Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/977c7462-8123-3991-8b5b-ac92cb90e240.roa
File:                     977c7462-8123-3991-8b5b-ac92cb90e240.roa (raw, json)
Hash identifier:          5ZMIJIstBwvRd6wLzC/lZ8mT3uiy0sVwG+0t1o/S2aI=
Subject key identifier:   6F:17:5E:F5:13:66:AD:D2:E3:63:1D:B0:27:CD:9F:94:BD:4A:3A:B4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847EFEF8768E0588923B54FB340
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/977c7462-8123-3991-8b5b-ac92cb90e240.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     6762
IP address blocks:        23.197.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:87:68:e0:58:89:23:b5:4f:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=56aadac4-2191-4972-8547-1f6ba720d35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b6:b3:d7:f6:49:f9:0c:be:d7:ef:4a:b1:7a:
                    ac:0c:74:cf:9a:15:e8:e2:4d:9e:c5:ae:37:96:a7:
                    79:87:1f:a2:39:f3:3f:43:e5:56:06:bf:29:a9:d9:
                    ca:4e:7f:05:08:b9:44:18:ff:b8:53:de:12:cb:d1:
                    69:57:cb:5f:d8:37:29:3a:b5:6e:fd:a4:e1:72:cf:
                    2d:f6:9a:d5:8d:84:60:fd:cb:f4:b6:dc:d3:86:71:
                    20:cc:54:35:26:d4:88:23:0e:c8:2f:a5:65:6b:c6:
                    68:b5:e7:4a:e1:08:c8:a8:10:d2:f7:01:37:ec:e0:
                    f4:8e:07:93:f3:1a:85:23:64:ca:a4:a2:d3:04:5f:
                    1d:53:41:d5:fd:b4:df:09:cf:ab:ec:b7:f4:20:8f:
                    ef:a9:fa:6e:de:3e:ca:dc:22:ce:27:2a:d8:60:c1:
                    b9:1a:9c:59:9c:ad:e2:67:37:69:a1:83:74:c3:2f:
                    dd:e3:2a:99:4e:4f:c6:73:b8:1a:c0:26:6e:12:62:
                    fb:93:bd:a5:1c:e8:de:95:13:67:6d:69:11:58:b9:
                    b1:25:04:f5:7a:dd:8c:cf:b8:58:59:35:42:45:5f:
                    65:40:35:d0:9a:b2:64:06:60:f2:63:b5:19:ab:31:
                    16:cc:81:aa:27:84:4b:19:49:c5:b0:21:fa:fb:89:
                    1c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:17:5E:F5:13:66:AD:D2:E3:63:1D:B0:27:CD:9F:94:BD:4A:3A:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/977c7462-8123-3991-8b5b-ac92cb90e240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.197.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:18:a9:c7:3a:04:c5:ee:94:82:b2:18:cd:58:96:16:52:54:
         c1:22:78:0b:c3:af:04:20:f2:c8:74:ac:c0:25:72:1d:2e:a6:
         72:27:d8:19:db:8e:5b:39:d9:af:ae:68:24:f2:55:cb:c3:3a:
         d1:3b:33:cb:d3:3b:b3:b0:c2:42:01:11:1d:75:54:71:33:0a:
         12:c9:40:2e:42:ba:3f:2c:ad:ac:45:de:c7:27:06:dc:1f:bd:
         2f:5d:af:01:e2:1c:0b:16:fb:2c:8f:58:dd:ba:bc:0e:e0:ad:
         fb:e9:91:af:61:51:01:ab:b2:bf:4d:54:b9:44:69:26:88:be:
         98:6a:63:cf:79:41:dd:08:53:59:0f:7d:3b:f4:22:fa:d8:57:
         1d:4c:24:bb:45:c9:db:9d:ef:11:7e:83:6d:5c:f2:83:48:f8:
         5c:d6:5c:a3:92:99:32:fb:e2:3b:c4:88:fa:d4:bd:8c:d5:c4:
         6a:5a:f9:3c:89:b6:2f:60:32:56:61:b6:5f:fa:85:42:c7:89:
         ab:5e:99:3b:75:4e:0b:30:6a:39:96:41:67:29:2d:7a:8e:47:
         91:62:51:40:b8:6e:df:35:63:4a:f8:89:aa:9b:c4:09:c1:93:
         eb:a0:3b:c6:e4:87:04:37:7b:df:6b:16:f8:00:64:d4:45:51:
         ea:f8:96:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:09:29 2024 by rpki-client on console-ams.rpki-client.org