Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8e220bd-61f9-3f74-a18a-cfb60a16f17e.roa
File:                     b8e220bd-61f9-3f74-a18a-cfb60a16f17e.roa (raw, json)
Hash identifier:          4MO80eN99fVqBFHjRqpq3Y04NpzBpAgHd8lqagMbdd8=
Subject key identifier:   CC:1A:B9:75:FE:69:E2:C7:29:3A:13:B0:5A:C4:68:28:2F:8D:11:2B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36E126D9D4B0DF165E10C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8e220bd-61f9-3f74-a18a-cfb60a16f17e.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     35994
IP address blocks:        23.59.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:e1:26:d9:d4:b0:df:16:5e:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=da521287-2e1f-465e-8b60-8a020c95a9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fb:7d:21:05:42:4c:f8:bf:59:79:be:0f:99:
                    38:9a:f3:b4:98:77:d2:50:35:5c:e3:de:20:bc:93:
                    59:a3:70:4b:06:9c:c9:d1:c1:dc:88:ee:95:fb:43:
                    c3:95:db:2a:83:6d:3e:2f:16:3c:73:8d:cc:77:44:
                    52:72:3b:2f:70:ed:c0:53:e9:1a:d9:72:9e:88:73:
                    0c:e9:2b:60:c2:71:c9:a5:ad:b8:dc:b3:6d:ac:a3:
                    0d:b7:24:5d:8c:67:0a:a7:41:e0:c2:6f:bf:cc:12:
                    a8:5e:e7:f0:04:c1:08:1d:db:24:60:b4:0b:7e:f0:
                    18:a2:89:1a:b6:59:fb:1b:5f:c3:c0:32:87:2d:6c:
                    c1:97:4c:e1:7c:9a:97:98:13:c0:91:22:f8:38:05:
                    b2:05:bc:cd:47:11:5c:08:08:67:e0:eb:37:bd:f0:
                    27:f6:0a:8f:6c:22:9a:31:0c:f7:08:94:ac:ae:da:
                    d1:b3:46:c9:1c:13:30:c4:a4:00:35:4f:f8:aa:c2:
                    40:58:89:f6:14:bc:c2:ac:03:3e:42:e4:6c:e7:99:
                    41:30:df:c5:9d:44:fa:94:2e:67:f2:88:4e:de:37:
                    73:e7:5c:fc:f5:2c:1b:16:2e:9e:b7:a9:17:2d:bd:
                    e2:a7:62:be:32:9f:ef:93:29:c4:e5:3c:0b:d6:9e:
                    ac:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1A:B9:75:FE:69:E2:C7:29:3A:13:B0:5A:C4:68:28:2F:8D:11:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8e220bd-61f9-3f74-a18a-cfb60a16f17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:20:b5:0a:05:a3:e4:24:16:4e:6b:ac:e4:56:77:b2:d0:41:
         4b:dc:15:df:27:0b:aa:08:5d:f5:32:58:1e:5c:b1:c0:9b:1b:
         bd:ab:b4:ec:a5:8b:02:fa:fb:1e:16:e5:92:79:be:84:8e:54:
         e8:ef:73:bd:d2:a0:7f:1b:ba:2c:d8:38:76:ca:c5:a1:53:7b:
         93:41:20:0b:a5:60:dd:88:39:49:6e:b7:94:67:b2:6b:d6:d0:
         fe:7a:89:19:49:c8:98:e7:ad:38:23:27:16:6d:20:a7:1b:e5:
         e4:b7:fb:62:aa:00:7d:86:8c:37:c8:91:c2:5d:15:94:f7:54:
         af:e6:5d:7c:9f:c1:50:e2:17:08:97:7a:36:6a:63:11:4d:51:
         34:d5:2b:3d:4b:ea:8d:e2:68:ad:53:ab:cc:68:f4:0f:79:cc:
         9d:b3:a5:1f:fe:2c:7a:89:79:c2:23:02:54:a8:d4:1c:ce:de:
         a3:dd:57:0f:4d:ca:19:82:27:85:90:8c:4d:6b:ba:5d:8a:7d:
         5a:8e:7d:fc:0d:60:bb:a9:98:93:37:ba:67:c3:9f:8e:6c:ec:
         ed:70:ea:53:7f:bc:e0:14:32:36:45:b2:42:6f:8d:fc:ab:ca:
         a2:45:24:49:3d:94:bd:0d:23:74:2b:a7:9e:24:21:03:c8:50:
         5b:ce:20:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:48:00 2024 by rpki-client on console-ams.rpki-client.org