Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2262e7b-53de-3dda-a5c1-f212a2c71d13.roa
File:                     b2262e7b-53de-3dda-a5c1-f212a2c71d13.roa (raw, json)
Hash identifier:          hAhRO1usHH93KSniZOKTxY2eZI+zxnm0LpN3yKIQxpU=
Subject key identifier:   A6:6E:C4:72:BC:51:2F:98:B0:24:E8:F3:B0:5B:B8:38:73:D5:D6:51
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B3CC1CE77F93D1E7C94938A4
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2262e7b-53de-3dda-a5c1-f212a2c71d13.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     16625
IP address blocks:        23.213.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:1c:e7:7f:93:d1:e7:c9:49:38:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=75c66283-dfbb-4c07-a9f3-a675c727686d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:81:7e:57:12:28:11:3d:c3:23:56:9c:6d:48:
                    e4:c1:e4:43:43:1a:85:82:5c:50:d4:9d:ff:a2:38:
                    db:07:f2:76:64:7a:40:73:54:65:39:9e:23:94:5c:
                    ac:c1:1a:11:2e:70:a3:88:8f:e1:7f:ec:1f:c7:bd:
                    67:2d:04:9e:22:7d:19:62:84:9d:c2:cc:3b:97:59:
                    e5:7c:43:9f:76:a7:1a:16:5a:87:5a:24:84:49:1d:
                    82:5f:2e:5f:c2:c1:56:f6:fe:34:66:a0:f0:2b:27:
                    71:e0:55:39:da:2b:30:d7:a0:a1:20:f2:33:48:d2:
                    49:74:52:54:35:16:24:9b:d4:97:f0:55:22:fb:6f:
                    d6:2d:91:28:62:f1:b2:95:e0:44:01:a0:7e:c2:fd:
                    e8:8c:09:56:f6:e7:b4:ee:c9:4c:71:01:48:06:16:
                    59:87:3d:82:27:ba:e2:cc:d1:ca:92:5f:7f:5a:03:
                    ce:6b:e8:ef:6e:8e:d4:10:82:9f:2e:6a:7c:21:e8:
                    0c:ce:72:c4:94:bd:81:42:b6:88:b7:6c:05:5f:b3:
                    3c:32:36:db:88:a3:45:54:8a:54:e3:b7:1e:b2:71:
                    50:f4:5b:51:25:f3:82:a8:b1:68:b6:79:6b:de:3d:
                    bc:cb:ff:23:4f:e9:f3:85:b7:ca:0e:2c:4c:2f:23:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6E:C4:72:BC:51:2F:98:B0:24:E8:F3:B0:5B:B8:38:73:D5:D6:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2262e7b-53de-3dda-a5c1-f212a2c71d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.213.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:db:5f:bd:cc:14:ef:4b:64:69:01:b8:11:f1:43:05:3f:cf:
         7e:e0:c9:49:6b:0e:85:39:19:cf:a4:b2:e5:cf:d2:68:aa:5a:
         e4:a1:aa:ed:4a:d4:65:31:73:b8:65:01:f9:96:f4:13:1f:58:
         41:f8:9c:bd:ed:b2:5a:2e:a6:6a:f0:f5:2f:74:ab:52:42:37:
         32:26:d1:05:a7:8b:a9:90:51:a8:d0:2d:3d:d5:b9:19:17:7d:
         fc:b5:d6:58:10:c0:1e:1f:67:c4:40:00:80:8b:f1:15:3d:c7:
         3d:4a:ef:a9:a6:f1:c7:f2:67:ae:1c:7b:65:b5:ad:d5:0f:f5:
         57:c6:06:60:1f:f4:5c:d2:54:88:4a:29:e8:98:75:a7:b7:f0:
         4a:cf:f0:21:d9:dc:00:5c:12:44:3e:06:c6:c0:0d:5d:1b:85:
         cc:c4:92:1e:12:b0:44:14:cb:e5:dd:d2:a2:ff:a7:ef:6f:51:
         50:17:95:57:c4:de:92:6e:1b:d5:0a:89:39:9a:38:40:8f:a9:
         09:5d:ce:0e:09:24:37:1f:63:7c:70:83:96:f4:99:97:bc:13:
         fb:b9:d4:93:d6:a6:0a:26:6a:8d:69:a6:7b:cf:c6:0b:c5:79:
         19:9f:94:39:99:d8:72:b6:11:f8:9b:5b:a3:1e:c2:70:7c:1f:
         5e:04:93:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:47:56 2024 by rpki-client on console-ams.rpki-client.org