Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a567b16-c3ab-3cd5-8203-abf175799892.roa
File:                     9a567b16-c3ab-3cd5-8203-abf175799892.roa (raw, json)
Hash identifier:          ZoATHvY1axQf0VPOgCwYbMEHY9MuLP6UEJWZmnkMS+g=
Subject key identifier:   F0:28:6E:38:0C:A1:8A:F2:0D:24:98:E0:BE:17:D2:80:C2:0D:B8:48
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858478CC72879247B366C9482AC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a567b16-c3ab-3cd5-8203-abf175799892.roa
Signing time:             Tue 15 Oct 2024 13:34:24 +0000
ROA not before:           Tue 15 Oct 2024 13:34:24 +0000
ROA not after:            Mon 13 Jan 2025 14:34:24 +0000
asID:                     20940
IP address blocks:        23.212.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:c7:28:79:24:7b:36:6c:94:82:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 15 13:34:24 2024 GMT
            Not After : Jan 13 14:34:24 2025 GMT
        Subject: CN=61fcb270-09e1-43ca-a050-912d57b6c935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:55:a1:a1:90:e9:a9:25:6f:40:12:7f:62:6e:
                    36:15:07:89:69:1b:09:4a:c9:c9:8b:41:3c:06:96:
                    65:b2:41:d7:a8:00:19:1e:39:85:44:9a:5a:0f:c4:
                    a9:6d:31:6a:24:59:9d:3e:9e:f6:f0:dc:27:c2:38:
                    16:55:e4:35:e3:1e:c3:1b:dc:14:1e:d9:b9:9b:71:
                    4a:93:02:fc:4a:e1:59:30:62:97:dc:52:86:d7:15:
                    e4:26:52:0c:90:6d:15:74:ce:57:a5:b6:5d:67:7b:
                    8a:4d:43:09:66:d5:94:73:97:e1:b5:fd:72:62:57:
                    c0:f3:9d:65:9e:c7:6b:b0:cc:80:65:ea:65:93:63:
                    1f:a2:df:e6:83:3c:62:94:02:7f:7b:26:1c:e1:80:
                    b2:96:c0:77:57:28:06:f5:c9:11:33:1b:33:03:a2:
                    26:15:33:09:1b:a7:53:9c:3a:3e:a7:c5:bc:8d:5e:
                    ad:96:0d:4b:c6:0c:82:93:21:0f:34:60:c7:fc:27:
                    a3:3f:b6:02:62:49:57:12:d9:78:70:e0:e1:d2:4c:
                    56:92:45:25:2f:1a:0c:14:0f:c9:13:43:56:78:37:
                    ec:ec:a8:0a:1d:ca:0d:26:94:d0:ff:92:62:2e:ed:
                    4b:be:ab:1c:f4:7b:28:5a:a3:b3:b9:3a:d5:a9:b2:
                    bc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:28:6E:38:0C:A1:8A:F2:0D:24:98:E0:BE:17:D2:80:C2:0D:B8:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a567b16-c3ab-3cd5-8203-abf175799892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.212.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:70:1f:63:ea:3c:1b:31:64:c5:1d:58:73:6b:6c:4c:79:df:
         6a:83:87:30:d4:b1:cd:86:5e:13:9a:a5:e3:12:d9:7d:60:da:
         f6:6c:aa:4f:24:91:bd:5e:c0:12:2a:11:43:62:be:42:c5:92:
         74:92:bc:c1:10:e8:b2:3c:72:51:eb:3e:61:f7:13:e5:55:dc:
         94:96:38:ce:4a:8f:ce:c9:26:90:86:b2:6d:8c:f1:8a:33:55:
         5e:3f:bb:9b:e0:7b:5c:0f:00:05:a3:d2:c9:1b:2d:0e:6c:43:
         7b:d2:19:5e:05:56:9a:0f:9f:3d:eb:1a:22:60:bc:d6:22:ad:
         f2:3d:a7:74:bc:b8:4c:44:a5:95:86:1f:a9:fe:7a:0d:d6:83:
         90:28:2b:38:c7:29:8e:6f:f1:dc:23:09:68:3e:3b:63:c5:4c:
         9d:7a:14:66:6d:64:cf:9d:a0:14:09:88:5b:c8:37:bb:f1:34:
         dd:bd:3a:7d:f1:bd:09:64:aa:e8:89:4e:45:d6:1f:a5:9b:ac:
         a1:27:97:09:32:5d:6e:77:ec:4e:a1:0a:cf:72:a6:fa:be:03:
         c9:11:89:66:84:a4:0d:27:db:14:06:56:93:20:0a:25:aa:d2:
         60:37:6e:07:ff:5a:ec:e2:27:76:18:b7:60:81:a5:9c:f9:c8:
         7e:44:6a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:19 2024 by rpki-client on console-fra.rpki-client.org