Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a062bae9-00eb-3d88-90ea-187d3e703fc3.roa
File:                     a062bae9-00eb-3d88-90ea-187d3e703fc3.roa (raw, json)
Hash identifier:          WU+VPUosvIOcTbyxwGIJu1nTxGfhDQuyaSUt+mXd3tU=
Subject key identifier:   E6:53:D7:D3:58:E0:02:FD:1A:C6:E9:F5:DE:68:BA:F5:6D:0B:E7:00
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B10179DDD0BF6D3E6302B9C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a062bae9-00eb-3d88-90ea-187d3e703fc3.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        23.201.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:79:dd:d0:bf:6d:3e:63:02:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=86f075ae-1385-4aad-aa40-853a4b172596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e9:0e:1f:d0:9f:56:d6:17:ba:09:f9:17:c6:
                    52:1d:06:6f:a1:83:f4:50:84:0e:b6:78:59:50:e9:
                    0b:31:b9:a5:4f:61:12:33:8c:4c:ef:4d:47:b7:7b:
                    78:50:e3:f4:79:ae:fa:e6:f8:82:32:0b:e4:6b:26:
                    41:a0:dd:ef:46:94:8b:16:b5:a1:03:59:61:11:3a:
                    be:28:72:25:15:87:1f:0e:32:4c:26:b3:2b:1c:92:
                    6e:39:31:57:58:8c:74:a5:1f:23:bb:9f:e2:12:71:
                    9f:5f:ca:6d:9e:5c:ec:53:1b:c1:ff:4a:49:88:fc:
                    65:65:51:4f:54:5e:92:1d:1f:7a:26:f1:2c:8c:6a:
                    0c:bf:2c:2b:53:cb:20:c7:2b:89:f6:60:0e:33:c7:
                    be:e3:1f:af:56:e2:db:78:da:c9:53:57:de:4b:89:
                    5c:73:7d:69:bc:aa:70:f7:3d:b3:77:e7:07:38:1b:
                    b4:39:4b:0c:a2:b3:5e:41:0a:35:20:99:1a:2c:5a:
                    94:f8:50:37:59:2b:f0:33:a4:a6:31:6f:7f:6c:29:
                    ed:eb:95:af:88:3f:c8:a4:32:39:dc:68:36:99:0e:
                    b7:11:08:99:05:c4:77:69:80:f8:66:cc:bf:b5:86:
                    90:7d:03:5b:77:3f:9c:2f:40:0f:8b:e1:a9:1f:33:
                    03:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:53:D7:D3:58:E0:02:FD:1A:C6:E9:F5:DE:68:BA:F5:6D:0B:E7:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a062bae9-00eb-3d88-90ea-187d3e703fc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.201.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:da:29:db:5b:41:48:96:e2:1e:58:ed:69:6f:0c:be:df:5e:
         ae:8f:28:a1:b6:09:38:f0:b8:6b:e0:83:85:b7:4f:de:24:ba:
         82:bc:51:09:b1:1c:85:a1:8e:44:de:c4:50:15:c8:d6:47:e0:
         31:95:eb:ca:35:20:0a:1c:ee:11:36:4a:c0:fc:c1:20:63:73:
         9b:84:1e:ac:e2:3a:c2:d1:b6:91:35:91:18:cf:99:c5:ca:af:
         45:11:48:fa:67:1a:2c:80:c3:e7:ef:c1:2b:a1:9a:62:74:3f:
         18:c9:4f:51:28:20:7b:66:fd:b0:cb:e9:31:8c:36:9f:77:1f:
         04:88:fe:cb:a1:e6:d1:fd:0d:98:6c:81:8e:d0:4e:a1:f2:fa:
         14:ca:27:95:b4:ea:81:73:78:49:37:04:e0:d9:47:f2:52:73:
         c4:0c:50:ad:58:13:dc:f7:fd:95:17:d9:83:8d:2f:26:ea:b1:
         53:d1:e0:84:af:c7:a9:83:cb:4d:1b:63:68:57:4b:5d:89:ee:
         2c:65:31:71:cf:5f:cc:cd:10:a8:be:7a:99:75:6c:be:6a:70:
         84:ac:66:fe:54:fa:b0:09:3b:35:4d:45:a2:0f:2e:cc:9f:40:
         89:51:13:16:8e:ee:a7:46:39:0b:59:a6:16:3d:1e:82:94:17:
         e3:b1:1d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:09 2024 by rpki-client on console-ams.rpki-client.org