Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3514049-792e-3f41-828e-1591c29a7f9c.roa
File:                     b3514049-792e-3f41-828e-1591c29a7f9c.roa (raw, json)
Hash identifier:          zRbfXQ9xGIyKDv4+IDsqmezj1TH8bC3HiYPlk7f8ESc=
Subject key identifier:   B0:36:3B:A6:74:DA:EA:D6:55:9F:0C:2B:A8:31:57:15:27:B2:10:EF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C4AA207A9ECFF33D5F7A6E60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3514049-792e-3f41-828e-1591c29a7f9c.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     24319
IP address blocks:        23.195.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:20:7a:9e:cf:f3:3d:5f:7a:6e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=9f979351-6a99-480c-9ef7-a6bc92618289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:5e:1c:ed:7a:f9:99:3d:08:fc:57:46:02:
                    ec:fe:d3:21:0b:30:6e:97:8e:61:b4:80:16:da:57:
                    00:fc:2c:28:ac:08:ef:db:ce:d2:8b:ce:34:06:43:
                    04:74:04:7e:60:57:7a:79:1d:ea:da:d5:83:d2:45:
                    8f:dc:cf:6f:f1:a7:7f:b1:79:2b:b1:7f:89:34:8c:
                    ec:2c:ea:46:1a:45:7b:10:a4:d4:56:fc:2c:3d:7a:
                    9a:9f:49:aa:bf:3c:49:3f:d4:96:8e:98:a5:0a:c3:
                    e1:e8:3b:48:2c:6d:74:c9:6a:01:c6:76:7b:69:e3:
                    b1:41:ed:90:bf:3c:28:21:f4:98:56:c9:ae:07:9f:
                    4e:cd:7c:9f:a5:f6:63:f5:f2:a7:07:85:70:ff:b7:
                    02:f6:ec:a4:fa:b8:4a:29:89:43:97:f7:41:74:8d:
                    f2:8d:5b:2e:d9:1e:31:a8:c4:2f:c2:65:9e:d7:9d:
                    d3:7e:2f:9a:33:5b:d1:ef:6e:83:54:45:f2:56:ba:
                    98:01:40:d1:12:48:ec:17:3d:69:5e:b0:98:2f:0b:
                    43:2d:ee:eb:cb:44:e0:e8:97:df:90:23:f8:4b:20:
                    e3:c7:10:33:f2:27:d5:d5:a7:06:f9:7d:bd:32:84:
                    2c:e8:94:56:2a:9b:df:e1:07:08:2c:e2:20:cf:2e:
                    45:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:36:3B:A6:74:DA:EA:D6:55:9F:0C:2B:A8:31:57:15:27:B2:10:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3514049-792e-3f41-828e-1591c29a7f9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.195.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:02:69:02:68:ae:30:8f:7b:12:75:aa:aa:6b:73:79:7b:0d:
         63:22:79:6d:bd:3d:2b:f8:09:5b:3d:53:9b:93:51:30:44:af:
         e7:e8:23:51:9c:7e:3f:09:27:93:a2:ba:1e:a7:a3:9f:03:59:
         2e:80:70:4b:dd:37:19:1d:27:d1:ad:00:ec:35:82:f5:9c:40:
         c6:5f:97:ba:2d:b2:ce:91:55:71:63:ba:a4:b7:00:a7:9d:16:
         de:9f:81:14:32:80:0d:f8:69:45:5d:af:05:bf:d8:61:82:08:
         13:e1:f4:77:b6:7d:52:cd:0c:d4:7a:a9:ba:4a:a9:8c:e7:64:
         33:eb:e9:76:46:14:11:8e:01:61:8e:ed:1c:45:0c:35:2d:44:
         98:a5:37:24:64:46:86:69:93:05:61:64:2b:70:2c:5e:9f:05:
         c7:9a:2e:60:07:cb:93:48:08:ac:77:e1:2e:67:5d:c0:c8:f3:
         a4:21:82:e5:15:db:46:29:33:28:7c:12:f3:74:1b:68:31:2d:
         63:ef:6f:b6:3e:de:fb:39:93:db:f7:97:54:0b:93:32:4f:cc:
         4e:df:35:f8:47:b1:49:c9:d5:71:dc:d1:2e:ab:80:af:ab:cc:
         da:ee:8a:c2:51:4e:20:cb:5b:20:33:42:ff:04:df:27:ed:60:
         47:af:a9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:25:04 2024 by rpki-client on console-ams.rpki-client.org