Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f386e46-5f55-3aef-853f-c40aca2da2f6.roa
File:                     7f386e46-5f55-3aef-853f-c40aca2da2f6.roa (raw, json)
Hash identifier:          ru8EWbA9bfiiqO3PD6dDEvikFpvkPoYJiRDaI8yQcIQ=
Subject key identifier:   F9:2D:83:EA:DE:2B:56:17:FF:1E:30:24:98:97:FA:60:A4:C0:FD:7A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858479D76EDD5BAD14E17B04231C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f386e46-5f55-3aef-853f-c40aca2da2f6.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.44.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:ed:d5:ba:d1:4e:17:b0:42:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=e11debdc-22a6-4840-bb80-501fc1c74241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d0:07:53:4d:cd:47:ee:cf:55:62:a3:ba:bf:
                    3d:9d:c8:4a:4c:7e:f9:ea:00:fe:f0:a3:00:b4:40:
                    8b:77:03:78:73:1d:f6:54:ec:95:f1:8a:9d:e7:88:
                    1b:9d:a7:80:cd:eb:9d:2b:88:6c:3a:8f:fb:d5:b7:
                    1e:7f:c2:6a:26:63:2c:7f:48:7d:dc:d6:70:17:40:
                    b0:8b:88:35:5a:51:d0:1b:f1:14:aa:f3:3d:d7:d7:
                    a6:45:98:55:48:ac:1d:48:e8:83:8a:48:be:29:fe:
                    ef:57:37:77:bd:59:d7:16:68:4d:09:5d:7c:e2:bf:
                    3f:60:75:5c:9b:b2:57:b9:04:78:c7:75:88:bb:e5:
                    29:c8:3e:bf:b4:16:70:1f:57:49:28:31:a7:59:d2:
                    4a:87:85:0e:f9:36:29:78:fa:d7:29:cf:a3:47:9d:
                    b8:d6:a5:b9:b3:ee:81:ae:84:1a:d0:05:62:8e:70:
                    e6:ed:73:09:d8:be:4e:ab:5a:2d:89:2f:65:99:c3:
                    65:4b:62:4a:2a:1d:9e:99:e0:84:ab:ee:3a:26:ee:
                    77:d7:1f:c0:a8:78:0c:61:4e:aa:b1:fe:a0:b8:26:
                    89:eb:bb:69:a6:51:1b:15:7e:92:bd:4b:14:c9:cd:
                    50:ec:dc:5e:cd:d9:5f:55:33:04:09:21:96:44:fb:
                    a6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2D:83:EA:DE:2B:56:17:FF:1E:30:24:98:97:FA:60:A4:C0:FD:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f386e46-5f55-3aef-853f-c40aca2da2f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:4a:df:d6:42:c4:f4:5e:09:2e:49:16:16:a2:17:43:0d:3e:
         c6:79:7a:f2:f1:c4:93:1a:b8:60:bc:94:17:ea:f2:19:39:3b:
         55:37:7d:c8:0f:20:ed:38:b0:0f:06:ea:c9:77:be:fe:f0:82:
         ee:99:cd:6e:5b:4f:ad:f5:53:8d:04:41:f2:0f:6d:30:3e:d6:
         75:7f:d0:25:ff:a2:d0:8f:db:92:4d:99:34:8a:4f:01:72:48:
         ef:c1:99:09:08:58:95:30:23:2a:11:a9:7d:10:73:77:f7:00:
         32:be:0f:91:3d:c3:76:31:ad:12:5a:7e:97:f8:81:21:b8:21:
         83:8d:2a:19:e4:32:5a:35:04:e0:e9:b2:d5:9f:8b:26:5e:62:
         72:5b:12:e5:a5:f2:89:ff:e1:bf:e6:0a:12:f8:a0:d5:02:a2:
         7d:c6:58:5b:8f:49:6d:ee:ff:62:06:73:45:63:09:36:98:ce:
         9a:97:50:81:71:c5:ad:a4:b6:8f:9f:36:eb:f3:89:36:0e:d8:
         8a:1d:2b:51:73:b8:f3:ba:0e:e4:d9:38:10:8c:01:e6:6b:2d:
         f4:41:46:bc:ad:e8:a2:c4:50:4f:6d:a7:c5:df:44:a2:cd:96:
         23:39:b6:5f:58:55:87:68:e3:18:ec:36:d7:05:bb:5b:b9:7c:
         b3:cc:18:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:59 2024 by rpki-client on console-fra.rpki-client.org