Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95e100e7-6b73-3de7-a533-e1abd3e7af77.roa
File:                     95e100e7-6b73-3de7-a533-e1abd3e7af77.roa (raw, json)
Hash identifier:          wMVmzZ1LQYotMBW7KoIgUVEe41uDgnw3WQ58j6TVnio=
Subject key identifier:   07:0C:44:63:59:43:28:73:F5:6D:79:DB:C5:67:E0:F2:CC:89:25:94
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847600BAAFAA1FD207ADF26EE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95e100e7-6b73-3de7-a533-e1abd3e7af77.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     16625
IP address blocks:        23.78.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:aa:fa:a1:fd:20:7a:df:26:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=ff245269-4c9f-4663-a6ea-b95e66cfddf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bd:76:52:27:e2:ce:0d:b3:1b:5a:dd:14:e1:
                    23:92:90:bb:20:9d:e9:62:f7:41:df:87:c1:b7:08:
                    cb:e5:6d:92:56:42:19:35:37:66:f9:80:24:26:60:
                    f7:51:03:ad:23:80:3d:a9:01:16:12:f2:46:06:41:
                    05:68:bb:eb:98:48:9c:6a:aa:0b:44:b7:13:0c:34:
                    51:19:b5:16:a8:62:58:1e:70:ad:82:7e:ee:ce:2b:
                    36:7b:07:6c:25:08:28:13:38:ba:3d:85:37:02:c8:
                    a3:25:21:7f:b8:cf:0f:6f:e4:1f:6c:b2:ff:50:83:
                    ed:74:e7:a3:cb:a0:1b:1d:1c:93:40:91:9d:cb:86:
                    75:0b:f8:40:14:e8:fe:49:df:76:5e:80:e3:10:c0:
                    ee:26:e3:b8:42:ae:ff:c6:b7:0b:a1:3c:51:da:09:
                    3f:97:51:ed:fe:5f:02:25:c9:f2:2c:7d:4d:ea:c4:
                    77:9c:50:e9:32:51:22:ee:4a:29:cb:cd:b3:db:5f:
                    f7:74:63:9a:d2:bb:3b:0f:6c:aa:58:5f:63:85:57:
                    db:77:83:89:b1:00:27:6f:bd:ac:25:ba:d8:58:79:
                    ac:ae:87:ad:21:c1:a4:b3:b3:6c:56:89:a4:c0:81:
                    e9:b6:f0:0e:3d:fd:bd:ed:74:73:3c:d5:78:b0:00:
                    f2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0C:44:63:59:43:28:73:F5:6D:79:DB:C5:67:E0:F2:CC:89:25:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95e100e7-6b73-3de7-a533-e1abd3e7af77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.78.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:74:5c:e2:de:d1:12:75:72:22:64:92:e5:ed:d8:64:6e:50:
         10:f9:fe:10:3f:f3:2c:cf:fa:3d:23:83:56:c1:dc:5f:58:d1:
         3b:3b:a3:4b:2e:73:d7:98:88:43:15:ba:6b:30:45:d9:7c:a8:
         25:fe:63:b1:91:a5:a9:88:da:fa:1c:fd:88:8f:82:c8:90:97:
         16:af:fb:9f:49:fb:68:4e:63:ce:79:a4:da:eb:64:29:23:8c:
         7f:01:9f:6e:31:ab:83:1b:8d:14:ca:77:b3:6a:91:16:77:90:
         a6:e0:66:a1:4f:b5:7f:29:d1:fb:e1:06:b4:77:80:6f:13:10:
         67:04:be:f0:b4:28:b7:38:1d:d1:5f:1f:a7:e9:3f:19:28:2c:
         04:36:ef:06:ea:09:17:5a:26:cf:3d:ed:5b:46:de:4a:05:94:
         22:ba:d6:2d:b6:06:b3:4a:c0:9e:69:bf:02:92:ed:48:e3:ea:
         22:b1:2f:5f:60:1e:0d:e7:5b:b0:37:a3:51:82:00:cd:a0:90:
         be:58:3d:5a:0b:fe:5a:e6:b7:5b:58:14:e4:6d:14:8d:17:3c:
         9c:eb:91:66:3d:4e:55:8d:dc:f6:76:58:22:1c:0f:b2:f5:27:
         0b:a5:ad:2e:72:cc:86:b2:64:3c:d1:b0:07:d6:aa:52:84:0e:
         c8:35:fb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:21:25 2024 by rpki-client on console-fra.rpki-client.org