Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a66bd78-d1c5-348f-94b2-ea93907f0e2c.roa
File:                     8a66bd78-d1c5-348f-94b2-ea93907f0e2c.roa (raw, json)
Hash identifier:          /tzOD4bPSx6RSlCiVttA1oLlL1/kQyBYYr8vceZKhPM=
Subject key identifier:   01:21:2B:C9:7D:A6:90:13:22:B6:43:C9:6A:32:82:CF:F2:19:99:1A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847DC64BD48C0D8B2D3F3476B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a66bd78-d1c5-348f-94b2-ea93907f0e2c.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     14522
IP address blocks:        23.209.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:bd:48:c0:d8:b2:d3:f3:47:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=cd15fa6b-6caa-4f2b-ac24-156a0668460d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:66:b5:d4:98:37:24:89:45:d7:5b:8d:03:
                    47:3b:f7:95:32:17:ee:07:d9:69:56:f0:b6:2c:8a:
                    6b:64:31:cd:4b:fa:5f:cf:dd:ca:c5:90:81:d1:f7:
                    a4:95:2a:11:67:48:04:15:d1:63:94:ea:72:ef:c3:
                    13:61:c3:33:7a:e5:19:b8:f9:24:73:d6:06:dc:c1:
                    53:47:0e:a9:b0:ad:27:2f:50:8a:e0:4f:88:dd:37:
                    64:15:f2:5a:f4:d0:d7:38:cd:4c:28:1a:16:63:de:
                    80:db:bc:e0:55:37:2f:0d:b4:10:1b:3e:f8:bd:f6:
                    79:4f:7f:55:7a:bc:47:fe:d1:d7:af:c3:04:2a:8c:
                    2e:dc:f9:e2:25:cc:e2:41:23:af:ad:d2:f0:c5:0d:
                    74:e3:41:2b:bd:aa:4b:c4:ec:27:04:cf:a0:cc:3b:
                    fc:76:12:f8:82:1e:5a:8d:e9:63:ba:83:77:78:17:
                    83:c2:73:e9:1e:21:39:84:62:ea:d1:bb:33:42:f2:
                    f0:cf:0e:0e:02:99:47:e9:b8:1b:a8:3d:bf:76:08:
                    08:1c:9c:ad:ce:8c:e2:85:52:7d:d9:bc:73:5e:5e:
                    0c:49:ba:3e:03:f7:89:95:75:ce:de:25:99:96:84:
                    42:36:d3:37:7d:bf:2d:70:de:18:80:e4:9c:1d:b5:
                    fe:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:21:2B:C9:7D:A6:90:13:22:B6:43:C9:6A:32:82:CF:F2:19:99:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a66bd78-d1c5-348f-94b2-ea93907f0e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.209.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:41:bb:6d:c1:4d:a3:28:bd:24:16:b1:de:de:93:9e:ea:f6:
         1f:d0:0a:82:9e:32:32:6a:a7:8a:2c:d6:ad:92:66:d8:e0:ea:
         dd:bb:af:de:e8:d1:79:46:ec:15:6e:70:93:ad:78:ed:07:74:
         aa:73:fd:b4:3d:a1:67:1b:a2:e0:b4:50:b2:5f:ff:e8:48:67:
         11:35:a5:7f:9b:fa:61:63:8f:91:24:ef:69:f1:b7:31:0b:f2:
         f6:fb:7f:36:49:ff:ca:a9:bf:b8:75:45:84:04:55:ae:ca:a3:
         15:ba:62:88:71:68:f6:a7:95:df:39:50:99:91:6f:c6:fa:0a:
         1d:b7:7d:8b:fa:dc:31:cf:28:62:69:51:57:51:c9:c1:60:54:
         ee:0a:9d:7b:f0:f6:4e:d7:ae:70:b3:01:15:ea:5e:24:a4:31:
         96:17:42:b8:5c:de:96:3e:c8:2c:96:c9:d5:eb:ec:7e:86:26:
         87:f5:dc:0e:e0:04:4f:f6:14:e8:61:95:ea:bd:cc:85:6d:61:
         27:06:6e:31:c9:d0:7e:26:c0:89:d0:ae:22:11:ee:96:0c:c3:
         a8:39:d0:0d:fd:eb:b8:2f:78:2b:dd:c7:ae:25:06:5e:f9:71:
         ba:df:e7:7e:1f:f5:56:3b:fb:ee:60:7a:49:36:7b:f7:66:12:
         1d:94:4d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:55 2024 by rpki-client on console-ams.rpki-client.org