-bc34-7154f9d88ce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.204.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:5f:fe:5c:ef:6b:86:c6:4a:4f:a7:11:16:e9:85:46:f7:8c:
         35:3b:54:cc:8b:f0:ce:b4:cc:b8:7a:d1:bf:01:10:86:2a:95:
         37:75:04:f4:71:1c:76:55:46:71:0c:4f:20:d9:6c:37:f3:80:
         68:86:f7:a8:96:e3:46:7b:01:67:b2:9e:db:d3:84:91:0b:ab:
         36:76:61:ea:f6:17:7f:37:03:5c:32:bc:ac:8c:f4:ea:c4:f7:
         7c:dc:f7:10:0b:f3:52:ba:91:a2:46:7c:07:b0:2e:68:c2:2b:
         8e:09:82:ee:2b:59:58:b7:77:e1:31:d8:b6:10:44:af:82:c2:
         7f:aa:b2:30:22:ab:0b:4c:10:3f:b7:53:ab:ce:c2:6b:bd:8b:
         4d:08:34:7a:a1:a4:b0:6d:3c:41:43:15:c8:2b:9c:95:70:a8:
         2e:de:e2:42:c1:be:c2:34:76:e8:50:e7:5d:e0:58:4d:93:15:
         44:0f:55:e8:6a:99:08:3f:d6:3f:02:06:98:1d:78:03:2a:54:
         b3:e0:e8:e7:84:e9:c6:63:c5:27:c4:f8:bf:2f:00:c8:2b:81:
         7c:4a:47:ca:db:71:e8:4f:b6:98:28:17:df:fa:a3:9f:f6:32:
         d5:c1:eb:b4:73:eb:78:58:15:89:96:21:e9:d6:10:7b:c5:68:
         03:ea:3e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:05 2024 by rpki-client on console-fra.rpki-client.org