Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93e7a9b1-9927-337f-85ea-1c03ec0773c4.roa
File:                     93e7a9b1-9927-337f-85ea-1c03ec0773c4.roa (raw, json)
Hash identifier:          yTrj/KMBGQ3I0+dTnaHGR03BzoUPpB+D6lEyleRBd0M=
Subject key identifier:   C7:D7:26:5B:A9:53:14:99:0F:3A:F2:CB:D7:38:EF:EA:BB:35:2F:7B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847A5D6B873862743E202BD8540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93e7a9b1-9927-337f-85ea-1c03ec0773c4.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     20940
IP address blocks:        23.52.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:b8:73:86:27:43:e2:02:bd:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=6d53d376-86bd-49aa-b4a7-6365d571b222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fd:fe:fa:80:1b:b7:2e:da:55:0a:90:c5:d7:
                    cd:56:7a:eb:b7:19:92:d9:f9:30:72:79:e7:c4:a2:
                    5a:33:82:b7:74:59:c5:93:3d:ae:f0:3e:42:2a:69:
                    33:e8:87:43:8f:ea:5c:2b:ae:7b:32:9c:86:b1:53:
                    64:eb:bb:a3:73:9c:4a:8c:8b:c7:8f:d4:9c:e9:be:
                    e8:10:17:66:61:cb:1f:3e:ee:93:cb:09:b3:58:b8:
                    a2:ab:7b:e4:35:9a:3d:f2:85:5e:09:00:4b:9b:10:
                    5f:e2:ea:3e:87:c3:76:91:f6:26:69:6f:ae:98:54:
                    20:de:f8:a0:8b:cd:99:f5:14:9d:c9:89:39:00:c0:
                    f9:d1:d8:47:35:b3:99:b8:67:86:d2:c8:87:1e:1a:
                    5a:6b:41:a3:44:0e:a7:30:2b:46:fe:41:50:f5:69:
                    58:e1:ac:89:e9:c1:be:61:ef:73:c3:23:d7:c4:4c:
                    5f:15:a6:b9:28:b2:e2:82:c4:a1:62:59:cf:33:d5:
                    25:9e:20:82:5e:35:0a:67:27:8a:18:a9:54:6f:2c:
                    7b:fa:cb:74:53:5b:d2:f9:38:a4:b7:b1:0d:a1:07:
                    63:c5:23:9e:d0:7b:aa:7c:96:77:0d:ff:76:7e:aa:
                    c6:9d:d3:11:24:fc:6e:eb:4d:89:10:57:e8:87:57:
                    80:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D7:26:5B:A9:53:14:99:0F:3A:F2:CB:D7:38:EF:EA:BB:35:2F:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93e7a9b1-9927-337f-85ea-1c03ec0773c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ab:ed:a0:01:b1:1e:d0:b4:97:11:b2:fd:e5:1d:bb:40:25:
         fe:d0:b7:b8:cf:22:fc:83:30:76:96:5a:0c:d8:d7:09:24:1d:
         60:c0:81:e4:d0:b4:54:74:99:f8:47:3b:6e:45:01:d0:9a:0a:
         a8:0a:26:7d:82:74:55:84:08:1f:55:0f:c9:64:3f:f8:6f:03:
         1f:01:d9:9e:8b:e2:20:41:41:2a:a2:b1:45:9d:c3:5d:17:1e:
         c3:c3:a2:41:df:c0:2d:3a:1a:b4:5f:6b:dd:fa:87:f9:27:a8:
         e8:8b:48:46:88:37:63:6c:57:e0:c2:f2:c9:e5:59:e6:67:c9:
         66:46:c6:9f:fc:e0:fd:0d:f6:32:be:b8:e9:c2:2d:f3:1c:9e:
         36:ae:61:8b:0f:68:89:b2:d2:c5:bf:bf:56:40:05:32:35:ad:
         3f:ce:cc:ce:6f:10:ed:2a:d0:bf:a9:06:f0:e8:8c:bb:db:4c:
         04:d3:81:4b:6c:8f:e8:f6:a2:88:34:63:ae:bb:a6:59:41:18:
         6a:20:f0:1f:f9:dc:74:a0:49:07:49:62:07:3b:97:bf:be:a8:
         71:87:d2:29:bb:49:68:1e:3b:6e:b5:6e:72:b4:2e:00:0c:c7:
         4f:ca:a3:62:3e:a4:9a:c9:bb:d3:30:54:f6:46:72:75:f9:9c:
         ae:ea:1e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:16 2024 by rpki-client on console-fra.rpki-client.org