Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9663b940-b33c-39a4-9f51-96662727ded2.roa
File:                     9663b940-b33c-39a4-9f51-96662727ded2.roa (raw, json)
Hash identifier:          H725QHFNbVhDY0DNXJpACV1PUWOd1RVWSoUs1blfL7g=
Subject key identifier:   1F:8B:99:BB:DB:A9:2D:18:3F:D0:E6:0C:ED:E0:A9:3F:47:77:18:6E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847ED24CE65CB8BAAEFA52E3200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9663b940-b33c-39a4-9f51-96662727ded2.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     16625
IP address blocks:        23.222.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:ce:65:cb:8b:aa:ef:a5:2e:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=dba311b0-39a6-4967-94e7-56777507a772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8a:96:f7:d1:a1:6d:33:d9:2e:f6:d2:26:fd:
                    27:e8:b4:57:b4:d6:86:42:78:df:6d:c4:f1:f6:b5:
                    42:7b:5a:ee:15:d7:be:e9:06:dd:d7:de:51:e7:cf:
                    aa:4f:c8:fa:09:f1:d7:b0:95:b6:4d:7f:aa:ad:50:
                    f4:e8:29:5f:df:43:f7:fa:83:f3:f4:61:a0:f6:7d:
                    89:42:8d:27:86:32:c1:53:fb:17:1b:e6:bb:6e:38:
                    49:6e:77:7b:f1:7e:2d:a8:96:30:bb:cd:8d:cc:71:
                    0e:8c:10:d4:f6:5f:13:95:a5:cd:f4:be:b9:01:e6:
                    00:8c:b7:82:d5:41:7b:3e:3c:3a:d2:62:6d:5e:3b:
                    ec:ad:4a:bf:80:45:2b:50:d9:55:af:d8:6c:4d:b7:
                    15:4c:e8:5a:74:08:55:51:52:fe:6d:cc:be:bd:22:
                    9a:b8:c8:e1:b8:a9:c8:e6:2c:b3:26:9f:77:75:11:
                    f9:83:99:85:83:5f:52:71:6b:81:88:b7:74:fc:56:
                    c1:ad:40:55:90:6a:1d:79:86:f6:8c:ad:97:ad:ed:
                    33:32:33:45:41:aa:6e:b6:e5:4d:20:c2:c9:b8:3d:
                    1c:a8:63:3b:cf:b9:c3:90:c0:8d:c0:0a:68:60:0e:
                    d9:f9:cb:4a:81:dd:01:05:76:a2:39:34:1b:ea:5d:
                    f5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8B:99:BB:DB:A9:2D:18:3F:D0:E6:0C:ED:E0:A9:3F:47:77:18:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9663b940-b33c-39a4-9f51-96662727ded2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.222.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:11:57:c1:00:03:5f:d0:07:82:57:63:2f:7a:1f:73:e0:5a:
         34:78:9e:a6:09:c5:3a:6d:c1:35:f7:75:06:fc:91:ef:0f:06:
         03:27:c9:fa:5d:64:ba:06:69:4a:e2:0e:6e:08:47:d3:5b:99:
         12:8b:5c:be:75:12:75:2f:73:3f:da:27:d4:7b:0f:37:71:c0:
         d7:e6:89:81:45:3f:e2:36:91:2f:a2:a7:2c:46:a1:58:75:8b:
         10:32:86:92:b5:4d:87:6f:6d:37:83:a2:86:e9:1c:1f:56:50:
         ad:b9:20:82:55:eb:30:fe:bd:22:14:c3:04:87:ac:cc:52:b9:
         89:fd:58:c3:21:d4:da:78:0b:95:e5:56:1d:17:b7:5f:3c:fb:
         33:4b:1b:a2:d5:2c:c7:12:bb:7b:e5:2b:96:8d:cd:e1:6b:6c:
         4d:26:4a:b3:b5:4e:cd:46:ba:ba:fc:87:74:30:8d:8a:ce:09:
         5b:53:84:8e:d4:b8:df:85:08:8c:81:06:ae:7a:e8:e6:e7:f2:
         80:5b:09:1a:bf:54:a4:a2:44:5c:8b:8c:b2:97:1a:5f:fb:ab:
         9a:16:dd:4f:ba:17:fa:dd:e1:dd:e1:42:33:16:23:39:16:48:
         60:76:36:5c:f2:5e:ad:7c:eb:36:e0:8c:b0:fe:51:f1:f2:57:
         9d:e9:61:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:32:29 2024 by rpki-client on console-ams.rpki-client.org