Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a115ae35-ec7e-3f00-b4a1-b8e2c852f7d8.roa
File:                     a115ae35-ec7e-3f00-b4a1-b8e2c852f7d8.roa (raw, json)
Hash identifier:          mnl7CAseI71MD5rsdIR4vKZBXpkRIQmx6b2yENrMO8Y=
Subject key identifier:   CE:89:CE:2E:C3:20:3F:EA:63:A1:7B:D0:54:6F:EB:F5:80:A9:AD:E6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36CF3B07B5A0B2FFDC2CB0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a115ae35-ec7e-3f00-b4a1-b8e2c852f7d8.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.56.192.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:cf:3b:07:b5:a0:b2:ff:dc:2c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=6241714b-b04c-4f76-94b1-98c0138f76ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:8f:f2:b4:ac:8c:49:b2:02:43:0d:4d:4b:
                    a0:51:e2:aa:5b:49:49:6b:eb:33:dc:39:0a:d5:68:
                    3b:63:e1:65:74:79:b6:f7:54:51:fc:6a:22:29:7c:
                    70:55:57:94:55:9e:47:c4:b6:ff:8e:f4:19:26:c3:
                    cf:cb:1a:2a:ae:7c:9a:df:f3:2e:f9:df:a5:50:b7:
                    b9:78:fb:d6:95:2d:cb:3a:70:de:66:57:8c:bb:2e:
                    66:ad:3b:bc:28:20:95:56:b9:a5:6f:5b:1e:66:43:
                    f0:cb:fe:1d:6c:ba:09:80:80:4c:4b:7d:fc:ed:13:
                    3c:fa:f3:da:95:28:40:fb:3e:f0:1a:33:07:da:45:
                    fd:1c:3e:a2:d2:0c:b9:9e:25:04:8d:03:7d:82:94:
                    6b:ee:f4:52:62:66:0f:ec:64:dd:5e:11:ca:6d:03:
                    24:d3:79:3e:66:70:c5:c5:02:06:26:4d:ea:d6:47:
                    e2:d6:54:48:23:39:59:4c:d8:bf:20:48:ec:eb:c4:
                    f4:1e:b9:09:b9:47:47:2d:ed:86:bc:42:22:e2:d1:
                    e6:5f:1f:e3:c8:1a:48:e8:24:f1:27:91:d1:57:13:
                    1b:ee:16:30:9e:df:fb:6b:11:9d:e7:0c:88:c1:34:
                    62:6d:e2:50:3e:a0:19:24:b3:27:5e:82:1e:fd:2e:
                    82:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:89:CE:2E:C3:20:3F:EA:63:A1:7B:D0:54:6F:EB:F5:80:A9:AD:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a115ae35-ec7e-3f00-b4a1-b8e2c852f7d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.56.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:49:9f:6b:13:e2:0b:29:d8:ed:a0:cb:c0:77:0a:34:9c:5e:
         91:1b:73:1a:54:1a:3e:ed:e9:7b:b4:7c:c5:17:23:59:73:ff:
         9e:fc:85:79:46:d5:2a:c1:83:e0:aa:b4:2d:6b:d6:3c:49:dd:
         50:70:3c:9b:a6:19:ba:7d:85:ac:48:ed:1c:71:80:6c:50:4a:
         3d:e7:e9:ed:e6:8b:28:4e:51:84:83:71:73:67:8e:42:fb:48:
         1c:f8:0a:d9:c0:24:4b:fc:d5:e2:3c:29:48:1d:9b:ff:f0:a2:
         94:20:b5:5e:68:5b:34:0b:aa:85:bb:b6:9d:95:78:61:67:11:
         2a:91:6b:a6:d6:48:69:fb:fd:bb:21:bf:93:18:e8:d3:68:61:
         52:4d:c1:34:ff:19:67:47:62:c3:22:b2:f9:99:ac:cf:02:d3:
         ec:4f:f1:47:3e:dc:a3:95:62:01:67:77:6d:ef:66:e1:39:90:
         2b:1d:8f:ce:9a:00:c8:e3:18:d1:85:ca:9d:d3:8b:54:b7:03:
         f3:9f:cd:5a:89:fe:42:ca:d2:ab:47:2a:1d:1b:69:7a:f8:d7:
         79:5a:d7:0d:dc:f4:4a:35:b5:28:f8:c5:88:fd:c6:cc:6a:cf:
         74:8e:9d:a7:f8:24:5e:2a:53:c4:e9:a1:96:8e:a2:54:49:11:
         d2:e4:6e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:32:38 2024 by rpki-client on console-ams.rpki-client.org