Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ea0610c-613b-3158-ae1c-8955835ff09b.roa
File:                     9ea0610c-613b-3158-ae1c-8955835ff09b.roa (raw, json)
Hash identifier:          xPEyEHctmQ7/b9wXk08vOnYcIFAAH4l4zL5kt+Aou3A=
Subject key identifier:   E6:3B:F7:60:88:D2:D3:58:6A:11:54:66:67:E6:A0:45:62:2C:32:BC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A400DF6FA29EF0D7E149F840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ea0610c-613b-3158-ae1c-8955835ff09b.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        23.196.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:df:6f:a2:9e:f0:d7:e1:49:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=07f7961b-cc9d-4634-a958-da4a60a153f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:63:cb:17:49:df:84:e3:08:b9:4e:dc:0f:
                    3a:7f:d3:34:45:b1:42:57:82:b9:7a:d9:40:df:3d:
                    b7:4e:64:ce:f4:fd:24:2d:63:aa:46:b0:f8:cc:e5:
                    08:1b:07:6e:9d:6b:ef:22:00:c4:b2:c7:5e:3d:13:
                    ad:c7:b8:9a:a5:bb:80:88:69:e4:b9:2e:71:19:6c:
                    0a:d5:15:62:8d:7f:72:23:ca:30:7d:71:df:32:a9:
                    1b:ed:b9:7b:ed:6d:57:9f:f4:57:92:57:54:66:5c:
                    bd:b0:e1:62:9b:98:8b:0b:e1:e7:e1:5e:25:25:b0:
                    09:7e:ab:c2:fc:29:86:9c:3a:23:a1:ad:d0:e6:18:
                    40:c0:d0:37:09:eb:c0:62:8f:5c:28:06:8c:24:5d:
                    83:49:f6:e0:f9:e0:f1:6e:cb:0b:db:66:08:d2:2f:
                    94:4b:07:ef:7a:7f:b6:3f:11:16:95:c3:68:b3:17:
                    e7:ea:4f:9e:f6:88:45:4c:0c:46:7f:db:62:be:69:
                    f3:0d:2a:b2:42:da:bc:70:a5:ae:4a:24:50:8b:3c:
                    fe:47:0c:33:01:74:4a:7c:c1:d6:69:8c:98:4c:33:
                    cf:3a:45:fe:50:8c:96:71:a1:2e:95:24:fc:44:36:
                    b9:d7:0c:c0:66:b9:dd:20:45:e1:e3:78:c0:f2:7a:
                    1b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3B:F7:60:88:D2:D3:58:6A:11:54:66:67:E6:A0:45:62:2C:32:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ea0610c-613b-3158-ae1c-8955835ff09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.196.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:07:55:0b:52:fa:eb:e2:00:bb:bc:fc:de:5c:da:b9:04:5c:
         ae:b7:48:f9:39:98:b4:f9:20:9b:da:0f:af:76:6e:d0:2e:8e:
         78:43:f4:9f:40:7f:9f:a2:a7:c7:4d:3c:9e:01:61:fe:2c:d2:
         9f:68:37:a8:8a:2e:c6:be:05:12:4a:8d:35:78:6a:31:39:74:
         33:2a:28:97:7d:0c:b9:3d:89:2f:63:8b:cf:92:2a:97:f9:61:
         a4:f7:8e:33:7a:ac:a6:2b:98:3b:5b:2b:9e:ba:93:56:58:8e:
         48:83:13:b9:38:0c:10:a0:a6:51:aa:ec:0f:98:2b:c7:f9:eb:
         5c:ed:2b:9a:e9:23:2e:80:92:bf:82:df:bc:db:93:2f:74:09:
         48:4e:86:bf:b7:c8:dd:e4:55:e2:4b:26:e5:f2:6d:19:13:8a:
         47:df:cf:cc:14:bb:63:f2:00:2a:02:e7:ee:23:4e:e6:79:1a:
         6f:c6:da:63:55:fc:fd:5e:b1:2e:66:4a:a2:02:70:f8:fd:52:
         22:80:00:f9:78:f3:d0:8e:ac:23:ee:28:3e:04:5b:55:1c:7e:
         d0:89:60:62:d0:aa:bb:00:c5:c4:a0:ce:3f:02:d8:7d:1a:9b:
         39:e3:e1:43:83:53:51:bf:6f:1a:b9:c5:1d:8c:fc:0a:d5:f7:
         cf:80:3f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:08:35 2025 by rpki-client