Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dc1f74d-8588-393d-a48c-67ab7bc61f0c.roa
File:                     7dc1f74d-8588-393d-a48c-67ab7bc61f0c.roa (raw, json)
Hash identifier:          SIRoPw8YOm5d+u1VC9qfoFwwd9nOcT1pRUW9Crr+dWo=
Subject key identifier:   88:3E:55:09:EB:BC:89:AE:DC:76:78:8C:A9:41:CE:CC:3C:07:DC:94
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AF9BF4FBBC3AB99D2AD4F5F0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dc1f74d-8588-393d-a48c-67ab7bc61f0c.roa
Signing time:             Mon 28 Oct 2024 01:00:32 +0000
ROA not before:           Mon 28 Oct 2024 01:00:32 +0000
ROA not after:            Sun 26 Jan 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        23.62.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:af:9b:f4:fb:bc:3a:b9:9d:2a:d4:f5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 28 01:00:32 2024 GMT
            Not After : Jan 26 02:00:32 2025 GMT
        Subject: CN=89aea5b1-724f-4dfc-8ae4-8616b3f69c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:c2:06:a3:c9:5c:6d:bb:43:88:92:a5:70:
                    11:ce:29:1d:30:c1:71:82:90:da:06:f2:31:a7:50:
                    a9:48:b5:04:4e:8d:ba:81:84:e2:54:6b:9c:05:f1:
                    17:18:e7:40:1a:c5:ef:05:ab:cb:f0:31:20:fd:e1:
                    1d:d4:9e:01:1a:91:51:8a:44:08:d6:7c:f0:ab:b4:
                    76:81:14:c8:18:3c:64:b9:bd:83:15:b6:14:46:b6:
                    e9:06:8b:9d:2c:1a:69:4f:a2:f9:c7:df:f2:4c:73:
                    27:d4:ea:a3:6c:34:8d:65:71:17:6e:28:3f:1e:5c:
                    49:f9:96:89:ca:11:0f:a5:7e:71:37:c6:e4:dc:38:
                    a3:cf:b2:b4:ab:ca:6d:6a:69:d8:a0:81:6c:e7:c9:
                    f6:6e:45:25:4f:11:eb:07:8d:19:c1:4d:16:e7:93:
                    5c:6b:86:8e:b5:f3:8a:8c:b9:96:27:54:a5:c3:f0:
                    4b:80:93:e8:56:49:e4:de:a6:28:72:00:05:60:70:
                    fd:36:b1:ca:99:77:bc:56:1f:4d:37:f7:ef:ca:88:
                    89:cf:b1:7b:89:02:5c:78:12:41:e5:e3:70:0e:71:
                    08:3a:d1:a4:bf:93:fe:44:93:50:06:44:e0:da:95:
                    dd:cf:5a:11:e8:55:dd:fd:e8:e1:ba:39:93:f6:a0:
                    70:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3E:55:09:EB:BC:89:AE:DC:76:78:8C:A9:41:CE:CC:3C:07:DC:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7dc1f74d-8588-393d-a48c-67ab7bc61f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:dc:29:cb:dc:5b:07:f8:32:0f:2b:cb:ce:08:cf:85:d9:0f:
         52:3d:78:31:df:e1:53:5b:9e:8a:ab:7d:08:0a:40:6e:41:b9:
         d2:86:4a:26:3f:a5:ce:d9:cd:8c:f4:a7:bd:bf:b0:a4:94:07:
         7d:2e:9b:2f:e4:c1:a3:b8:4b:91:c0:b3:5f:27:b1:ff:6f:bb:
         75:49:e8:95:6a:43:67:11:40:91:84:69:52:e6:66:44:a0:03:
         b5:4a:bb:7e:8e:11:1d:ac:e7:8f:09:2f:d1:03:ea:67:70:f4:
         1f:4e:77:f6:cc:53:84:a0:10:34:43:66:b4:ba:3f:bc:dc:b2:
         3d:e2:fc:8d:bc:73:3f:0d:4a:c9:7b:e7:64:12:29:ef:f4:ca:
         7e:5e:81:df:e7:97:aa:5b:32:68:aa:96:b7:cb:92:f3:59:07:
         fd:c4:53:86:59:c5:19:55:aa:38:02:78:0a:77:f9:c1:0d:ef:
         61:7c:88:0b:50:d5:64:de:0b:2b:f4:75:8e:ae:27:79:e5:7d:
         24:d0:98:f1:b0:e2:df:aa:32:63:22:f0:8c:4f:53:af:2d:d5:
         61:ed:ab:6c:ae:82:6a:aa:34:f9:b4:47:b5:7a:f8:14:34:bc:
         33:55:29:e5:d8:03:24:b8:e8:36:f9:fc:03:bc:4f:ec:a6:32:
         0e:ef:53:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:49 2024 by rpki-client on console-ams.rpki-client.org