Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88cf90df-c166-369d-b148-1a3ec55f00c8.roa
File:                     88cf90df-c166-369d-b148-1a3ec55f00c8.roa (raw, json)
Hash identifier:          De06WU9XLJz4O0303Raj2I6kum6Vz6Da7Bu7KTvH7EQ=
Subject key identifier:   19:25:78:3D:00:B8:1E:A6:D4:49:90:64:B2:B8:F1:68:EA:C0:B3:BB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847ED24D39A48CB4C6EB790AD80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88cf90df-c166-369d-b148-1a3ec55f00c8.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     20940
IP address blocks:        23.220.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:d3:9a:48:cb:4c:6e:b7:90:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=bd840a79-2e12-4ed2-9c5a-208ae6a70c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:71:8c:ce:8e:23:d7:f8:92:a0:95:9a:fa:26:
                    24:19:53:de:1e:87:c0:b9:16:8d:28:00:99:ed:84:
                    1b:db:6f:52:f4:10:4d:9e:88:c3:c8:6e:e4:8a:3b:
                    a6:ca:de:7b:f4:b8:24:90:69:5d:58:68:93:31:97:
                    e8:a7:63:de:9e:6b:9a:dd:4b:df:35:14:50:a7:75:
                    c1:78:5c:31:17:5f:5d:a4:7b:b2:f2:7d:fe:a1:76:
                    eb:b5:87:2f:8f:5e:cb:8e:15:fc:e8:e9:38:09:5b:
                    70:a7:8e:b5:1a:c0:91:81:20:e8:ac:cd:11:30:ce:
                    b5:39:0d:d4:df:0d:9b:e3:fb:61:dc:1d:2c:24:77:
                    d1:cd:6e:5c:fb:25:9e:8e:df:8b:47:7b:50:f1:7c:
                    bc:e3:77:78:13:a4:83:65:3d:91:fd:c9:b0:e9:d5:
                    49:64:2d:3c:f3:6d:da:4b:71:0a:85:78:c7:27:03:
                    c1:40:f0:44:d5:38:c6:b1:31:9e:b9:f7:44:b9:d3:
                    79:33:4c:15:43:d9:d4:fd:3e:02:42:a7:28:9f:fa:
                    61:a5:65:ae:d3:e5:04:88:7f:f0:13:9a:0e:ae:ab:
                    2c:98:da:b5:2c:65:f0:2b:9c:ee:0a:cd:46:70:34:
                    d2:72:15:59:27:2c:f8:b9:d1:0f:ea:04:0e:fb:a8:
                    6e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:25:78:3D:00:B8:1E:A6:D4:49:90:64:B2:B8:F1:68:EA:C0:B3:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88cf90df-c166-369d-b148-1a3ec55f00c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.220.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:52:0d:2f:7c:4a:39:cd:76:1d:7f:0c:5c:ab:19:05:43:6a:
         1c:7a:9c:28:7c:33:ef:ae:a8:32:f3:16:33:00:08:54:8d:5a:
         fc:80:1e:2a:1b:6c:c0:19:22:0e:66:e8:e3:c0:e6:a7:8c:3f:
         6a:4f:62:3c:40:48:f9:c9:84:82:b4:81:d5:a8:1b:dd:c4:c2:
         f8:df:3b:9c:ae:a7:85:d4:44:db:1d:eb:81:02:83:cd:e0:ad:
         b7:45:ad:69:89:e8:a7:df:e4:01:9c:d9:c6:30:1e:e8:22:a2:
         97:9d:b7:03:f3:4a:aa:b1:78:d1:68:32:b6:7c:f1:4b:0c:36:
         e4:07:55:94:48:7d:9e:aa:93:4f:9a:df:60:8f:6e:e1:b2:f9:
         fc:57:ac:ae:c4:9d:03:07:c6:a7:89:fb:d5:6d:10:e5:7e:a7:
         4d:d3:88:08:7f:2c:49:34:2c:d6:0b:92:f9:b0:87:86:d3:bd:
         97:8d:79:76:29:21:59:67:aa:b0:45:77:e0:1e:7c:24:60:66:
         bf:aa:0b:d4:35:d4:bb:bf:86:04:8f:a0:17:49:9e:ae:5e:8d:
         be:25:9d:92:46:1b:38:90:a9:b5:f7:31:b8:2b:8e:57:5b:fe:
         d2:db:96:c9:1c:b1:e3:f3:60:19:93:66:25:9d:0b:c3:eb:85:
         84:ff:1f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:54 2024 by rpki-client on console-ams.rpki-client.org