Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ef5da3d-d143-344b-84e4-dbb013ca14da.roa
File:                     8ef5da3d-d143-344b-84e4-dbb013ca14da.roa (raw, json)
Hash identifier:          xxTqox35kdoFXkfMa/R0SuBEihsFnxt64JTR8Wg1CC8=
Subject key identifier:   91:39:FE:87:60:7C:23:02:DC:25:3D:C8:76:FD:09:B1:C3:EB:7F:AF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847DAFF64BB0D65E0561B0A2100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ef5da3d-d143-344b-84e4-dbb013ca14da.roa
Signing time:             Tue 12 Nov 2024 14:00:40 +0000
ROA not before:           Tue 12 Nov 2024 14:00:40 +0000
ROA not after:            Mon 10 Feb 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        23.208.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:ff:64:bb:0d:65:e0:56:1b:0a:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 12 14:00:40 2024 GMT
            Not After : Feb 10 14:00:40 2025 GMT
        Subject: CN=336a3121-6618-42d9-a6a2-cd0f6be3c67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0f:78:52:24:ea:95:62:93:26:d2:2d:50:d6:
                    43:ef:34:ac:6a:7b:7f:f4:b7:30:89:d4:ce:f6:d4:
                    8a:fa:7d:24:98:eb:18:bb:54:dc:66:38:26:00:e1:
                    d1:06:a2:62:c6:64:80:5e:0c:26:bc:b5:e6:9a:58:
                    a8:93:3c:98:10:72:4d:55:16:ba:d6:8e:e6:75:ad:
                    a1:cb:f2:a0:a0:bd:0b:c7:ec:9c:93:41:be:bc:d0:
                    0e:69:7c:84:b4:95:95:f1:73:36:f3:2b:1e:4f:8f:
                    6f:1c:33:ff:6c:ba:9a:0a:99:55:7b:85:f6:79:1a:
                    70:26:9c:d9:3d:e0:6d:b4:fe:f2:8d:95:d6:c4:4f:
                    1f:d1:de:fe:19:92:2e:2e:4d:3d:9c:c2:f8:b5:52:
                    f8:2f:e8:6b:3d:26:6d:e8:e2:37:06:0e:19:8e:d4:
                    fe:23:29:b0:3c:8d:16:eb:ef:96:e6:34:4b:e8:9a:
                    75:75:dc:b8:2f:9a:ef:0d:09:ee:3a:f6:3d:ee:e9:
                    1f:54:a5:a0:a6:46:4c:44:d2:2e:7a:8a:3d:fb:a7:
                    be:b2:e2:bb:64:cf:72:9b:d2:4f:1e:05:97:d6:33:
                    ea:14:bd:b7:3a:f3:ed:30:9b:d5:32:07:cc:fd:6e:
                    9b:4e:52:81:16:24:ad:2e:ae:13:4d:28:af:a5:d6:
                    56:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:39:FE:87:60:7C:23:02:DC:25:3D:C8:76:FD:09:B1:C3:EB:7F:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ef5da3d-d143-344b-84e4-dbb013ca14da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.208.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:cc:eb:13:8a:39:f4:d7:4a:d2:0c:f8:08:a3:35:74:b4:88:
         8d:2b:31:72:af:a9:8d:4c:f2:21:2b:b9:15:28:db:85:4b:b9:
         2c:a4:80:e0:7a:68:86:77:e0:52:10:2d:07:da:15:db:cd:1f:
         03:ec:a9:e5:83:d7:af:a0:9d:b3:5e:08:17:5b:d9:0c:62:a6:
         ae:2a:9e:a4:a5:16:fe:f5:ea:7d:58:b7:28:ef:15:d1:5e:18:
         d9:7a:3b:d9:bf:fc:4a:a7:58:b1:19:db:43:00:7b:51:c8:96:
         ec:0d:7e:06:f1:51:9f:aa:42:f5:97:51:e8:c5:f5:2e:75:04:
         df:24:0f:7a:b0:29:a8:d3:76:3b:34:5c:54:ef:1f:33:ef:6e:
         22:76:b4:7b:2b:c5:d6:9c:ea:eb:99:4a:84:bf:4e:68:a9:d8:
         3f:da:ee:02:ff:fa:28:ce:da:9f:77:bc:23:4d:c9:3c:d0:9d:
         8b:32:b8:aa:af:53:f1:bc:86:24:03:47:90:5d:e5:a0:a0:39:
         5c:b5:57:40:a0:bc:e3:7f:a0:a9:91:1c:b6:cd:a7:b0:e3:f6:
         c1:7e:b3:04:dd:aa:f5:cd:fd:57:8d:53:62:60:70:c4:95:b0:
         b6:0f:1b:23:ff:11:24:9b:04:07:58:7e:27:30:8e:fe:74:80:
         34:4a:f0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:14 2024 by rpki-client on console-fra.rpki-client.org