Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87016a5b-158e-3c19-9761-0a3885cf3a10.roa
File:                     87016a5b-158e-3c19-9761-0a3885cf3a10.roa (raw, json)
Hash identifier:          TqszSsbAq6WXZQ2SeuhNl7B8RGKRb6OH/GtInylIkZU=
Subject key identifier:   02:2B:BC:2E:73:70:73:99:F8:1A:DC:AB:80:57:81:38:5F:C9:B6:6E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584754E0F1D7EE108CA26F0189C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87016a5b-158e-3c19-9761-0a3885cf3a10.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     20940
IP address blocks:        23.64.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:f1:d7:ee:10:8c:a2:6f:01:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=c0933de3-46ed-45f6-8212-c2e6fdfe321c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:52:25:f2:f4:ea:eb:f9:05:a4:e7:a0:e5:3e:
                    8b:d5:b5:d6:ea:40:a7:d6:e8:57:f0:f0:34:6c:ad:
                    a7:21:dc:1b:ad:56:fe:90:63:e8:2f:47:9f:79:06:
                    29:91:c8:d2:bd:54:2e:83:b4:f4:6a:02:cb:2b:77:
                    6c:e9:65:f0:fd:00:53:f2:13:a5:8f:25:84:8c:0c:
                    d4:40:96:0c:bb:65:ac:78:41:26:2b:6f:41:fd:fc:
                    22:08:64:eb:de:98:56:da:c4:f8:86:bb:41:f8:ec:
                    fe:4b:3e:3b:6c:a7:3b:d5:ca:9c:d9:8f:64:6f:25:
                    91:36:39:97:f6:01:32:fa:c6:51:c6:d2:4e:95:64:
                    2c:78:14:d7:5e:05:7f:fb:f8:83:b4:5f:43:d3:78:
                    bc:17:9a:6b:1b:26:47:e7:c3:ff:61:25:2d:58:35:
                    49:da:57:e7:e2:f1:1a:10:04:30:fa:b8:ae:b9:e2:
                    a9:4d:44:dc:c5:da:52:04:1c:a6:62:67:22:00:43:
                    e6:54:33:15:2b:ff:25:e4:33:bd:dc:f3:43:73:f2:
                    1c:09:e5:1b:e8:21:00:78:df:f3:61:2b:1f:e6:f8:
                    4d:f1:6d:0b:ed:51:12:d5:d3:3e:88:93:0b:e7:9f:
                    78:ae:fa:1a:8e:f9:18:e6:09:de:25:c8:e4:35:4b:
                    a0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2B:BC:2E:73:70:73:99:F8:1A:DC:AB:80:57:81:38:5F:C9:B6:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87016a5b-158e-3c19-9761-0a3885cf3a10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.64.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:59:e6:fd:78:4c:52:d3:5a:27:0c:c3:3c:bb:f9:b7:5d:f0:
         50:4e:5f:e2:2b:09:86:29:fa:b0:15:08:79:a7:0e:a7:a0:a4:
         c2:ac:94:e5:70:0b:9d:c6:f1:49:38:b4:d7:d4:18:ca:e4:b7:
         24:44:56:ad:fc:17:4b:f8:70:8c:39:8e:c6:ae:06:d4:d3:9a:
         7b:50:6c:e1:d2:99:58:67:89:e6:f6:e5:e5:2f:29:56:e4:41:
         97:6a:b4:a8:dc:ba:51:0a:a5:5d:51:e7:6d:69:69:71:cc:c7:
         53:da:0b:9a:cd:8b:a1:76:33:d6:39:63:c0:b9:bf:e1:73:74:
         64:6f:5e:7d:f7:cf:07:68:c3:76:d1:7a:49:b9:9b:1f:e5:a8:
         6d:20:60:e3:ca:4d:4d:83:19:e0:34:7f:34:22:89:ac:24:80:
         a5:0d:e7:1c:67:93:b1:b9:f5:31:a5:ec:38:f4:09:61:9f:23:
         11:9e:bb:39:8c:6a:40:6a:1c:bc:d1:48:ec:39:07:cd:22:92:
         8b:53:8c:52:85:89:78:2e:04:ef:4c:d0:6d:4c:31:7f:d8:ad:
         74:98:ec:1a:79:51:11:58:cc:28:a7:94:5e:6d:d4:94:6f:08:
         02:31:da:86:9d:0a:a1:03:99:f3:b1:30:96:a3:4b:10:bd:a2:
         a3:da:e1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:54 2024 by rpki-client on console-ams.rpki-client.org