Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90ce1e06-c2e5-3dd5-a581-271ae977c837.roa
File:                     90ce1e06-c2e5-3dd5-a581-271ae977c837.roa (raw, json)
Hash identifier:          wxvNjENJfXDdMNXa8Bb+A259GppEyB/rnmTFTx07nMQ=
Subject key identifier:   CC:AE:23:17:9F:58:D2:D6:A8:69:62:59:2E:CC:30:08:71:99:3F:CE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858479D76EE7B0FFB1F901394C540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90ce1e06-c2e5-3dd5-a581-271ae977c837.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.44.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:ee:7b:0f:fb:1f:90:13:94:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=0fe0dad4-bc21-44ca-a345-36b2cc8bbd01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:ea:53:48:f5:a9:1d:3b:cd:a1:51:6e:08:
                    ea:8c:84:04:f1:e2:52:29:f5:f7:38:fa:fd:18:70:
                    62:f2:ff:25:b4:75:aa:ed:41:d2:2f:2d:9b:9b:6f:
                    17:e1:f2:04:2e:84:33:68:81:9a:ce:f1:cc:c9:50:
                    df:66:68:7e:92:a3:71:58:9d:ea:3d:3a:11:a1:5e:
                    b2:60:95:c7:d0:5d:52:41:2e:2a:bf:91:92:8c:85:
                    95:53:b9:47:1b:c9:af:e4:45:ca:66:15:92:a9:a5:
                    99:bb:7a:cf:fb:f1:eb:4c:d1:70:b3:aa:98:c8:5f:
                    7a:ae:e3:74:14:55:bd:a5:6d:a3:cb:f2:62:64:99:
                    cd:27:64:48:5c:38:c2:86:e1:57:e8:fb:0f:c0:90:
                    2f:9e:4b:e0:60:7a:a6:21:c4:15:58:a3:75:e0:42:
                    f4:8a:f9:12:cb:17:ce:80:8d:e3:ed:d4:72:12:77:
                    52:b2:49:82:e2:5b:dd:4d:6d:da:8a:31:55:90:6e:
                    14:a0:7d:d7:1d:c1:c0:cd:b3:08:38:91:9a:3b:42:
                    59:a2:0b:55:b9:1f:f8:82:92:85:7a:bf:b6:e2:bc:
                    d3:e8:7d:35:15:fc:76:06:fd:0b:e1:8c:88:ed:bf:
                    48:31:b6:03:d8:b7:ca:ef:28:a3:d9:92:c7:0e:64:
                    d4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AE:23:17:9F:58:D2:D6:A8:69:62:59:2E:CC:30:08:71:99:3F:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90ce1e06-c2e5-3dd5-a581-271ae977c837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f8:1a:e1:fd:ae:9c:c3:35:a3:f2:07:df:a4:7e:34:61:d8:
         2c:a5:de:cd:a0:0f:ad:1d:c6:37:cf:74:e4:76:1d:96:59:90:
         03:2b:f4:cc:47:dc:2c:ee:95:96:0c:e6:fc:9f:45:54:42:3b:
         78:48:c1:dc:62:21:de:c2:65:a4:dc:4a:4e:0e:a2:4b:94:a2:
         26:b7:c0:3a:fa:7a:0f:13:1b:ae:57:e1:ee:97:fe:31:ca:ff:
         03:6c:b5:7b:2a:a5:c4:2f:5a:01:cc:ee:68:e8:8a:aa:d4:26:
         07:96:5e:a6:37:ef:1d:27:39:1a:b8:2e:61:a6:2a:33:1b:f8:
         ae:e3:ff:ac:7b:6f:dc:81:7e:3a:e4:ed:c7:59:3b:ac:9f:68:
         21:b0:ab:3a:54:bd:78:09:62:d0:c5:c5:ee:f1:21:7b:17:8b:
         dd:aa:a9:7b:93:18:43:1e:4a:78:b6:e9:29:26:be:2a:bd:ce:
         85:d1:da:37:f3:7a:47:a7:28:0f:87:ed:cd:28:96:04:f9:b9:
         87:10:62:f1:92:9b:4f:c8:58:a5:c5:dd:6a:ed:c2:5a:1a:2e:
         ed:8d:f2:5f:69:a6:a4:c7:26:17:66:02:e6:5e:66:79:17:8b:
         b7:84:bf:3e:db:f9:d5:b5:27:12:bc:07:07:02:ee:1b:6e:dd:
         d7:2a:c0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:01 2024 by rpki-client on console-ams.rpki-client.org