Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b610fa22-514b-365f-ac1c-a4b79eac7ba1.roa
File:                     b610fa22-514b-365f-ac1c-a4b79eac7ba1.roa (raw, json)
Hash identifier:          omPsIDCakt0ZbYYyfyAp86fXfjL+EuImrLkd7IPASbQ=
Subject key identifier:   9E:79:D7:05:92:18:91:D8:CC:84:3F:18:48:AB:53:80:D7:26:5A:FC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858479AABFE9CDF979F0C21157B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b610fa22-514b-365f-ac1c-a4b79eac7ba1.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     20940
IP address blocks:        23.40.206.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:fe:9c:df:97:9f:0c:21:15:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=52a9a2ad-c3b4-40dc-bfdb-1ccefb61090d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cf:c2:44:b0:dc:e5:4a:78:89:b4:41:48:5a:
                    7b:b5:4a:5e:5d:60:16:a1:bb:c3:d4:7c:c7:84:ee:
                    c1:f3:24:1c:47:a6:e1:ff:91:71:3a:77:8b:23:83:
                    18:2f:56:77:7b:43:77:0f:b7:75:44:8b:57:95:6f:
                    d1:a2:45:56:ee:f4:74:a5:bc:b4:b5:0b:ac:3d:4d:
                    2d:17:30:dc:83:99:08:6d:d9:16:15:74:5f:ce:b4:
                    f1:52:d4:d0:d1:58:bf:5f:8e:c2:fa:d5:4b:ff:ba:
                    bd:64:85:8a:c4:c5:3d:41:70:a9:f5:d6:3a:cf:02:
                    a6:ed:78:7e:3a:f9:c8:6c:6b:0e:d6:ef:7b:58:4e:
                    36:82:b8:73:d6:cb:12:e1:e8:93:8d:f6:29:a3:b8:
                    a0:91:18:8c:79:b6:c5:97:3d:cf:58:95:3a:fb:4d:
                    14:53:86:64:7c:0d:d5:52:a5:a9:a6:bd:03:1f:0d:
                    5f:a4:10:05:32:a3:ff:20:76:10:24:5d:7f:31:49:
                    27:8f:23:6b:54:be:90:9b:0c:b0:d3:20:8c:06:5c:
                    c6:46:f7:ad:54:e8:e7:d9:91:7d:49:bc:97:be:c3:
                    74:f8:44:ca:2c:51:08:a1:c7:18:75:dc:8e:e1:f5:
                    6f:25:aa:8b:30:2e:41:25:ce:e0:0b:e6:2e:7c:45:
                    df:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:79:D7:05:92:18:91:D8:CC:84:3F:18:48:AB:53:80:D7:26:5A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b610fa22-514b-365f-ac1c-a4b79eac7ba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.40.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:a4:19:5e:e2:73:89:e9:e2:b0:d8:d3:67:80:cb:62:45:5b:
         59:c0:f0:31:0e:3b:ba:18:5c:ad:08:fb:e8:88:01:1d:dc:21:
         97:b7:94:48:c6:20:de:3a:66:9a:61:1a:f3:dd:39:59:9e:5f:
         c0:c8:9a:fd:5c:17:5e:1d:f5:af:90:8e:a2:30:d5:81:6f:74:
         76:bd:0c:86:47:b8:ca:09:25:48:37:23:fd:52:7a:17:2e:cd:
         ec:e8:73:74:4f:77:44:83:b3:aa:5b:81:c0:6c:f1:b1:1d:55:
         51:7a:42:cb:4d:62:05:61:57:43:5b:30:80:8f:cd:a1:d1:c7:
         63:6c:5d:4f:e7:0f:0d:86:64:2c:8e:af:eb:8c:5b:bf:8f:cb:
         09:04:a7:d6:a6:66:99:23:81:32:62:19:88:68:e5:f8:de:82:
         5e:4b:d5:32:5e:12:6a:8b:06:e2:f7:e2:5d:ba:6f:31:bd:e5:
         bd:a8:f0:3e:dc:2b:20:6d:b8:10:03:89:6d:4c:3e:bf:8f:9e:
         aa:40:42:e2:60:b6:ec:83:f4:df:c4:67:52:1e:1a:c1:0f:5c:
         fc:fa:eb:9e:20:08:af:b4:5b:eb:cd:25:e5:62:53:98:99:a8:
         5f:d5:cf:ad:5f:0e:d3:e0:8b:a7:df:95:4f:36:55:a2:3e:86:
         54:e2:7a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:29 2024 by rpki-client on console-fra.rpki-client.org