Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99418e5b-1b03-34e1-93b8-f821ee69e236.roa
File:                     99418e5b-1b03-34e1-93b8-f821ee69e236.roa (raw, json)
Hash identifier:          mtaD7SqFVpUxvuMH6WtZfuCaNqTW1BldCXfTSs7NzjY=
Subject key identifier:   71:A6:08:2C:09:2B:86:4A:74:F3:BB:BF:EB:6A:8C:91:13:7C:13:42
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C4AA26A4B2D2C1D0071C30C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99418e5b-1b03-34e1-93b8-f821ee69e236.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     20940
IP address blocks:        23.193.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:26:a4:b2:d2:c1:d0:07:1c:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=7d9468ad-f68e-467e-8e63-1f755a0c5316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:44:4e:7d:50:f8:71:be:71:53:dd:cc:9a:f1:
                    96:3c:01:60:eb:09:b4:fe:d6:3b:5d:e3:78:71:17:
                    c8:94:6c:69:18:32:13:28:d8:15:50:16:69:c8:c3:
                    28:07:0e:3f:d2:19:51:45:ce:40:c9:f4:b6:4e:9d:
                    c8:1d:f5:e4:64:96:8c:04:37:9f:bb:9e:e9:ab:60:
                    e8:d7:34:9c:e5:09:78:0e:d6:41:d7:d0:12:f0:7f:
                    0e:35:03:bd:f3:7e:e0:bc:c5:ef:db:7d:30:80:0c:
                    42:7d:a8:97:4f:ae:aa:d8:e2:c5:da:fd:fb:0a:bd:
                    ab:b1:ad:32:76:ce:0d:2a:d6:5d:f0:c5:94:ef:1a:
                    75:f4:d1:19:48:cf:33:cd:e7:51:30:cb:69:62:ee:
                    a2:42:a9:6a:f5:4b:a5:6f:70:5b:66:34:3a:9e:b9:
                    2d:9d:3d:12:9f:b8:74:c5:c9:62:c5:58:c6:9a:4a:
                    27:80:e4:52:e7:50:7e:a6:f4:38:53:ce:05:82:23:
                    be:fe:c3:60:f4:e4:97:c0:83:73:37:11:65:3b:1e:
                    e1:08:be:e6:33:3a:15:a9:6b:ad:02:22:70:0c:82:
                    83:c9:f0:b3:86:9e:a0:21:9b:62:10:af:9d:84:3c:
                    8d:f6:f6:02:17:fc:0c:b2:7e:4a:8a:d6:55:67:73:
                    d5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A6:08:2C:09:2B:86:4A:74:F3:BB:BF:EB:6A:8C:91:13:7C:13:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99418e5b-1b03-34e1-93b8-f821ee69e236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.193.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:86:dc:a6:31:25:12:d5:85:82:69:57:1a:a6:e5:fd:8d:98:
         fe:2a:93:a0:b5:75:ec:ad:64:33:7d:0a:26:81:95:1c:dc:68:
         d3:1d:4c:0b:fe:48:f8:66:2d:f4:ef:c4:18:f8:a2:ae:7b:23:
         ad:05:bd:32:17:e0:ea:d7:53:a6:07:75:fb:0b:95:51:90:73:
         2e:88:47:8d:c5:87:f6:1d:2f:be:a4:c6:d2:64:e5:3d:31:5f:
         5e:81:28:d3:d1:61:f7:dc:c4:ea:4b:41:57:93:11:06:2f:a0:
         cd:83:c8:62:d6:7c:b2:c9:83:57:23:99:fc:24:c1:2b:45:75:
         7c:21:9f:c2:1d:cd:61:9e:d6:c8:f6:f3:52:0d:d9:bb:f9:d4:
         13:d2:50:d7:4b:fe:05:67:a2:3c:96:f4:57:b5:6c:c6:7d:bf:
         2a:ff:31:a3:66:fc:86:01:a0:7d:a1:78:69:84:7d:7b:c4:e7:
         ec:e9:a0:ca:64:02:5f:f2:be:0a:2a:1f:a3:30:52:a2:d0:35:
         ce:b8:f0:20:fe:91:33:a6:c2:d6:02:36:68:9c:69:dc:e5:cb:
         e2:c3:f2:ec:88:6f:b9:df:2a:ff:22:08:38:fc:c5:b7:aa:6a:
         75:fe:ee:b8:8f:ca:55:d6:a0:90:1c:01:d6:6d:62:6e:c3:bd:
         56:1a:60:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:18 2024 by rpki-client on console-fra.rpki-client.org