Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5841c8e-8689-3f3a-94bb-1cd2514ddf8d.roa
File:                     b5841c8e-8689-3f3a-94bb-1cd2514ddf8d.roa (raw, json)
Hash identifier:          D58faqQ3jLQuj1BaZ/H+K0UrTJwbAl6DmZvVhknUGaw=
Subject key identifier:   0E:42:FC:5F:6C:E9:EF:D4:56:3B:4F:AD:90:71:4F:7C:E8:01:3F:CF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858477D5BA572122FBD4C8E176DF0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5841c8e-8689-3f3a-94bb-1cd2514ddf8d.roa
Signing time:             Thu 10 Oct 2024 01:00:33 +0000
ROA not before:           Thu 10 Oct 2024 01:00:33 +0000
ROA not after:            Wed 08 Jan 2025 02:00:33 +0000
asID:                     24319
IP address blocks:        23.43.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7d:5b:a5:72:12:2f:bd:4c:8e:17:6d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 10 01:00:33 2024 GMT
            Not After : Jan  8 02:00:33 2025 GMT
        Subject: CN=979b8794-6390-4c85-b638-31d12d380ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2b:bf:68:a4:52:6a:03:fe:6b:ca:45:9e:a4:
                    8b:c2:e2:37:aa:dc:d9:b7:d0:96:7d:c3:aa:b3:2b:
                    cd:fb:5e:aa:67:4b:49:9a:fe:96:81:a6:86:a3:d8:
                    a4:65:f2:23:87:44:f0:19:ac:dd:c4:db:00:6e:ca:
                    7b:f8:c7:ec:01:83:05:b0:61:e0:97:55:00:20:df:
                    4b:1c:6d:c1:a0:87:8c:71:70:56:19:d4:99:a1:99:
                    fe:57:38:54:08:bc:be:0b:48:64:b2:7c:71:ce:99:
                    a9:f8:bf:c0:25:c5:46:cc:86:07:3e:a0:95:b6:99:
                    7a:11:c7:d4:63:03:74:69:8b:23:51:c8:c2:40:9a:
                    b7:76:18:e6:e8:04:c1:cc:a9:c1:4a:32:22:33:46:
                    45:cf:7b:fe:4f:93:8e:53:5a:9e:7d:74:ef:a2:5e:
                    58:0e:c4:bd:dd:b8:e1:be:d6:57:8e:99:d3:2c:61:
                    3d:fb:61:6c:ee:7c:53:be:c3:1e:17:96:be:75:29:
                    39:ad:48:de:13:20:91:90:36:b2:0a:9d:f0:fe:cc:
                    0d:46:50:55:c9:4e:02:2b:6b:66:10:fb:63:cc:27:
                    8e:74:e0:4c:06:6a:a3:0b:cb:b5:fe:db:56:4b:b9:
                    4d:92:6b:02:9d:88:5c:d2:fc:9a:5e:6b:4f:10:7f:
                    90:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:42:FC:5F:6C:E9:EF:D4:56:3B:4F:AD:90:71:4F:7C:E8:01:3F:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5841c8e-8689-3f3a-94bb-1cd2514ddf8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b6:85:44:22:57:8f:7e:0e:17:5d:11:68:0c:3c:4b:7c:33:
         6a:0d:11:1e:7a:f3:4f:cb:bd:db:3a:33:80:37:45:57:d5:49:
         9f:94:cc:7c:3b:ba:17:b7:f8:42:95:91:55:c1:77:69:b6:bf:
         83:07:d6:c1:06:29:61:83:35:19:10:03:01:d0:43:e8:fd:4c:
         2e:42:e2:c0:29:92:62:d5:1f:29:99:63:e2:21:44:ea:6e:7e:
         3f:47:23:43:1d:9d:e4:95:65:39:eb:4e:2a:2e:20:bc:09:0c:
         65:a1:71:d9:41:b0:5c:67:d1:1b:b5:49:cc:e1:70:66:89:7c:
         24:19:de:6d:f9:af:96:83:f4:cf:c9:7a:b3:7e:6e:7f:66:ee:
         63:36:f7:9c:59:28:25:58:ed:61:f8:30:02:03:31:a4:95:4a:
         ea:bc:41:e5:91:1f:7c:fd:25:8a:34:67:8f:7a:8b:65:32:35:
         e1:2e:a8:28:73:c5:7f:a6:5d:b2:a2:bc:fe:1c:fc:ef:7f:ec:
         8f:3d:b3:38:f5:b7:9b:c5:f4:25:15:89:31:74:e2:fe:d0:6f:
         9d:a9:e5:c1:aa:a8:1d:a4:6e:a4:04:96:f5:0f:98:4e:48:40:
         a9:22:45:9d:27:30:90:2f:bb:87:54:fb:f4:b5:38:fb:93:17:
         51:67:c4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:25:05 2024 by rpki-client on console-ams.rpki-client.org