Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0dab203-53a8-3298-bcb4-72d48f9652b2.roa
File:                     b0dab203-53a8-3298-bcb4-72d48f9652b2.roa (raw, json)
Hash identifier:          MnMCFRmj9o/GUOdg0wfDhq251dkQK291SL1YBpp+3Xk=
Subject key identifier:   C1:D7:E8:CC:34:26:72:86:C4:01:F3:E2:21:50:E0:6D:9A:3E:53:13
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AF9BF84B9776A591AD3BAD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0dab203-53a8-3298-bcb4-72d48f9652b2.roa
Signing time:             Mon 28 Oct 2024 01:00:32 +0000
ROA not before:           Mon 28 Oct 2024 01:00:32 +0000
ROA not after:            Sun 26 Jan 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        23.62.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:af:9b:f8:4b:97:76:a5:91:ad:3b:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 28 01:00:32 2024 GMT
            Not After : Jan 26 02:00:32 2025 GMT
        Subject: CN=ce2c8076-5a5c-4eaa-a3c9-f422940e14ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:0f:34:1e:53:c5:11:e5:94:b3:21:85:11:
                    75:86:12:c8:11:1b:13:cc:bf:56:5b:ec:a5:92:22:
                    c5:68:42:e5:e2:c3:c5:45:e7:30:7f:f6:87:b3:4b:
                    a3:eb:e2:87:27:ab:37:7e:67:8b:25:87:7c:85:33:
                    b9:60:4d:c5:4d:33:23:e5:d4:6d:7b:95:59:1d:4f:
                    43:51:c9:74:0f:f2:13:3d:43:69:4d:6e:9d:d6:10:
                    84:08:25:2f:b4:e3:aa:34:fc:6b:48:95:40:2e:17:
                    3d:93:61:b5:53:8d:19:56:b0:85:2b:f6:f0:dc:4a:
                    e9:c1:74:1e:4a:10:2e:0e:92:ce:3b:83:c6:5e:32:
                    c8:11:23:62:3f:bb:44:f8:54:8e:85:ce:9a:05:64:
                    cf:1c:df:2d:13:02:cd:05:29:f5:ed:42:92:ce:33:
                    05:81:d7:bb:80:3a:32:66:9f:1c:ac:b6:de:96:5f:
                    5d:b0:38:c4:52:97:be:39:5c:e9:c5:44:2d:45:3b:
                    ab:e4:6b:35:53:e1:9b:70:61:4f:fe:d3:74:52:d7:
                    e7:7e:c6:d9:28:94:ad:a2:52:42:47:8a:ff:61:82:
                    6f:36:24:fb:06:7c:52:bc:d0:29:f4:75:4f:c2:17:
                    15:36:e6:79:77:85:62:ee:67:56:76:ac:34:36:67:
                    87:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D7:E8:CC:34:26:72:86:C4:01:F3:E2:21:50:E0:6D:9A:3E:53:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0dab203-53a8-3298-bcb4-72d48f9652b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:42:eb:3e:0c:5a:15:75:d3:24:89:8f:c1:16:d2:26:3b:26:
         44:6f:89:53:92:00:85:ba:44:d9:24:d2:cb:c2:21:19:39:dd:
         73:6f:2e:68:bd:ff:aa:ca:4b:b8:81:9f:a9:a6:22:cf:57:3d:
         81:7a:e9:69:66:ef:be:b7:5c:5a:0c:c3:f6:08:69:5a:f5:23:
         cc:3d:d7:bd:4b:ce:da:ca:22:a0:91:87:d7:21:ff:de:9c:0e:
         80:22:0d:8f:0d:1b:90:ca:20:0d:09:3a:83:9d:3c:ea:c8:fe:
         8a:97:c0:0e:a2:49:2e:fc:ba:b8:08:cf:49:56:07:e2:54:58:
         ee:63:28:8a:d1:b0:d5:73:f0:56:98:a6:3c:4d:0e:c9:cb:f0:
         ff:66:56:7a:6b:67:5d:d1:3a:b6:f4:bb:f7:02:28:d9:74:ba:
         99:4c:68:8f:bb:6e:59:24:54:e5:48:7b:ec:b7:7f:3e:f7:b2:
         8a:46:eb:fc:3b:70:02:04:f3:f1:74:87:fe:ee:91:87:64:be:
         a3:57:68:b6:48:13:7e:62:a7:03:13:d6:fc:fd:87:92:24:dc:
         91:40:86:1d:80:9f:a6:57:11:90:00:75:f6:9c:72:7f:ad:24:
         cd:12:ba:f6:fa:e7:7b:52:e1:ba:a2:d3:de:e1:1e:1f:e7:6b:
         85:37:fa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:28 2024 by rpki-client on console-fra.rpki-client.org