Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c673f7f-df59-3bfc-8b91-8b34129b2580.roa
File:                     8c673f7f-df59-3bfc-8b91-8b34129b2580.roa (raw, json)
Hash identifier:          LQc6zQvnJvceXQ5fzpRiVueZSyVAUePjYoc9cUWWbnA=
Subject key identifier:   C9:BD:65:B7:34:F2:C0:EC:86:92:DF:4A:85:B1:B3:A0:AD:62:CB:46
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847A5D6BA5F368F81BA2D48C100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c673f7f-df59-3bfc-8b91-8b34129b2580.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     20940
IP address blocks:        23.53.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:ba:5f:36:8f:81:ba:2d:48:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=1420552c-fbfa-4a5f-b13d-bdf969f05365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:e2:0f:2f:4c:69:95:59:cd:63:dd:8f:a8:
                    7b:05:07:e0:bd:17:bc:38:e0:50:59:f5:ff:d3:63:
                    25:17:64:81:b6:fc:b6:2f:ef:b0:69:2e:ba:e8:d7:
                    83:58:12:30:59:f8:40:22:10:d0:a3:79:0e:7f:a7:
                    05:ce:ea:f3:a0:d7:5f:82:8e:f7:c1:7e:0e:2d:c4:
                    47:89:84:5e:ee:de:33:46:af:4b:1c:e8:70:ce:68:
                    5b:68:8c:79:75:21:b2:33:99:11:6f:ad:b2:1b:d3:
                    33:52:5c:ee:cc:80:d9:6b:e4:b1:2e:84:d8:d4:9f:
                    03:5c:34:67:22:3c:4a:c5:c6:2f:22:44:79:42:13:
                    97:7d:25:8b:bd:d2:37:98:19:1e:12:0b:08:36:80:
                    af:ae:0b:17:81:42:95:f9:db:da:8f:83:9c:62:0f:
                    35:32:20:96:6c:df:95:5c:80:ff:84:c6:8d:eb:93:
                    32:62:6b:5d:e3:30:d2:b8:cb:f1:ac:02:3e:c3:86:
                    58:68:dd:35:49:ff:89:06:2e:a3:6f:71:b6:fd:1e:
                    03:70:e5:9e:dc:b5:59:f5:99:93:1f:71:9e:ba:9e:
                    a7:cd:9b:a0:f5:fb:73:00:9a:09:f4:fc:2b:a8:b7:
                    c2:7e:c1:50:f2:54:19:3e:de:e3:37:ac:09:b9:e4:
                    d0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BD:65:B7:34:F2:C0:EC:86:92:DF:4A:85:B1:B3:A0:AD:62:CB:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c673f7f-df59-3bfc-8b91-8b34129b2580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.53.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:25:c9:76:b4:68:a2:4a:c4:b1:63:c7:10:e8:d7:1b:39:81:
         37:93:ee:c7:00:a7:2a:06:ac:17:b5:ee:7a:94:15:89:db:29:
         f0:9d:64:74:23:1e:bb:db:98:85:32:e0:d4:02:82:e5:de:8c:
         50:0a:3b:58:ed:45:58:29:21:e4:ca:83:7a:64:aa:6b:bf:3e:
         b9:01:64:e7:db:61:f6:ce:e6:bc:24:66:f9:0b:8c:0e:b4:e6:
         08:c7:04:e6:52:e2:92:37:0e:d8:68:ff:fe:61:88:57:19:81:
         ae:0b:1c:df:ba:11:7e:4c:ad:e9:8c:ce:b2:59:b0:2c:10:38:
         65:f6:10:d8:1d:74:6c:e8:db:4c:03:69:07:84:77:3a:8e:b1:
         d7:ed:df:5e:2b:25:d3:14:08:11:7a:04:b5:e2:88:73:46:66:
         2f:d2:78:2f:b0:c5:eb:5a:d6:21:fd:00:f7:75:80:2f:9d:96:
         52:d5:18:f9:5e:d6:43:e0:de:fc:f3:94:da:ef:c9:03:ff:91:
         ea:d6:76:8e:4d:70:ad:52:31:24:ff:5a:c5:12:c5:43:23:f9:
         43:d0:fc:d7:1f:d3:18:bf:4b:3a:5b:14:81:9c:a8:5d:8c:0a:
         00:da:58:e7:15:0d:0d:2e:fc:d0:68:96:a5:9e:b7:5f:93:e4:
         16:ee:83:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:57 2024 by rpki-client on console-ams.rpki-client.org