Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9cc8f44-44d2-34ea-84c8-df3c2143a4ee.roa
File:                     a9cc8f44-44d2-34ea-84c8-df3c2143a4ee.roa (raw, json)
Hash identifier:          Xq8OAKgVZH1RSR224fbxPqdCDaoSB1sac/e7ikngjdA=
Subject key identifier:   B3:DC:CD:B7:EE:A6:EB:DB:F2:9F:12:29:38:75:FB:E9:EF:D6:77:12
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847D99A06DB0A168A71970F2440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9cc8f44-44d2-34ea-84c8-df3c2143a4ee.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     20940
IP address blocks:        23.206.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:9a:06:db:0a:16:8a:71:97:0f:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=77fd7a1d-e28b-4716-bbc2-52cbb74b73f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:97:89:5a:d8:c6:55:e0:40:79:5d:3a:14:
                    77:da:2a:32:c2:50:6c:cf:4f:de:cb:45:a9:8e:43:
                    1e:45:3c:4e:4f:76:6d:40:90:74:14:02:64:d0:f2:
                    c0:7d:a7:48:63:ef:ac:54:76:c8:76:cd:82:32:21:
                    e2:cd:b4:1e:a3:64:77:fa:20:74:dd:60:2c:ef:79:
                    1a:6b:aa:0f:50:60:c8:0d:46:57:49:72:d0:02:4e:
                    eb:f4:f5:09:62:ac:03:46:2f:ea:03:46:52:13:7f:
                    71:8f:71:0c:1a:1a:1f:1a:ed:84:5e:24:a9:da:6f:
                    17:d4:8c:1f:fe:26:77:83:f9:98:78:6b:1c:5c:2b:
                    cf:cd:10:42:1c:dd:73:9a:24:8a:a6:a2:25:d5:c7:
                    ba:ba:73:d5:46:8e:8c:5a:d5:a1:80:5a:14:31:3b:
                    93:18:8c:53:7c:ed:9f:b8:0b:7c:cd:49:37:5c:b6:
                    b5:8d:6e:32:57:48:d4:a6:81:3d:73:76:39:f0:53:
                    3e:8b:6c:e9:48:fe:e3:b0:2b:94:ea:0a:59:16:7c:
                    7b:5f:8c:9c:fc:3a:f5:5e:0c:46:c7:31:11:19:09:
                    e1:c0:45:e2:37:c2:cf:fe:99:df:e5:dc:e1:37:fb:
                    60:ed:1a:56:04:c5:c0:84:70:38:bd:ee:75:df:19:
                    3e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DC:CD:B7:EE:A6:EB:DB:F2:9F:12:29:38:75:FB:E9:EF:D6:77:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9cc8f44-44d2-34ea-84c8-df3c2143a4ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.206.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ef:98:c4:b4:d3:54:84:ca:0f:00:11:52:66:39:aa:3c:f9:
         c2:04:ca:dc:cd:b5:c1:9e:ad:d6:8b:b1:37:aa:67:80:e7:94:
         3e:a5:6d:6e:d5:60:e2:80:e7:d6:42:fe:68:aa:40:e8:b0:73:
         8a:62:36:d4:1a:f7:dc:33:e0:2b:45:06:7d:69:89:de:85:d4:
         06:3f:be:0a:4d:51:aa:91:3f:e0:6c:1d:40:76:b4:b1:a1:c0:
         5e:92:de:e6:8c:80:d0:70:1d:e8:91:9e:1a:90:c8:9b:95:19:
         8f:16:05:66:9d:94:e8:7c:6a:32:44:06:4f:d5:54:39:50:a0:
         5e:a7:ff:e3:1f:01:5d:f6:d8:e8:96:4c:e6:f0:c9:f2:05:c4:
         55:40:ed:cf:f5:36:ab:c0:29:81:c0:ab:d9:de:51:99:3b:b3:
         46:38:c6:51:d4:c7:33:05:c0:06:69:99:0d:1e:59:c3:cb:bf:
         fb:04:49:c2:14:97:82:e7:44:d5:90:a4:e2:97:a1:d3:15:ac:
         91:45:45:15:9d:66:69:d9:42:40:e7:e5:84:ec:5d:8e:b9:52:
         55:8a:e1:58:1a:71:aa:cc:61:4a:ab:1c:0c:3f:03:50:16:06:
         7a:8b:35:cd:6a:cc:31:b4:af:d8:8a:c1:2e:6b:32:51:9f:79:
         85:a3:d9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:25 2024 by rpki-client on console-fra.rpki-client.org