Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8082f49f-ffb0-367e-9978-319c7f4a3f32.roa
File:                     8082f49f-ffb0-367e-9978-319c7f4a3f32.roa (raw, json)
Hash identifier:          u3CJuPpWOUSr1L4rUu+gVoVsja3wPrN/EW13ewB+jFY=
Subject key identifier:   25:2A:7F:61:58:51:49:CF:4A:74:35:51:81:25:A9:90:12:9D:7B:9D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C4AA2D0B70FFE599BB5E622C
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8082f49f-ffb0-367e-9978-319c7f4a3f32.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     20940
IP address blocks:        23.198.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:2d:0b:70:ff:e5:99:bb:5e:62:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=79b7e99f-4cdb-4c6a-b484-ac0a5f811111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:d6:c6:61:28:df:77:4e:31:5d:09:0b:b4:
                    aa:51:f6:51:02:c1:7a:1d:a5:09:68:05:51:fe:9f:
                    34:06:ff:8c:1d:c6:d5:34:89:04:5e:2d:d4:27:24:
                    18:0e:8e:ad:79:b2:41:0c:fc:59:c3:3e:39:cf:1b:
                    60:14:1b:48:4c:a0:70:8b:21:95:84:83:80:00:bc:
                    90:83:76:f9:35:33:5e:3b:2a:77:51:8b:88:94:53:
                    e8:ab:62:34:62:a6:34:7b:77:49:7b:a3:86:e0:0f:
                    b2:e4:50:e2:31:c9:3f:d5:a8:c2:8f:53:c9:25:26:
                    87:cd:0e:12:ce:bf:93:27:ef:7f:ff:09:37:f4:dd:
                    34:ad:20:20:d6:2d:68:4b:6d:1c:bf:10:26:0b:72:
                    23:2d:6c:63:07:5c:b6:45:95:44:56:12:71:ca:e0:
                    bd:75:00:e8:0a:5a:c6:f5:dc:48:e5:f4:4b:28:97:
                    21:00:53:f5:c7:c4:dd:b0:d1:77:a5:9c:a6:ca:a8:
                    9b:85:99:08:d9:26:f8:33:06:d7:99:de:4d:c8:db:
                    8f:48:87:2d:94:22:1b:a9:2f:d5:7d:02:2a:34:45:
                    92:49:5f:fa:32:d6:06:b0:d1:33:d2:07:0f:57:64:
                    bb:d8:7e:84:f0:e7:be:cf:74:9c:39:c6:46:1d:b9:
                    a9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2A:7F:61:58:51:49:CF:4A:74:35:51:81:25:A9:90:12:9D:7B:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8082f49f-ffb0-367e-9978-319c7f4a3f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.198.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:09:cb:ab:63:65:02:bd:f5:d3:1c:aa:13:99:4c:89:cf:59:
         f6:11:cd:40:87:f3:25:93:17:fa:a1:f8:10:16:17:28:74:83:
         0f:76:8e:34:0d:51:b3:a3:a2:75:ab:e8:13:f8:5e:0e:ea:46:
         21:b2:42:ed:c9:aa:c1:4e:17:96:b4:83:30:f0:fa:16:31:4d:
         de:f9:81:58:44:22:2e:03:c2:39:05:3e:c6:5d:21:a8:b7:cb:
         bf:d3:54:e7:46:ee:33:4d:ec:33:b7:6f:3f:d6:a5:a3:28:31:
         5a:ab:d4:0f:07:9c:5b:60:1c:9e:bc:01:0a:f4:e0:52:0a:c8:
         0f:9d:99:7b:46:96:c7:35:7e:ad:de:a3:5d:7f:be:fc:ee:6f:
         bf:15:a8:6a:9f:28:b7:40:d1:7b:0c:62:28:e0:42:19:e2:a1:
         53:d8:5d:13:9a:10:de:37:2a:26:78:8f:95:d5:df:e2:3d:57:
         f5:14:ab:d8:43:e4:aa:3b:6d:52:03:c5:42:77:0b:ee:b7:c1:
         5c:7d:aa:9a:f5:69:3f:7b:11:ef:51:0e:4f:e1:7c:b9:04:09:
         01:13:15:71:9f:59:c7:06:77:70:fe:81:ea:31:07:74:a6:a6:
         9a:05:00:32:23:f1:37:b6:b9:55:71:b4:d2:c8:6f:85:16:e7:
         54:61:89:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:07 2024 by rpki-client on console-fra.rpki-client.org