Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8a8cda-8690-35a3-9929-fd524c6e5cf9.roa
File:                     8b8a8cda-8690-35a3-9929-fd524c6e5cf9.roa (raw, json)
Hash identifier:          AMVt4crHxadiyjop7GiJ4bg9aHBc0F8/bFtTsrOQCDI=
Subject key identifier:   A9:21:5B:48:9C:F6:42:1C:C3:80:3C:B3:FE:3D:EB:B1:F6:0B:10:43
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C8D9FE0DC78C33BAA4508740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8a8cda-8690-35a3-9929-fd524c6e5cf9.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     20940
IP address blocks:        23.201.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:fe:0d:c7:8c:33:ba:a4:50:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=c3b3c168-98b1-4b51-9990-64ee8150a7f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d0:75:b1:38:a7:71:14:79:ee:91:4a:e4:bd:
                    ae:bd:53:01:07:39:16:dd:fd:e3:86:d9:2f:63:9e:
                    ce:a0:d7:0f:8c:09:78:e5:90:0d:8b:e0:17:bc:06:
                    6c:d6:50:d6:59:8f:fe:d5:79:e1:6a:3d:e7:34:0c:
                    38:c9:55:e1:63:b9:97:6f:7e:19:8a:e0:f7:40:b2:
                    47:eb:b9:7c:dd:0c:9c:22:b0:8b:0a:67:8b:8f:45:
                    28:a6:0c:3f:c1:f9:4e:87:d5:84:df:a7:02:89:08:
                    e7:a6:55:fe:fb:75:be:07:ef:63:d7:4c:01:91:d6:
                    db:f7:31:38:18:bc:ae:44:53:e4:11:cd:e4:36:4d:
                    90:85:58:c8:cc:73:9a:5b:68:c1:dd:c2:8d:36:ff:
                    fd:ae:f3:b7:11:5a:52:33:56:1c:49:c8:31:d6:e7:
                    26:b5:fe:82:9c:01:39:0e:99:42:ef:84:9f:2c:5b:
                    f8:a5:5a:b8:bf:fb:b4:05:b7:50:e8:8a:89:2e:71:
                    74:6f:53:a8:42:f6:5d:77:dc:ce:3f:98:f4:f6:f8:
                    c6:13:0e:99:97:3e:77:5d:7d:c0:17:22:05:92:ad:
                    8c:71:43:ee:3a:4e:25:4b:cd:2f:ce:7f:f9:9f:bc:
                    5c:f1:96:18:83:a2:0d:de:4b:9a:8c:a2:be:d9:30:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:21:5B:48:9C:F6:42:1C:C3:80:3C:B3:FE:3D:EB:B1:F6:0B:10:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8a8cda-8690-35a3-9929-fd524c6e5cf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.201.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:44:b8:ff:50:ce:4a:94:d5:76:20:85:58:75:46:86:1a:9f:
         00:fe:5f:ec:94:f3:00:33:b9:0e:99:7a:42:8d:e5:1e:fa:60:
         11:73:86:fa:0a:bc:41:4d:2f:ee:5a:31:0e:01:00:a4:38:62:
         d1:cf:9e:d7:9e:5e:e7:28:1e:7a:af:d8:0f:7c:5c:4a:63:0d:
         59:eb:e5:13:04:dd:f2:e4:c2:17:78:9a:64:d2:2f:f2:49:82:
         9b:5f:0a:c6:92:d8:91:93:ca:6b:8f:95:1e:32:7e:70:9e:32:
         9d:cb:0d:80:0a:3c:5f:60:fa:5e:2b:8a:de:58:82:73:ba:f2:
         9a:62:66:77:8b:52:84:55:d6:dc:f5:b6:a7:b3:fa:20:ec:08:
         31:17:d3:6a:ef:a8:cc:b0:b5:d6:8e:8f:56:b6:4b:ac:c6:17:
         81:bf:f2:a4:93:5f:d7:f3:fd:17:12:79:e3:c6:09:a6:03:9c:
         be:3f:c9:1a:dd:4f:64:43:6c:4c:06:80:4d:c3:49:2f:8b:56:
         30:a7:f8:33:13:3a:6e:a5:e1:a8:9a:23:85:6d:80:9e:15:b0:
         93:63:47:63:74:34:1c:b0:b8:3f:32:f0:bb:6a:11:36:da:c6:
         74:2d:01:42:30:37:b8:15:c3:93:9d:f3:f0:cc:1a:24:21:31:
         c0:af:7c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:56 2024 by rpki-client on console-ams.rpki-client.org