Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80edd5d2-fe42-3ba1-a700-4674847c470c.roa
File:                     80edd5d2-fe42-3ba1-a700-4674847c470c.roa (raw, json)
Hash identifier:          80do3MOLo6yNt2zFmcEHfAKdcNZqOr1BmtcAcaqN5cs=
Subject key identifier:   4C:83:E9:10:48:2F:2A:82:FF:45:4C:EE:A7:BE:4D:09:DB:A0:F4:BD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B101789664227C69CD5D6C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80edd5d2-fe42-3ba1-a700-4674847c470c.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     16625
IP address blocks:        23.197.12.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:78:96:64:22:7c:69:cd:5d:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=61baeb81-a76e-47ef-bd95-8c321deaf0c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:da:56:81:ae:b7:37:91:40:15:6e:58:6b:
                    e6:67:09:5b:bd:1b:e8:f5:3d:95:77:7b:92:32:c3:
                    0e:57:f8:bc:47:31:88:eb:6d:ae:00:e8:92:1d:14:
                    87:34:e9:0a:3e:14:3d:d0:4f:c4:bf:45:57:59:ce:
                    8c:13:86:b1:6a:e4:68:ff:0c:e3:dc:39:f0:fe:57:
                    5d:de:e5:4e:67:f9:00:97:5d:0d:21:61:fc:f5:ef:
                    90:12:57:61:e1:b1:ff:ad:c3:fd:c7:cf:7b:71:d3:
                    8c:01:6b:06:69:ee:d5:c6:bd:bf:fd:09:07:17:78:
                    d6:9b:1e:19:75:13:dc:79:4f:dd:fd:20:5f:55:8a:
                    22:a3:ec:d2:9c:77:05:2a:c5:8d:fb:c8:87:d8:b7:
                    fa:10:01:93:4e:35:59:13:04:84:c5:15:54:7b:98:
                    d6:4f:46:18:f9:24:3f:9c:e8:21:9f:bd:1a:c8:ab:
                    81:03:57:fe:ed:32:ec:68:67:ae:05:69:88:66:c7:
                    89:73:49:8c:d8:b9:38:c4:ef:4f:58:c4:70:e1:ec:
                    37:7b:62:59:63:87:67:65:bd:18:ee:47:37:a5:6a:
                    c1:2d:a0:ec:a0:07:8a:c4:bb:79:24:3f:8f:c4:9c:
                    a9:d7:b0:ed:b0:5d:a2:0c:56:1d:60:6c:39:15:10:
                    21:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:83:E9:10:48:2F:2A:82:FF:45:4C:EE:A7:BE:4D:09:DB:A0:F4:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80edd5d2-fe42-3ba1-a700-4674847c470c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.197.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:98:c7:67:a7:26:fa:2f:a1:85:47:c8:3f:c6:6d:65:66:bd:
         ba:1e:99:8b:2e:da:6b:0a:b8:85:b5:bd:09:0a:2c:f9:52:20:
         05:e8:70:32:79:15:93:f0:b6:88:d3:4b:7b:b9:0c:ca:f6:ae:
         41:67:5b:0a:f8:6d:10:b5:6a:24:08:da:21:a2:7a:b7:0d:fd:
         3d:65:7b:c3:5d:f5:df:f7:da:e1:bc:bc:0d:cd:1c:cb:1a:6a:
         cd:b1:66:79:3b:fe:21:b5:5c:cc:39:67:22:ae:b3:db:92:b3:
         7f:ca:1f:58:c7:92:66:18:05:1e:da:0c:21:f7:40:ed:83:2d:
         85:5b:65:ea:58:d3:a7:a4:af:c7:16:ac:bd:28:08:2b:35:5e:
         ed:e6:9a:b4:f6:32:c8:3b:3a:34:fe:3b:ce:1d:16:34:a4:2e:
         79:eb:c0:44:69:99:c6:37:64:99:57:1a:92:0a:90:2f:94:b1:
         48:4b:1e:d5:3a:b8:48:75:67:31:f0:a5:b3:d4:24:d0:bc:a9:
         eb:47:7f:3f:52:c6:48:43:71:36:61:39:b8:2f:5e:47:c7:ba:
         27:5a:a0:09:ff:41:3e:41:27:a8:6b:3e:92:f3:03:c5:69:24:
         39:a9:f3:b1:25:b0:68:ad:f7:c1:81:a1:1c:2b:a6:df:8a:c8:
         b1:57:c6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:06:36 2024 by rpki-client on console-fra.rpki-client.org