Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83fd0cfc-dbad-3c40-9f77-239e90b350b0.roa
File:                     83fd0cfc-dbad-3c40-9f77-239e90b350b0.roa (raw, json)
Hash identifier:          rm0H1P8HLyfuiqfdAFx1vNQIvQYy2oze6gs3usHA2HY=
Subject key identifier:   7A:6D:B4:A6:91:37:40:0A:3E:26:76:C9:B6:F7:8B:41:10:3A:4B:F8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847DC64BBD93A8505E2EA7E3A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83fd0cfc-dbad-3c40-9f77-239e90b350b0.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     20940
IP address blocks:        23.213.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:bb:d9:3a:85:05:e2:ea:7e:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=5b8246f1-0cb0-46e5-8d2e-6482589bb747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5b:73:d7:c0:10:83:c1:03:0c:bb:85:54:17:
                    12:fa:b5:16:89:53:82:07:b5:35:9a:c6:4d:1c:38:
                    f1:fc:9e:04:b8:5c:37:72:c4:c9:41:4f:bf:b7:ef:
                    53:f8:cd:1b:30:5b:c7:92:1d:ce:cd:24:1f:6d:7f:
                    95:8a:7d:a0:e7:1f:fe:da:a3:40:2c:05:6b:80:c1:
                    df:69:8a:64:0d:5e:6b:6c:8a:65:1b:31:2f:e1:14:
                    5f:c3:c8:c7:63:e7:88:da:82:ad:bd:84:db:61:ea:
                    9a:24:cf:02:bb:80:b3:17:f6:8a:34:95:ec:4b:b9:
                    33:47:78:e3:7c:e5:39:46:16:a3:9e:fc:2c:d0:7f:
                    cb:1f:b4:8f:92:dc:72:37:83:7f:b1:0b:2a:63:67:
                    a8:59:b0:41:26:d6:eb:c7:26:7d:54:eb:e1:ef:3a:
                    46:4a:7d:92:f1:e3:c8:4a:c4:47:f8:52:c2:a1:f7:
                    10:ab:71:16:bc:c4:22:10:20:56:03:f4:8f:c2:f0:
                    d9:d6:3e:69:59:01:7e:f6:16:05:25:5c:05:3e:bd:
                    b3:b8:8d:77:c1:83:82:28:7c:75:62:ff:ad:f0:c8:
                    c0:c9:5a:50:3c:9c:9a:0e:3a:f8:6e:c9:95:c7:00:
                    e5:40:d5:2d:de:c1:74:55:08:5b:cb:dd:34:1d:ec:
                    f1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6D:B4:A6:91:37:40:0A:3E:26:76:C9:B6:F7:8B:41:10:3A:4B:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83fd0cfc-dbad-3c40-9f77-239e90b350b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.213.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:fa:c8:b8:cc:85:0c:9b:e5:97:28:22:ff:6c:17:91:37:8b:
         8b:48:82:3f:02:ba:52:b3:b6:b7:5a:b5:ae:1f:c6:a1:67:9a:
         d8:44:c9:b9:34:98:8f:25:d5:99:3e:77:de:8c:75:57:77:4c:
         3c:9f:61:b4:87:0a:a8:56:99:47:00:8c:08:17:62:32:d2:02:
         01:d6:6a:85:cf:4e:0a:dc:19:53:9a:ee:b5:57:0a:a4:dc:bc:
         f2:5f:b7:ec:f8:91:ca:a9:4b:a4:d8:ab:44:42:ce:2f:f4:bc:
         fe:b6:b0:f9:a3:37:56:84:78:81:5a:c1:e7:bd:c1:4f:1f:f7:
         0a:0b:5f:f9:bc:30:87:4b:18:2a:25:8f:37:73:6d:55:41:16:
         c0:2b:5f:a4:22:6c:4f:c3:fb:9b:7d:43:66:67:0e:1d:99:cb:
         56:32:08:1e:de:fd:ee:7a:fc:67:2c:93:af:7a:ad:f9:ed:6b:
         e6:95:62:5e:48:53:c7:31:7d:3c:d1:76:b9:5b:14:1f:39:f4:
         84:14:06:05:e7:3f:79:56:4a:4c:3e:9a:c7:d4:c6:6e:1c:41:
         75:5a:69:f4:e4:dc:cd:77:88:aa:2c:ba:a4:0f:6f:3a:7c:9f:
         ef:1a:84:44:2b:3e:31:66:1b:9d:53:4b:90:c3:6d:37:11:e8:
         67:59:31:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:08 2024 by rpki-client on console-fra.rpki-client.org